Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: 1sX6BMdvCZ0tA1cD28Y0qlXfJAZKUjalY8bjztAUaic=
Subject key identifier: 3D:04:C0:F4:B2:A2:DB:60:65:1B:70:62:84:B4:EA:F2:5C:83:0B:46
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 01A001A6454E2F71E81DC61847A0AF3D3CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1558
Signing time: Fri 14 Aug 2026 19:01:08 +0000
Manifest this update: Fri 14 Aug 2026 19:01:08 +0000
Manifest next update: Sat 15 Aug 2026 19:01:08 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: /1p0BtdVM2PdmCQDnbG+qZ06WXms9KDZSnOdXuWnCBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:45:4e:2f:71:e8:1d:c6:18:47:a0:af:3d:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Aug 14 19:01:08 2026 GMT
Not After : Aug 15 19:01:08 2026 GMT
Subject: CN=3d04c0f4b2a2db60651b706284b4eaf25c830b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:d4:38:cc:4d:cf:8e:d0:88:78:c8:34:87:
00:ff:b1:65:85:79:cf:17:ed:c4:43:fb:21:39:cc:
dd:72:9f:5b:4d:ea:37:cf:a8:6d:bf:42:3a:0a:e3:
62:29:f6:07:95:51:ca:55:3c:62:4c:56:6b:07:01:
d0:ca:e8:28:8c:6b:30:57:bd:0e:b6:2f:89:2b:8b:
f0:be:54:40:9c:da:82:c7:51:45:5e:b6:21:f3:a4:
3a:30:f7:35:0b:e6:1c:36:0b:20:4b:69:17:09:49:
c8:02:da:f4:36:83:37:01:26:fd:58:d0:0d:51:b8:
ac:07:6c:4c:78:b1:4a:a1:6c:aa:87:d0:95:d0:51:
3d:02:08:18:bb:06:35:88:fa:96:37:8b:92:06:f2:
cd:a6:28:31:36:e6:7b:1d:a6:e4:90:71:49:d0:f5:
dd:ef:60:f8:d9:b3:de:f2:f2:7a:a1:4a:09:82:3c:
4e:dc:ce:fb:93:76:27:d2:67:2e:28:1c:09:c1:ef:
72:ab:b3:0d:5f:b5:04:cc:8f:52:43:78:cb:ec:9c:
11:d9:2b:cd:a2:5c:f7:df:d7:4d:4b:7c:9d:cc:e8:
de:c9:d7:7f:29:ce:eb:70:6c:de:57:8a:a1:0c:37:
94:84:a9:ad:0d:b5:57:24:71:5a:fa:99:0d:03:19:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:C0:F4:B2:A2:DB:60:65:1B:70:62:84:B4:EA:F2:5C:83:0B:46
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:83:97:73:61:47:88:c1:cd:6e:4a:46:2c:6e:42:7c:05:
a8:29:38:4e:dd:fb:fe:63:d8:98:44:9c:44:9b:c6:12:72:09:
9d:7a:e5:e6:e2:f9:8e:2b:b7:8b:cc:03:7a:55:ec:dc:f7:5c:
73:f2:73:ca:4e:3d:49:34:94:99:b4:88:1e:42:da:bd:16:6e:
a2:69:10:98:7c:fc:27:59:5f:ab:86:3b:d7:1b:8d:3c:ee:1f:
26:08:74:31:fd:40:b9:cf:6c:09:6e:e1:2a:d2:a4:2a:3e:b5:
10:aa:f1:51:eb:48:8e:df:7a:cc:57:d9:4e:7e:98:2a:7a:95:
92:ef:e8:4a:9e:a5:a8:11:bc:d0:f8:de:6f:f5:12:5a:e5:35:
ea:84:f8:a4:f4:57:8b:0e:e7:90:bb:aa:57:b2:02:f3:02:02:
81:78:92:36:63:6b:5b:83:9d:b8:f6:99:94:46:a9:a6:37:1f:
85:c2:2c:d0:af:ac:5c:62:4d:c7:e3:39:c9:d4:ec:7a:f2:78:
ee:7e:6b:68:e6:03:e7:9a:88:11:13:8b:48:8f:8b:5f:c7:ff:
6d:c4:72:c2:0a:41:b8:fb:01:3e:2b:ec:c2:2d:86:4a:27:af:
08:6c:96:98:26:92:4c:22:ef:a3:4d:84:ec:f8:1d:96:f7:fb:
a3:d3:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:43 2026 by rpki-client