Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
File: T1HrSeFu3RhEgrvMFjExdFOV9GI.mft (raw, json)
Hash identifier: +JnSGIhCu077WQP1pKRYLe/qU/xKw+MhjQ3iGu4TLeY=
Subject key identifier: E9:3B:70:00:96:7D:34:A3:CE:B0:7B:6E:9D:63:CF:4C:E7:2C:BD:6C
Authority key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Certificate issuer: /CN=4f51eb49e16edd184482bbcc163131745395f462
Certificate serial: 019D3940EF25DE6C4A966240E1AC0187BBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
Manifest number: 11
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: T1HrSeFu3RhEgrvMFjExdFOV9GI.crl (hash: YYb9Z15nC3CVYtap5iB4un3C/sNK0WKmBx/eum7g6j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ef:25:de:6c:4a:96:62:40:e1:ac:01:87:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51eb49e16edd184482bbcc163131745395f462
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=e93b7000967d34a3ceb07b6e9d63cf4ce72cbd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:c5:90:04:f0:10:9d:7f:8a:90:51:10:f9:
45:7e:48:4b:af:6b:a1:e6:18:22:19:72:bd:3d:3c:
cb:38:b0:d5:d6:dd:54:d0:2d:c9:1c:8b:38:ac:b5:
f2:f2:dd:f0:f7:26:f4:ff:cc:41:9c:c2:92:f8:ab:
82:a2:09:4b:f0:17:a7:90:22:30:2d:b4:84:43:1c:
05:81:04:9f:db:d5:05:38:a8:fb:9e:34:5e:d7:ac:
44:c0:2a:a5:4b:38:d3:d8:36:41:50:d5:6e:5d:23:
d0:4c:93:73:cf:0e:15:03:2a:41:3c:5e:44:97:2e:
fe:5f:b1:8d:e2:ea:92:ac:e2:64:ff:d1:2c:d0:55:
54:4c:00:13:0e:85:2b:a8:d0:6b:c1:6a:8b:ec:c9:
17:9c:de:b7:32:81:99:a6:39:ff:7d:24:ef:a0:ac:
9f:ff:92:3c:f5:21:a5:b7:4e:5a:df:f4:fd:74:5d:
59:b5:fa:5b:57:98:b9:e6:36:80:82:4e:15:ca:6d:
4e:df:74:f3:ae:cf:be:ad:26:1c:77:8b:ae:3f:94:
4c:5d:3b:bc:48:5a:90:49:a8:df:25:da:fc:e6:81:
a2:27:72:1e:b3:35:85:be:c6:69:6a:d5:5f:c6:e4:
c5:97:84:df:63:73:53:c5:fc:77:95:9b:e4:7d:91:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:70:00:96:7D:34:A3:CE:B0:7B:6E:9D:63:CF:4C:E7:2C:BD:6C
X509v3 Authority Key Identifier:
keyid:4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:ec:c7:bd:6f:b4:78:01:26:37:47:af:ef:e9:a9:5e:dd:
a1:a0:cd:97:b9:0f:af:ee:c8:e1:64:a9:1b:8c:25:2c:0f:ff:
0c:aa:0c:c7:6a:53:aa:75:f0:9c:4b:7b:af:2d:7a:b8:d8:5e:
1f:47:12:a3:77:1a:7d:d6:73:69:03:fd:86:43:8c:e8:40:b5:
1f:95:6e:8c:29:a9:51:94:78:70:75:26:62:76:8e:fc:85:cd:
04:d5:da:21:84:ef:03:34:5c:6b:33:eb:10:f9:93:37:bf:3b:
41:f0:4b:61:80:94:b3:2e:49:4c:9f:17:6e:91:35:91:ce:ad:
cf:c7:12:e1:b8:f0:4e:75:d3:cf:88:90:41:18:60:40:55:47:
0b:d8:db:3e:1e:34:a9:a7:ba:84:e8:c7:2e:dd:33:0e:07:11:
a6:1b:3f:1e:c4:aa:0b:38:3d:f0:ba:c5:65:f9:0d:66:ad:4f:
d2:e2:a1:e7:99:b0:38:fb:1f:4c:88:fd:c7:d8:1e:0f:e1:d1:
33:f8:db:41:ef:2f:ce:24:1c:90:9f:84:04:a8:ce:55:d5:75:
31:26:29:32:d8:2d:b4:19:4f:ad:20:43:27:5f:66:20:bf:0c:
0f:a0:f2:4f:81:54:ed:b9:a2:2a:48:89:57:7f:cc:11:53:f3:
5c:0e:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:45 2026 by rpki-client