Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: HvP4IMErRsZNy4Cm8oERzXStewYx7PEggw1Ahh4o+VI=
Subject key identifier: 54:58:91:B7:F5:D6:97:B4:3D:FA:FD:B1:A3:A7:3F:0C:B7:55:41:FA
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019E2A70098BBE2121793D5114C889ED5F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1464
Signing time: Fri 15 May 2026 07:00:45 +0000
Manifest this update: Fri 15 May 2026 07:00:45 +0000
Manifest next update: Sat 16 May 2026 07:00:45 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: +EbTh4pRTRvOjHO1IUazZCV6oRPakoGibaUDwcq5dj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:09:8b:be:21:21:79:3d:51:14:c8:89:ed:5f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: May 15 07:00:45 2026 GMT
Not After : May 16 07:00:45 2026 GMT
Subject: CN=545891b7f5d697b43dfafdb1a3a73f0cb75541fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:d0:b6:ba:31:fb:61:30:46:56:d6:e6:61:
74:d3:e4:8e:f8:f4:4b:f7:90:49:0a:94:1e:f7:f8:
2f:d5:22:52:b9:d0:d8:f5:58:6d:04:25:aa:a4:73:
a0:c4:75:a1:19:b6:c1:c4:c1:f3:c3:09:6a:0b:66:
f2:21:97:69:c7:b6:97:6e:b7:f3:da:3d:a5:da:f4:
d5:51:51:ad:15:fd:e6:1a:f5:57:81:1c:18:97:97:
21:11:58:da:c7:8e:d0:4e:db:fb:dc:bc:88:a4:6c:
d9:95:b8:ac:da:2f:87:13:78:fb:c2:01:da:c3:52:
04:87:db:33:41:4e:54:da:f9:f6:c5:dc:13:3c:4f:
ff:02:f3:35:f0:fd:31:53:67:07:5e:fe:52:dd:85:
28:02:78:09:b2:87:cd:61:71:cc:cc:a3:51:7e:6d:
4b:c4:ce:6a:8f:40:d3:14:cb:c0:86:0e:aa:70:e2:
64:58:38:06:b8:75:49:be:b2:78:71:bc:12:92:ff:
1d:b2:2a:35:8b:a8:f8:e8:1b:81:45:0d:94:c4:86:
da:25:d6:c8:c2:4f:17:48:b3:86:fe:fb:28:d6:48:
32:2b:af:3c:90:b6:49:85:c9:86:3f:82:7a:69:ca:
5e:d5:c6:14:4f:1e:3f:7c:c8:03:62:2e:77:53:db:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:91:B7:F5:D6:97:B4:3D:FA:FD:B1:A3:A7:3F:0C:B7:55:41:FA
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:a6:da:47:78:b2:d2:b3:05:6b:96:b7:b4:1b:1a:f9:59:
ba:cc:55:cd:92:55:16:e6:2a:1b:c3:27:d5:05:6a:e9:26:5b:
e7:36:b5:f7:6b:b3:5e:91:8c:f6:bf:2b:21:2a:30:a9:d5:77:
b0:f3:62:b0:df:e6:26:80:d3:d9:20:0b:82:2e:c0:4c:1a:67:
71:41:0c:55:f8:18:50:47:c4:e7:a0:a3:99:a3:30:cc:9a:91:
a7:29:2a:1c:52:e5:25:d2:79:8d:55:65:66:20:21:7e:ad:a5:
e4:f5:ae:d1:66:00:26:bc:9f:5f:3e:14:de:3f:fb:76:90:f8:
49:f3:43:26:85:60:68:63:d0:27:e8:45:ef:f9:46:af:cf:46:
19:95:8e:4d:fe:b2:7e:f6:a9:9e:c7:3d:4f:6f:c1:55:26:a4:
ee:c6:43:73:ba:8a:4a:b4:fb:e1:ee:03:98:7d:64:c9:df:53:
9f:ac:99:5a:6a:92:2f:1d:d2:ad:35:07:d6:0d:e5:95:4e:cc:
7e:a7:c7:d5:02:38:d0:16:a6:6d:21:16:56:ed:c2:f5:a4:43:
15:71:60:98:a1:61:2f:11:86:d7:90:aa:3f:68:45:fa:ce:4b:
d8:a2:8f:c6:9d:92:15:f2:da:1a:79:73:5c:3e:07:d0:e2:2a:
54:b7:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:21 2026 by rpki-client