Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: fmYdLbx/DaUpQ0HlHZaSkprECMMjW799WFSoAQFLvU8=
Subject key identifier: F0:1F:B9:D9:7A:BA:43:B3:33:CB:33:47:77:22:E7:1A:E0:E5:D0:2D
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019CE85BA61C53B3461C6EABCD1127CE2FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0DBA
Signing time: Fri 13 Mar 2026 18:00:46 +0000
Manifest this update: Fri 13 Mar 2026 18:00:46 +0000
Manifest next update: Sat 14 Mar 2026 18:00:46 +0000
Files and hashes: 1: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
2: G2_PiUJpUwNaL9OFJdICG-GBzaI.roa (hash: lDduugUTdXOP9UBT5qryDM5SzsJ+d6xRkObDWeT06oc=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: G7phjzDUcGAvWkyv7khZB8q6sBLU5BvvzlfWCUMWHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5b:a6:1c:53:b3:46:1c:6e:ab:cd:11:27:ce:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Mar 13 18:00:46 2026 GMT
Not After : Mar 14 18:00:46 2026 GMT
Subject: CN=f01fb9d97aba43b333cb33477722e71ae0e5d02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:ee:ee:56:9f:a3:60:35:37:4c:11:45:8e:
22:b2:76:84:2c:19:19:f7:4b:ea:0a:1c:b6:df:13:
89:18:f6:a9:6a:ac:24:e6:2f:26:47:f4:b2:3a:ee:
16:71:3b:0c:3b:ce:18:de:32:5d:fe:cc:c7:37:b3:
69:e8:b6:93:49:1d:7a:04:b6:d3:22:54:37:6e:9a:
be:6e:2c:eb:36:c2:7e:e8:31:ad:fb:7d:82:dd:f3:
f6:4f:ef:f4:e6:24:22:86:75:8c:2e:c4:22:55:9e:
12:1f:af:34:d5:3c:71:b4:27:ad:1d:80:ec:95:ec:
de:b6:5d:da:b2:d6:98:20:8d:8d:49:21:d7:5d:b8:
37:b0:bc:4f:cb:d3:18:f1:35:ce:24:16:76:50:16:
1b:1e:87:8a:b7:d3:ba:1d:a4:6a:f2:e2:bb:ce:43:
0b:a5:3c:3a:96:88:3e:52:94:ae:32:4c:d1:73:47:
08:49:37:e3:6d:7e:1d:01:58:44:45:8f:ac:a6:4f:
38:9b:ff:eb:31:05:43:54:06:fe:52:77:a7:bc:78:
54:e3:79:ef:96:28:58:c6:93:88:0d:9a:05:b4:ad:
83:30:7d:47:08:c9:fa:71:05:0e:5b:76:0c:75:67:
c1:2b:ca:72:7b:d7:88:4b:ce:f2:c4:99:60:8a:79:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:B9:D9:7A:BA:43:B3:33:CB:33:47:77:22:E7:1A:E0:E5:D0:2D
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:62:07:74:be:a2:31:4c:65:58:ad:b8:85:4b:b6:ac:17:
56:58:65:e5:53:92:28:25:e1:4c:56:34:b3:6f:2e:39:ff:9e:
4d:9d:46:f9:d0:eb:31:29:69:56:d6:b7:59:b6:10:2e:d9:72:
d5:53:43:54:32:3d:f9:e4:1e:58:ed:9b:89:72:e6:e9:77:73:
5f:05:2a:56:96:93:15:3c:7c:7f:ce:80:07:96:2b:7b:5c:98:
12:85:28:63:76:79:5e:3a:1d:5f:ca:97:4e:0e:db:ae:32:eb:
86:0a:da:b4:1a:e8:be:23:96:02:4c:b3:63:96:18:bd:19:5d:
af:19:af:da:a2:fe:8b:78:54:7c:83:fc:96:34:df:55:14:12:
37:48:bd:f3:6d:30:46:f0:b5:92:48:ce:f7:df:ee:93:c0:72:
8b:a8:a1:23:05:45:7b:6a:f9:5e:79:b2:3b:b5:fb:29:f2:12:
bb:29:e8:af:98:40:04:43:45:ed:aa:1c:42:7d:f1:31:82:54:
95:9c:32:32:87:a8:39:91:e0:f8:6d:8b:07:9f:bc:c0:f5:e1:
c4:27:ab:63:ae:54:44:db:46:59:1d:11:94:d7:41:f4:f5:44:
e3:ce:40:7f:bd:bb:ea:96:27:e0:1a:d4:0e:82:34:20:68:e5:
fa:05:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:31:53 2026 by rpki-client