Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: AJ26LI08euGqrTBaLbHpy0tEvr0y0Qta9buYXufpRYY=
Subject key identifier: CA:F7:0B:AD:70:67:81:2E:F3:FB:27:98:3C:B9:63:7B:C7:9A:A1:0D
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019F122E10C4276C11C27272B5B6338BC1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 14DC
Signing time: Mon 29 Jun 2026 07:00:36 +0000
Manifest this update: Mon 29 Jun 2026 07:00:36 +0000
Manifest next update: Tue 30 Jun 2026 07:00:36 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 4q70KSP6ugwe4vzw5usNArIy2CO8YsBVTJzI+1AG2ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:10:c4:27:6c:11:c2:72:72:b5:b6:33:8b:c1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jun 29 07:00:36 2026 GMT
Not After : Jun 30 07:00:36 2026 GMT
Subject: CN=caf70bad7067812ef3fb27983cb9637bc79aa10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:6a:b6:cc:5f:b7:d7:2c:33:65:92:f2:8c:
d0:12:be:d8:91:39:c7:56:1b:e2:bd:d9:6a:2f:c8:
f7:a5:f4:92:91:7d:d9:04:53:70:46:bb:d3:56:32:
92:94:94:f2:cc:ae:95:42:94:14:e7:05:9a:f4:21:
66:0c:af:15:71:44:f0:f5:2f:47:63:4c:18:30:e4:
24:d7:f8:82:7e:14:5f:31:c2:3d:33:9b:d2:ce:25:
46:89:e8:b1:82:52:32:02:85:6d:b2:69:f8:8f:df:
b8:03:de:5a:65:ab:2a:0e:3a:28:e5:ef:30:89:c6:
74:77:ac:23:e5:d3:06:46:51:f9:4f:a5:c2:eb:e7:
1c:82:34:31:c4:45:65:39:72:10:5f:8d:bb:bf:ba:
05:57:37:f8:68:6a:3b:f5:e4:cd:4e:a7:94:b5:e9:
84:f8:9c:09:c5:8c:20:f4:de:3b:7f:11:13:f5:32:
04:1c:b9:f1:43:4d:03:46:f6:9f:32:f6:4e:4d:6b:
49:69:6f:57:9e:21:73:c4:e6:59:97:43:65:2c:ed:
0c:19:ba:10:ec:55:f9:77:8d:67:d8:b6:a0:10:89:
c9:c6:d4:44:60:e3:81:b7:fb:e1:39:ea:1d:d9:00:
05:f5:6f:44:6d:19:e8:e6:12:cf:ab:55:29:09:fa:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:0B:AD:70:67:81:2E:F3:FB:27:98:3C:B9:63:7B:C7:9A:A1:0D
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:5f:34:1a:ac:72:49:b7:33:87:65:58:c7:21:af:cf:38:
9e:4f:c8:77:15:86:dd:36:6a:c0:5d:47:07:02:5c:3b:d4:6c:
f4:14:a6:90:d4:fa:f6:d9:35:41:3d:4f:18:ff:13:ef:5c:d9:
24:63:16:a6:02:5b:10:1c:b7:55:d2:5b:1b:18:4e:be:e0:02:
9c:88:d2:1c:56:08:9c:11:79:bd:9b:53:5e:43:28:6b:23:12:
de:0d:8b:9b:c0:31:fd:69:2e:91:65:c0:ba:33:e2:04:1d:b8:
a5:7f:da:f1:38:19:fe:bd:9d:12:70:d2:0d:c5:dc:df:13:4f:
b4:cb:4e:a9:56:1e:5d:d8:90:df:04:87:91:4d:2a:a6:59:bd:
80:94:da:d8:16:82:1d:6d:d3:3a:01:32:20:a0:d1:cb:76:ae:
57:ff:1f:77:4d:15:c6:81:70:a7:a4:23:83:10:10:6e:e5:1b:
7e:c9:0e:d2:f7:82:29:59:32:75:ca:21:3d:66:ea:d4:3f:05:
35:dd:93:ea:b0:84:ec:81:2c:72:9d:74:e3:b6:24:92:68:46:
e5:13:a6:75:18:3f:ba:bb:04:7a:a4:7b:51:a8:49:d8:7a:a5:
9b:77:dc:3c:e0:84:09:b9:52:c7:9d:0e:af:16:26:1f:80:e2:
95:1f:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:52 2026 by rpki-client