Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: U/WOuxFxSCpzwwmhCXV49rHmmiQC8vwrGB6l1/IYzp0=
Subject key identifier: 10:F0:65:8D:CE:00:38:66:F2:55:F4:62:8A:A2:76:CE:68:4B:45:58
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 019CF04C3E6EB073E7BCF5287EA98D354841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 1872
Signing time: Sun 15 Mar 2026 07:00:54 +0000
Manifest this update: Sun 15 Mar 2026 07:00:54 +0000
Manifest next update: Mon 16 Mar 2026 07:00:54 +0000
Files and hashes: 1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=)
2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=)
3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: PVOFCa8yaD8f+MRu7ZPITjdPfmr7jz5uN3DttN8KECM=)
4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:4c:3e:6e:b0:73:e7:bc:f5:28:7e:a9:8d:35:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Mar 15 07:00:54 2026 GMT
Not After : Mar 16 07:00:54 2026 GMT
Subject: CN=10f0658dce003866f255f4628aa276ce684b4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:ac:3c:ed:ed:40:cf:0e:10:5a:25:28:8d:
ac:49:63:28:3b:e0:cf:4e:7c:05:23:67:22:13:cd:
53:a4:d8:8a:d0:b4:8d:bb:5e:64:11:ef:1c:6b:76:
d1:57:14:29:3d:21:e2:9c:20:e2:1b:2d:c1:32:5a:
3d:36:69:9e:27:9b:17:d9:52:7f:9e:ee:67:59:21:
c3:7a:44:a2:73:a1:31:be:2c:7f:9e:c8:1b:b4:e6:
e0:79:c3:0f:43:90:78:fe:72:79:37:e6:5e:3d:30:
f8:94:a2:bf:10:4c:fd:6e:1d:e4:9d:b3:e8:31:3b:
38:bb:45:19:dc:eb:05:28:7d:ea:69:e7:ef:bd:79:
bf:31:29:7d:21:96:3e:ab:2d:c1:9d:a2:a6:9a:ef:
8d:49:bb:8b:42:ad:c8:b3:bc:82:02:52:cf:3c:24:
40:5b:79:2a:19:27:24:97:ff:02:13:9b:f6:7b:82:
c4:bd:0b:e1:93:83:56:7d:35:61:ac:26:64:8b:c2:
8a:c3:81:a5:da:a6:d3:75:47:e2:eb:41:b8:b4:68:
2e:c3:26:9a:33:d4:8a:80:a8:77:e7:70:4a:07:93:
f6:cd:81:54:e9:26:b4:ae:87:05:fd:9e:59:10:13:
33:be:7e:b5:c1:ae:f9:93:51:9d:01:cd:6a:d4:04:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:65:8D:CE:00:38:66:F2:55:F4:62:8A:A2:76:CE:68:4B:45:58
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:51:a1:b8:c2:4a:0f:2c:f9:db:e7:9a:fe:0c:30:dd:d7:28:
1c:52:54:38:2a:c8:96:82:79:30:b2:77:f6:de:6b:f6:d0:ba:
ec:db:96:ec:3c:0f:21:4d:8e:b7:d8:cd:7c:64:ce:f7:9e:37:
a2:24:5c:be:d7:4c:55:e7:41:0d:c8:3e:71:f4:34:ae:6a:c5:
19:65:d7:c1:3e:3f:b6:ab:66:9c:77:4e:de:5c:d3:e2:d1:2d:
66:68:f2:00:7d:2d:d2:fc:10:57:ba:5c:b9:42:84:63:b7:27:
e7:fc:d2:2c:1b:a0:aa:34:ba:71:fb:f3:6a:73:1a:65:3c:5d:
ff:85:ff:f0:48:c4:77:73:b5:b2:5d:3f:fe:3d:d3:f3:46:f8:
52:c8:6b:d1:a2:99:fa:a7:97:ec:55:8e:51:93:23:3e:fa:09:
a4:bf:d2:5e:6d:46:af:c1:88:82:94:ea:7e:62:1d:76:95:1d:
58:35:17:05:2f:f1:d8:03:ea:7e:a8:66:a6:7d:d9:e0:2a:91:
6e:6a:f5:37:e2:d5:9e:1e:41:56:ab:24:3f:52:3e:f6:2e:d5:
a1:f1:b4:bd:6e:36:7d:af:41:99:05:1f:00:69:f2:24:c1:cf:
26:84:7f:2f:fe:f7:10:df:ce:9f:32:37:81:0e:fe:0f:a5:76:
f7:c6:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:26:41 2026 by rpki-client