Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: vkP6Smu+5/3P+bFYnjDbHeWzBURfb3DXrWqm1/lLGno=
Subject key identifier: D8:D4:DD:81:AF:85:3C:21:60:75:51:97:27:BE:36:F7:8A:E3:F5:8C
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019D37C10744B087A8A50242B298CF1492E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: 2yNvnD1lmLbPPKFlQkp9-VHyRE0.roa (hash: zlpNQG2pRqEeG9wmnXhIHFiAawnx6f7m+aNjLjl7SQw=)
2: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: FIjFrq7QTsFg6qWCoUzoPrHlrn8qm5GKBUHjMqjUE4w=)
3: jPtnMh6W4G2WuaIjEWGJ9cYgDew.roa (hash: /8F9d1Hzc1eMJK3xcWh9iLgYlz/NTYIkw82sKvGLhwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:44:b0:87:a8:a5:02:42:b2:98:cf:14:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=d8d4dd81af853c216075519727be36f78ae3f58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:d6:74:92:e0:f4:c1:80:49:8a:f2:b7:57:
b0:a8:0a:18:f1:f1:6c:16:9d:ad:9e:9e:6f:30:4a:
5d:bf:c9:6c:43:94:85:38:dc:aa:92:2d:69:71:2b:
32:7c:20:cd:73:ec:32:5f:ed:df:97:86:a9:d6:3d:
5a:a6:b5:7d:1c:ed:45:f2:58:af:a4:a4:97:7f:9c:
2d:8d:9d:c1:d8:93:12:06:95:5c:cd:45:91:0b:21:
4c:0f:f2:8a:5e:03:db:15:eb:fe:5d:39:5c:0f:31:
07:50:ee:a5:34:0a:f4:a3:97:08:e7:d6:17:e1:37:
4d:b3:ed:f1:95:7d:0a:14:14:ab:1d:55:f6:b6:de:
e6:5c:ab:6e:a2:d5:13:54:34:8d:d6:cf:0a:1b:98:
46:27:93:f9:a2:29:a9:ec:17:1d:b9:3f:9f:b4:2b:
b0:9e:3b:27:70:71:b2:84:55:6c:39:88:6b:a1:65:
32:6b:c5:5c:42:e6:ee:9e:39:88:34:69:ad:3f:39:
84:22:0e:81:be:3d:bc:50:c4:8f:70:1c:77:af:b9:
ec:5e:f7:c6:9d:ac:19:48:4b:43:6d:a9:34:8b:73:
1c:2e:3d:6d:ba:90:30:bc:6c:e5:b5:44:83:86:0d:
ca:ce:4c:ce:d6:ab:2c:d9:0a:45:b8:b6:a3:ec:66:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:DD:81:AF:85:3C:21:60:75:51:97:27:BE:36:F7:8A:E3:F5:8C
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:c4:03:93:35:6c:97:3c:18:2d:35:bb:d7:9e:db:df:a8:
7c:eb:e1:c0:37:18:cb:06:c7:a4:b5:ee:21:4a:b7:92:c0:ea:
0e:c4:db:28:13:df:6a:b9:1d:07:49:e6:28:94:a0:a8:bd:48:
08:b2:34:ff:a6:5c:25:60:7b:ce:ed:5f:29:4e:92:94:24:04:
ca:d0:c5:0c:2e:3a:4b:58:29:a4:4a:ed:52:31:cb:98:cf:a4:
08:a1:93:30:60:1e:e8:53:cc:91:9c:e5:4d:f2:68:18:44:16:
34:76:9b:7c:93:e2:79:39:ab:48:4f:05:b6:f4:db:ad:a1:4a:
4e:8f:64:f5:e8:96:53:b9:dd:f3:94:01:c4:ac:8e:fb:f4:b5:
e1:37:3e:cf:98:b3:39:f5:7e:e8:56:ca:eb:71:67:bb:b5:64:
84:dc:75:27:34:30:71:69:12:0f:e1:07:f4:7a:4a:46:ce:b2:
57:e4:eb:00:c7:81:15:60:73:d0:bf:84:fd:bd:14:3c:4c:92:
d6:61:f3:97:ea:f0:21:ff:bc:23:25:66:ca:46:ec:ae:7a:ef:
54:7d:97:c2:9e:2e:de:84:39:52:0e:08:c4:c1:9b:af:86:d2:
bd:6a:a9:89:7e:27:cf:05:8c:0f:48:8c:2e:e0:a7:2a:6c:05:
b8:00:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:02 2026 by rpki-client