Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: hHxNTk4MpS4AXmyOJKnjBY1xwK/evDfv/ryq8rELt3A=
Subject key identifier: EF:BB:4B:D5:E5:5B:C5:04:0D:F0:98:CB:EC:1A:B5:64:37:B3:0C:0B
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019CD5431607C9D2539B16E6D7B391632190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 185C
Signing time: Tue 10 Mar 2026 01:01:09 +0000
Manifest this update: Tue 10 Mar 2026 01:01:09 +0000
Manifest next update: Wed 11 Mar 2026 01:01:09 +0000
Files and hashes: 1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: LDEF6jLsJOtAwmtCcvdSgVtkCwvyH5jBXgh9cxfIKSM=)
2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:43:16:07:c9:d2:53:9b:16:e6:d7:b3:91:63:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Mar 10 01:01:09 2026 GMT
Not After : Mar 11 01:01:09 2026 GMT
Subject: CN=efbb4bd5e55bc5040df098cbec1ab56437b30c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:fd:03:ac:51:a9:c7:5b:ee:b8:e9:06:88:
df:53:04:fb:df:fc:e1:1a:3a:8c:55:5e:a5:3c:cc:
8b:fa:8f:10:43:9d:28:e0:27:a6:fe:26:ce:31:e0:
0c:3e:a4:1a:63:40:ca:8a:31:53:46:a0:a9:03:31:
64:cb:93:73:4d:55:66:4a:3c:5d:63:be:f4:b0:8d:
5c:f0:98:34:32:d6:33:38:97:36:b1:48:6b:f9:11:
8a:f3:45:bf:2b:d8:a8:6a:39:44:df:6b:00:24:a6:
4e:e8:b1:89:28:ce:39:73:5e:0f:fd:a1:6a:a2:b4:
79:3a:cc:88:73:f7:9a:72:e2:36:ae:a2:37:3e:c8:
1b:4e:76:5e:fa:b9:77:dc:7b:39:da:f9:db:e6:93:
3f:d0:4a:0a:a3:11:86:d0:94:a3:98:45:9d:a1:52:
5f:98:b8:c7:52:82:1b:ad:28:55:59:c3:04:dc:47:
89:69:70:b3:7d:80:04:23:7d:a8:54:84:fd:ca:28:
51:68:41:9e:c8:76:46:ce:35:f8:d9:f5:25:b5:44:
88:4b:64:5f:c0:03:1b:3c:85:3e:f6:84:97:e7:fd:
eb:b5:56:43:12:99:f8:5d:4f:78:6f:c0:47:fa:85:
75:18:4f:ff:3f:3c:6f:0d:d8:2a:7e:82:d9:8f:91:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:4B:D5:E5:5B:C5:04:0D:F0:98:CB:EC:1A:B5:64:37:B3:0C:0B
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:86:94:6c:44:55:74:c2:25:87:11:33:03:c6:2b:01:63:d6:
0c:26:51:34:62:54:44:5b:d5:75:5a:f9:da:26:02:74:6d:2e:
f7:d9:10:e8:08:bd:8c:e2:2b:c4:e1:71:83:33:ab:35:b3:25:
86:69:be:93:9c:9e:da:2c:4f:5c:f2:2c:86:82:c3:be:37:dc:
38:fb:46:71:7f:f9:96:52:dd:71:36:31:2b:a5:17:d5:df:1b:
a8:b4:3d:ef:ad:fc:0b:49:05:14:38:e3:6b:98:11:85:dc:41:
02:c1:c8:04:71:bf:6a:f4:6f:7b:72:bf:63:d8:a0:59:6a:1d:
86:82:53:12:60:fd:c4:97:81:c2:9f:88:d8:e7:4c:e8:15:39:
77:15:32:11:71:3c:4d:6b:b2:81:26:49:12:4a:f6:d2:33:f7:
d1:49:62:00:ff:65:13:99:8b:c5:b6:6a:f5:89:cb:1b:9e:25:
39:29:8e:12:30:9c:95:b3:78:68:75:2b:0c:f1:00:c1:c0:a5:
9c:6a:ef:e1:55:e9:f2:9c:40:2b:de:b2:87:f9:e7:28:2e:02:
4b:b6:7f:59:f6:a7:52:15:49:8b:a1:55:24:78:15:44:5f:2b:
c3:e5:d0:97:b3:de:f8:f9:dd:42:ae:11:eb:d6:f4:b1:74:73:
5f:01:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:08:12 2026 by rpki-client