Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
File: T1HrSeFu3RhEgrvMFjExdFOV9GI.mft (raw, json)
Hash identifier: WZ6R+4usRf+aA11YuDKugOzqwyq5//iPDV7e4UzbY/U=
Subject key identifier: 14:FA:63:63:03:73:89:6E:60:FD:37:64:3E:E8:9C:D4:D0:EE:0C:C3
Authority key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Certificate issuer: /CN=4f51eb49e16edd184482bbcc163131745395f462
Certificate serial: 019FF8350F10FAA64C7E4832B3BD3A67664E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
Manifest number: 017F
Signing time: Wed 12 Aug 2026 23:00:54 +0000
Manifest this update: Wed 12 Aug 2026 23:00:54 +0000
Manifest next update: Thu 13 Aug 2026 23:00:54 +0000
Files and hashes: 1: Io7n0RKdSC8NYvr3HwlbU080m-o.asa (hash: WD9WD3ogZA9m8TfNUNn+teG3m8j/94zNgQLzHUw+9JE=)
2: Ppt42Gv5gIDfqeLOpJTE20JEbUs.roa (hash: NdkXtmUAvOxUP9UHZgcc6jVZbUnj3SGw12e1roYv7cw=)
3: T1HrSeFu3RhEgrvMFjExdFOV9GI.crl (hash: yU6/GZFhLn1xxs1QCUJ7A092AC+a5iltjZoei+l4fHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:0f:10:fa:a6:4c:7e:48:32:b3:bd:3a:67:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51eb49e16edd184482bbcc163131745395f462
Validity
Not Before: Aug 12 23:00:54 2026 GMT
Not After : Aug 13 23:00:54 2026 GMT
Subject: CN=14fa63630373896e60fd37643ee89cd4d0ee0cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:19:0a:da:2a:f5:04:79:a2:f6:43:e2:74:
26:8b:e1:ea:ff:54:ed:cf:d8:c5:47:08:ef:c2:41:
e2:88:1a:56:51:c0:55:a2:ef:30:49:6c:d9:e0:7f:
12:57:48:25:43:ec:ce:ac:ee:f8:2a:1d:01:2e:6f:
33:be:70:73:d8:88:fa:06:82:51:80:18:db:b4:d2:
7b:4d:2c:f0:f4:e5:e2:73:1e:39:55:ec:a5:f1:fe:
53:fd:33:d8:45:d7:a8:d4:26:93:4f:49:a1:7f:59:
a9:2a:51:18:59:33:c4:83:a8:1e:6f:4a:c5:f7:4b:
92:10:ba:c6:cc:d0:bc:6f:09:c4:0b:83:67:da:52:
c1:93:6c:79:3e:5a:25:cb:9b:2c:83:30:dd:6f:d2:
b4:e5:c2:14:c4:9c:5d:9b:86:8f:2a:52:23:c9:2c:
85:a8:fc:35:c0:b8:68:7a:f6:6f:ed:5c:74:c2:1b:
4e:d5:d2:b0:a4:a1:0e:0c:95:52:5f:ee:65:6b:a3:
91:33:a3:c4:b7:e0:89:96:e8:85:2c:bd:c7:75:af:
43:33:45:10:68:fc:36:1f:40:e4:14:b3:30:c0:d8:
74:59:7d:fa:83:0f:7b:c5:3d:91:79:30:9e:c3:29:
d5:b7:56:61:ac:fd:f4:ff:2b:50:8c:0d:b9:b2:ba:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:63:63:03:73:89:6E:60:FD:37:64:3E:E8:9C:D4:D0:EE:0C:C3
X509v3 Authority Key Identifier:
keyid:4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:22:65:3c:14:ed:ce:2e:ec:96:9e:6b:75:8a:43:1e:3e:d4:
a5:4b:7a:f2:07:83:d3:21:ae:fe:11:71:89:89:25:d5:ab:36:
f3:12:70:1b:49:86:56:41:7f:a5:49:e9:5e:40:b7:e1:b5:be:
fa:8c:dc:9f:48:7c:25:45:49:0f:bf:f0:95:09:77:73:4b:05:
09:bc:35:64:f6:0b:46:d9:0e:37:bb:8a:62:95:4c:d0:48:17:
99:77:7d:06:12:ce:e5:ca:ae:dc:f3:1d:14:c8:59:af:47:4f:
9d:93:44:01:8e:3c:b7:85:97:09:5a:6e:80:75:9e:57:d1:0b:
d4:62:4a:d7:b3:f4:32:29:84:d7:23:cb:6a:5e:57:4d:71:72:
ee:23:10:e4:f4:9e:45:11:2b:e7:32:da:43:88:50:ae:2c:76:
26:5d:38:25:67:5d:0d:c3:c4:a9:c4:6d:e5:00:bd:32:a7:73:
1a:ee:e3:3b:e7:b8:75:7b:08:d6:a1:f9:81:9c:18:2f:ce:e3:
81:ea:ea:9e:99:36:ba:1d:f2:21:22:bb:84:02:a9:01:6c:fe:
3e:58:05:06:6f:fd:ee:ee:cd:ec:3a:dd:5b:33:aa:0b:7c:b7:
76:c4:80:4a:52:95:9a:43:e0:34:0c:4e:ac:f0:89:e4:e8:46:
ba:5a:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:28 2026 by rpki-client