Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: KAezBBhgGifdcIbxvTn1MBCuze0nS7e8YLkj8PmI79U=
Subject key identifier: 79:01:92:41:61:0A:D6:32:69:C7:DC:A9:59:8C:A3:C7:EA:17:F1:CD
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 01A115CEF919A66EEB7EE834B59CCFDE32F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 15E7
Signing time: Wed 07 Oct 2026 10:00:47 +0000
Manifest this update: Wed 07 Oct 2026 10:00:47 +0000
Manifest next update: Thu 08 Oct 2026 10:00:47 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: JlJX8yxmPFKKuV1jVy5Ole1w5STuGGkBPMxTZH7feLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:ce:f9:19:a6:6e:eb:7e:e8:34:b5:9c:cf:de:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Oct 7 10:00:47 2026 GMT
Not After : Oct 8 10:00:47 2026 GMT
Subject: CN=79019241610ad63269c7dca9598ca3c7ea17f1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:14:52:01:71:dc:73:df:96:3c:ec:5c:d2:
23:61:ed:ed:40:da:55:23:e5:be:09:ee:78:5e:a0:
f1:c9:02:b3:a4:e1:bd:97:12:3b:40:4a:e3:fa:82:
d3:cf:53:12:2a:7b:28:60:69:2a:5b:cb:86:8d:05:
b8:55:47:24:d6:02:ee:21:39:f3:8a:b9:19:a5:b2:
b0:d0:18:f3:8b:4e:c7:f9:d3:ca:80:77:0c:c1:84:
e3:76:ba:06:fb:ad:4a:e3:94:63:e1:f1:8c:91:ea:
86:81:87:2b:53:b2:7b:25:8b:8b:99:87:73:ac:98:
b5:e9:23:ee:21:c8:36:1e:f0:ac:2b:ce:22:8b:3e:
51:45:4f:85:8a:2b:34:e0:f8:66:05:5f:1b:38:c7:
04:16:29:08:fe:ca:e4:4e:dc:6d:7a:80:25:3b:2d:
40:e2:18:4b:11:03:07:f3:86:ab:3f:56:44:e6:e0:
47:a6:76:d9:0c:97:cb:4b:06:8a:d8:ff:20:11:49:
a2:6b:96:58:12:3d:03:0b:35:88:87:d1:1d:61:10:
bd:b1:a5:f5:4c:d5:27:41:ca:75:05:54:ab:32:54:
a5:c5:b9:64:de:73:c9:d3:3a:9d:33:3c:f3:b9:e1:
87:98:c5:bb:21:1f:a9:82:ee:f6:5e:b1:a0:36:b3:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:92:41:61:0A:D6:32:69:C7:DC:A9:59:8C:A3:C7:EA:17:F1:CD
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f0:bc:cb:93:8e:b2:7c:5c:4c:1c:70:a9:c0:2a:eb:84:60:
15:56:ef:1e:00:fc:ce:3a:3b:1c:c7:0e:e2:f3:39:a1:51:fc:
25:01:aa:9b:92:d2:03:18:77:1b:a6:46:d6:ba:5a:f0:54:11:
0b:3c:d1:d7:ac:5f:eb:fa:93:56:c2:44:0b:7a:da:e0:f4:13:
da:27:97:da:c0:b5:d7:7d:0d:58:de:4f:7d:b2:9a:3f:db:0a:
ae:de:10:38:b1:02:61:05:32:40:e6:c2:85:6a:51:5d:d0:41:
32:33:75:c8:80:77:dd:82:86:7a:4c:73:da:95:97:63:61:f9:
02:55:90:1a:e6:4c:aa:47:07:eb:cc:b7:4a:56:b0:78:18:b9:
b0:56:a0:2b:3f:16:c4:90:57:46:9f:81:f8:e3:12:80:b6:72:
94:f0:7a:af:63:74:10:a2:6e:8a:cf:4d:14:65:dd:37:22:08:
00:54:c9:d2:9b:b1:ac:c5:99:47:ac:37:09:61:33:f3:6c:c0:
ed:6a:ee:4b:67:3e:48:92:fb:79:19:04:33:74:d2:55:f6:3b:
0c:fe:bb:1c:a1:e0:5f:06:5b:f7:ea:6f:1c:85:95:db:1e:db:
5f:af:9f:1d:97:2a:83:e5:5f:0b:06:53:54:ce:47:30:d3:a1:
b4:96:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:37 2026 by rpki-client