Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: nou9J4cEMRScP8HYVMLU3rfKGad3tNPHxTZDGscGlmU=
Subject key identifier: CD:A4:3B:E0:9B:D9:93:FC:23:2C:87:AF:88:CA:F7:DB:F4:4E:14:86
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019DD68A3B2D7A5E67B0DBD277E1DB3D69F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0E36
Signing time: Wed 29 Apr 2026 00:01:16 +0000
Manifest this update: Wed 29 Apr 2026 00:01:16 +0000
Manifest next update: Thu 30 Apr 2026 00:01:16 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: aWVQUASWRlX+TaWBHwdHCp0twsvya4uOuK1SJvhJvYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:8a:3b:2d:7a:5e:67:b0:db:d2:77:e1:db:3d:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Apr 29 00:01:16 2026 GMT
Not After : Apr 30 00:01:16 2026 GMT
Subject: CN=cda43be09bd993fc232c87af88caf7dbf44e1486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:c5:66:16:39:7b:58:e8:52:40:5b:2f:c4:
7c:60:f1:65:1b:07:e1:4e:e5:9b:6b:51:93:4b:ca:
1c:d2:0d:29:bc:67:31:b8:f2:6a:0d:6e:6f:9a:8e:
ca:a1:d3:1e:f4:0d:0b:89:51:83:12:3d:ef:66:91:
e7:ee:7b:80:aa:2d:b9:5f:fe:f0:5b:30:b9:e2:6e:
c2:cb:cc:f5:35:92:d4:65:55:b6:f3:a8:77:e0:46:
61:ad:f5:30:cd:99:5a:74:40:30:f8:66:d7:e5:7b:
1b:a3:1d:d8:06:62:60:92:98:ab:cc:32:b9:6b:76:
76:59:e6:62:7f:db:f9:cd:cc:54:a3:78:dd:5a:16:
b6:8e:38:39:5d:93:60:91:29:ca:39:21:f6:c0:d6:
ee:f3:61:4c:e9:85:8f:7c:03:12:b5:55:5d:32:1f:
f8:47:3b:32:c6:23:de:8f:71:2b:21:c9:14:c4:63:
b2:80:66:a9:12:46:b2:cc:ca:45:46:d0:2d:44:37:
9c:21:c8:bb:d2:9c:91:b7:12:27:31:64:70:d5:8e:
dd:4f:fe:0b:0d:43:6d:9d:1e:65:34:b8:cf:07:2b:
47:f7:41:b6:0c:91:15:2b:5d:95:e7:c6:4c:03:a8:
f7:89:8b:fd:8f:3e:f2:32:9c:db:20:b9:f4:19:44:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:3B:E0:9B:D9:93:FC:23:2C:87:AF:88:CA:F7:DB:F4:4E:14:86
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4e:94:92:7f:10:b3:45:01:0e:c4:06:f0:44:a2:49:85:37:
08:bb:d3:16:67:e6:eb:6f:6e:db:4d:03:bb:e3:33:4d:07:dd:
27:de:2a:0d:a4:96:8e:ca:16:fa:34:6e:47:da:47:b3:b8:4b:
80:80:a5:76:42:0d:96:ea:49:6e:01:1d:1d:67:bf:ec:6c:8d:
02:eb:0f:92:03:11:71:b5:d5:5e:92:e1:6c:63:71:c2:e7:7b:
b2:98:b1:66:09:7a:4b:1e:dd:4f:9d:ba:25:c7:41:75:d0:79:
4f:86:ff:78:59:f7:ee:45:f3:3e:8e:4e:72:4b:49:4c:16:0d:
14:64:e5:e6:89:69:07:e2:28:0a:1d:cb:fa:40:7f:23:85:b4:
1e:da:29:2c:90:52:7d:8f:00:6d:49:46:40:cc:52:3f:2f:ea:
f5:db:ae:48:fc:76:33:dd:b0:40:0e:66:4c:77:55:28:04:a7:
a4:e8:dc:da:b4:d3:0e:b3:02:aa:0a:d2:29:5c:ec:78:9a:43:
d8:e8:ae:d6:84:51:83:16:e5:cd:1c:cd:39:fc:e8:d1:a6:37:
7c:92:01:f5:14:cb:c0:a9:cf:f5:63:88:09:6e:78:58:e9:34:
d4:2f:e2:ff:fa:47:47:68:2f:01:7a:5c:d2:3d:8a:d4:07:b4:
f5:60:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 06:40:52 2026 by rpki-client