Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: lCOqqvFYCfqDqBjKFEbepy7EBP4AaY3Kh/lSaUT1is0=
Subject key identifier: 2A:C5:59:66:09:CF:38:02:34:8D:20:3A:95:2D:47:2E:5E:09:01:C7
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019D3865EAE9E49069DD25F0C6C27F3569A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 13D0
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: +/DXRPX5hs6UvzrJQYo4cSGi5FC19FfqSfhb4L9Qqoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:e9:e4:90:69:dd:25:f0:c6:c2:7f:35:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=2ac5596609cf3802348d203a952d472e5e0901c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:3f:a9:b3:34:ab:ed:e8:58:57:5b:2f:b3:
bf:cc:a5:4b:ca:0d:b7:f2:b9:30:d3:be:4e:f3:7d:
bf:89:ad:2b:29:f0:e3:b5:7b:92:42:f4:97:ef:8e:
86:2f:df:e9:fc:0b:07:3e:96:84:e1:e0:ca:1c:2f:
d4:1e:6a:f8:8c:50:ac:4c:72:b3:88:c6:0a:d3:9b:
ae:9c:d1:4b:5b:be:a7:a4:cb:43:b7:f3:c1:63:1a:
5f:6a:87:1c:8e:2f:7d:7a:22:6b:91:f3:81:a6:2e:
b8:a0:e3:24:98:2f:02:e3:7e:91:a8:dd:84:14:b2:
00:f9:8f:0e:4c:8c:98:e2:a9:f5:c6:14:c1:e1:c4:
60:63:30:13:4f:84:30:23:da:97:80:12:1f:54:b9:
26:10:a8:1d:b9:68:58:7f:aa:8f:86:16:ef:b8:77:
74:01:84:19:cc:90:99:24:f7:02:be:70:2b:f3:7a:
72:bf:8e:52:4e:8f:79:a4:0e:71:44:aa:71:36:3c:
1e:48:79:60:cb:a7:09:21:50:e3:3e:a1:11:34:93:
db:af:04:9f:ce:66:22:5b:8c:ba:06:7b:ad:db:6c:
05:35:3f:27:92:02:10:94:7d:eb:51:fd:4b:11:a3:
53:ae:0d:e8:8c:4c:7d:be:5c:ac:c5:46:be:77:13:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:59:66:09:CF:38:02:34:8D:20:3A:95:2D:47:2E:5E:09:01:C7
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1e:c5:5f:59:7c:f0:e8:df:eb:07:30:0a:65:3a:6b:83:8c:
08:ca:e5:fa:eb:e9:6e:61:c7:e8:66:91:b9:10:f0:75:51:b9:
e9:d6:ed:05:cd:71:ba:8d:1e:f1:e5:40:ec:5c:69:e9:22:bc:
7c:ce:36:2b:ff:da:85:0b:89:66:ed:f4:d3:e6:7b:fc:b8:15:
7c:26:4f:27:6a:f9:3f:7b:98:2e:7e:ae:1c:d4:e9:e0:ec:23:
42:a4:81:28:fe:da:e2:b7:90:7f:5c:2c:da:af:ee:dd:0f:70:
a9:b0:ff:5f:e0:33:d4:cf:9a:9c:02:c1:11:16:b3:bd:fb:e1:
82:e7:c0:75:7a:da:ae:40:6b:66:32:f5:4f:86:8b:73:9f:5d:
83:67:9a:84:8b:ca:c2:60:c4:07:0d:75:a7:f4:85:67:56:9d:
1a:fe:a4:dc:85:3f:26:8c:dd:ee:08:e6:db:2e:0a:e1:a4:47:
46:70:be:59:e5:f4:12:72:be:86:ff:cd:b5:dd:21:60:08:c1:
05:fe:b3:90:e4:29:d1:a4:96:5a:35:73:48:75:80:59:d3:51:
1e:51:b4:2c:4d:f3:b7:12:e7:5a:48:30:4f:40:fe:f4:fc:d1:
fa:25:25:26:4b:bd:3f:3a:5d:a8:78:fc:f6:ae:24:1c:a7:9b:
a0:e2:0f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zerp5JBp3SXwxsJ/NWmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGNkNmUxZDVmY2MwNDViOWU2NTk5YzBjYWVhMTdkNDc2
ODVmOTUwHhcNMjYwMzI5MDcwMTM2WhcNMjYwMzMwMDcwMTM2WjAzMTEwLwYDVQQD
EygyYWM1NTk2NjA5Y2YzODAyMzQ4ZDIwM2E5NTJkNDcyZTVlMDkwMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcI/qbM0q+3oWFdbL7O/zKVLyg23
8rkw075O832/ia0rKfDjtXuSQvSX746GL9/p/AsHPpaE4eDKHC/UHmr4jFCsTHKz
iMYK05uunNFLW76npMtDt/PBYxpfaoccji99eiJrkfOBpi64oOMkmC8C436RqN2E
FLIA+Y8OTIyY4qn1xhTB4cRgYzATT4QwI9qXgBIfVLkmEKgduWhYf6qPhhbvuHd0
AYQZzJCZJPcCvnAr83pyv45STo95pA5xRKpxNjweSHlgy6cJIVDjPqERNJPbrwSf
zmYiW4y6Bnut22wFNT8nkgIQlH3rUf1LEaNTrg3ojEx9vlysxUa+dxM2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrFWWYJzzgCNI0gOpUtRy5eCQHHMB8GA1UdIwQY
MBaAFE+M1uHV/MBFueZZnAyuoX1HaF+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYt
MmVjYTc2YmM3ZmNhLzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYtMmVjYTc2YmM3ZmNh
LzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR7FX1l8
8Ojf6wcwCmU6a4OMCMrl+uvpbmHH6GaRuRDwdVG56dbtBc1xuo0e8eVA7Fxp6SK8
fM42K//ahQuJZu300+Z7/LgVfCZPJ2r5P3uYLn6uHNTp4OwjQqSBKP7a4reQf1ws
2q/u3Q9wqbD/X+Az1M+anALBERazvfvhgufAdXrarkBrZjL1T4aLc59dg2eahIvK
wmDEBw11p/SFZ1adGv6k3IU/Jozd7gjm2y4K4aRHRnC+WeX0EnK+hv/Ntd0hYAjB
Bf6zkOQp0aSWWjVzSHWAWdNRHlG0LE3ztxLnWkgwT0D+9PzR+iUlJku9PzpdqHj8
9q4kHKeboOIP6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:59 2026 by rpki-client