Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: dwo0iz/cRSzYq9/ncaYFw2PVRQvxuHlzMJSfwltJyOQ=
Subject key identifier: A1:CB:F4:B6:77:3A:6E:89:AD:26:44:81:0B:0E:44:E3:72:DE:3A:08
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019CD7315E99D4080C77797D294B8007C4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 185D
Signing time: Tue 10 Mar 2026 10:01:02 +0000
Manifest this update: Tue 10 Mar 2026 10:01:02 +0000
Manifest next update: Wed 11 Mar 2026 10:01:02 +0000
Files and hashes: 1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: EEfqejzcvdih8oVo/tihfToIMC5oih1Zz0SZrXIik3c=)
2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:31:5e:99:d4:08:0c:77:79:7d:29:4b:80:07:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Mar 10 10:01:02 2026 GMT
Not After : Mar 11 10:01:02 2026 GMT
Subject: CN=a1cbf4b6773a6e89ad2644810b0e44e372de3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:bb:7e:d9:07:8c:da:55:44:74:50:35:7f:
50:36:a4:f3:85:f7:9b:2f:ec:e0:fc:7e:9c:bc:70:
cb:80:13:66:ae:94:45:07:70:a9:9c:f9:4c:15:ee:
33:38:ad:b7:2a:54:a2:76:30:ca:ae:c8:b2:24:bf:
ca:2c:f4:07:80:52:da:c7:30:a3:b4:6f:a8:3a:b0:
48:a0:3d:b8:9d:2d:d3:86:d2:09:b5:a2:d6:bf:f0:
10:00:16:4e:b0:04:19:57:cc:0c:c9:03:01:26:db:
4c:ee:83:fc:18:0d:30:b8:8b:f8:da:e8:13:31:de:
42:4e:a0:03:cd:89:f2:cd:c3:13:e6:12:03:1a:02:
19:a4:6a:53:9a:4f:08:ee:4c:2f:e8:0a:1f:7b:93:
83:11:12:7c:12:5c:66:4d:2b:59:e8:14:3d:11:23:
c3:1f:e2:a1:5b:40:61:35:db:a4:c4:df:dc:cb:82:
f1:02:78:c4:c8:0a:b7:e4:68:ff:c6:a0:47:2a:29:
44:95:a4:e2:82:d0:11:64:f0:de:31:46:80:67:b6:
70:ae:0e:d1:3d:22:08:94:b0:08:64:3a:17:00:d1:
d5:6d:00:f2:41:63:a9:c1:a5:e2:cc:ef:21:63:b2:
11:b4:6b:fe:ef:ea:84:f4:b2:03:f9:d2:70:99:ed:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:F4:B6:77:3A:6E:89:AD:26:44:81:0B:0E:44:E3:72:DE:3A:08
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:4a:e0:26:40:01:0d:4a:96:08:ef:c9:ee:52:5d:34:ef:
ed:50:87:45:0c:49:8a:4b:54:d6:d5:44:7a:92:1a:c3:ce:45:
1a:60:3f:20:06:b0:12:af:b6:38:ce:0d:7a:b3:32:84:e2:f5:
11:ce:05:e3:55:a0:ac:b5:53:00:50:4a:bc:b6:91:8f:8d:16:
4b:63:6a:55:e3:00:c7:a9:ac:67:b2:33:0e:d9:63:7c:d9:25:
9b:f6:56:05:07:df:78:1b:7f:27:5d:a9:df:47:ef:58:62:b8:
6b:ab:2a:95:88:a4:af:b9:d7:ed:c2:ca:43:c9:bc:d1:b3:1c:
17:df:a6:11:48:dd:0c:03:a7:52:e3:22:7d:18:c6:9c:58:56:
75:6e:07:18:42:c9:7c:d4:6e:b6:5c:38:a2:7f:27:e4:5e:14:
bf:5c:10:f8:ec:08:97:90:19:04:67:c0:12:dd:d5:79:c2:0b:
79:51:24:89:84:41:82:30:e6:b1:e8:cd:02:33:bd:54:46:46:
a0:7d:7c:10:b8:26:4b:1b:a4:cb:54:1c:ff:58:aa:e6:ff:e0:
0a:20:e7:02:44:84:ab:88:50:21:8b:22:2b:c6:c6:f9:1d:de:
9b:a7:ed:76:91:d4:bc:24:d4:34:2b:34:88:fa:4a:80:67:2f:
81:e2:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 15:25:36 2026 by rpki-client