Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: F60hLVaAMbt4Fsj1U1FJI/l0yoJGIQUUo998Yaeuc08=
Subject key identifier: B1:E3:A2:A3:A0:FA:32:93:A7:29:71:99:A0:00:62:8F:07:37:8A:AC
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01A0D9170EAC6A4FA6C84826C2FED6DF6C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0FC5
Signing time: Fri 25 Sep 2026 15:02:41 +0000
Manifest this update: Fri 25 Sep 2026 15:02:41 +0000
Manifest next update: Sat 26 Sep 2026 15:02:41 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: SoXCFRYJm5ibtiWof/Ppc8UvPAlwMZ7sjKTmJCkcrsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:0e:ac:6a:4f:a6:c8:48:26:c2:fe:d6:df:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Sep 25 15:02:41 2026 GMT
Not After : Sep 26 15:02:41 2026 GMT
Subject: CN=b1e3a2a3a0fa3293a7297199a000628f07378aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:32:2f:5d:22:f4:07:f7:a6:3e:c7:e7:34:
46:de:95:be:6b:1d:3b:31:c9:f7:2a:bd:e8:78:d9:
06:26:64:a9:bb:e5:c5:b7:f6:55:08:fb:ef:aa:f7:
68:4e:69:3e:16:f3:36:a8:49:26:59:ef:a5:5b:41:
1f:12:83:de:ab:b6:bc:52:48:42:3d:ce:f3:43:08:
19:e1:9a:ec:d2:f5:e3:91:28:6c:5c:79:72:98:8c:
2b:8e:28:c6:17:29:25:2f:50:da:75:67:1c:cd:57:
64:8d:da:f1:cd:10:14:43:65:89:92:23:42:cd:cd:
c9:e7:0c:89:d8:a5:a4:fc:8d:48:68:9c:ac:2f:1e:
04:ff:d8:ba:c4:e4:25:c7:e3:fa:83:d6:d9:41:7b:
67:74:da:60:39:0e:35:50:62:e1:65:cd:60:72:d5:
fa:89:24:51:45:8f:6e:1a:dd:f3:09:1e:ab:72:d6:
2f:d6:12:aa:3b:00:e4:50:6f:da:37:ba:f5:19:d5:
72:fe:69:e3:48:95:b1:02:3e:6a:93:68:e0:bc:c8:
d2:35:d6:40:77:6b:21:0d:bf:e6:92:6d:e6:f8:4b:
d9:99:46:c4:86:9b:20:c0:1f:4f:83:78:4b:e6:99:
46:47:4f:e6:a6:a3:15:09:9e:8f:67:d2:a2:e5:87:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:A2:A3:A0:FA:32:93:A7:29:71:99:A0:00:62:8F:07:37:8A:AC
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:d6:8f:9e:01:4e:62:84:79:b3:a6:3e:93:88:98:ef:ce:
c3:08:0b:71:bd:53:3d:03:6c:14:3b:ee:f9:01:ee:74:47:81:
22:24:d1:22:2e:db:a7:8e:84:5d:28:50:6a:2b:be:16:5f:20:
59:84:10:70:0d:ee:43:fa:01:c2:d4:c8:d6:95:13:08:91:91:
99:c6:14:44:4c:cd:ae:4a:fa:de:fe:92:8a:9e:07:3a:62:b0:
de:bf:85:d4:30:f9:9e:2c:48:e3:63:eb:4e:47:32:a8:96:79:
8c:cc:d2:ef:2c:5f:82:f2:e0:c8:51:d8:16:67:30:a0:ac:73:
54:25:0f:db:3b:16:ec:98:a9:08:27:6b:65:e3:8d:95:01:bb:
1e:3c:cb:ed:fe:d0:39:12:4b:01:e9:3f:a6:69:2b:aa:a5:93:
92:6e:a3:ab:a0:0d:e4:82:46:28:cd:02:7a:93:12:31:7d:74:
52:2b:3d:3d:04:8e:51:c6:01:d1:d7:8e:42:4f:ea:ee:ac:aa:
88:ef:be:de:85:73:d6:14:dd:7a:99:57:dc:62:f2:23:51:8e:
3f:13:58:2a:8b:92:96:bc:7a:3d:da:b8:e7:3b:03:f9:14:fb:
fe:4c:c0:4c:b1:6e:9a:a4:26:0b:f5:37:e0:3f:8f:ec:d2:0c:
0f:90:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:12 2026 by rpki-client