Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json)
Hash identifier: OOqa+3+SdIEcePnbHf1FTOtEQRWtOBiQo4hxeRNLoTs=
Subject key identifier: A4:66:95:8A:C1:39:9B:3B:44:FF:B7:B7:7D:7F:19:7A:1D:6D:B1:FD
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial: 019D37F747F129FDA6FA28ED9E962E9CB598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
Manifest number: 044F
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa (hash: wU9cPOo8mwz6ydyhIKOGWW7zEmO7xyneDQny8VJv6qI=)
2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: MkLLdeedCkQqoLb+p1RYt3wayAeCELo0qTqC6qFXJmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:47:f1:29:fd:a6:fa:28:ed:9e:96:2e:9c:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=a466958ac1399b3b44ffb7b77d7f197a1d6db1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:2e:34:c4:1d:7e:f4:7e:42:10:12:5d:59:
77:d5:0f:69:28:72:ef:3d:e2:48:2a:f8:33:4d:4f:
df:83:d4:cf:99:83:81:8f:85:f7:57:e2:ce:65:d6:
a7:60:57:af:6c:ef:5a:78:ab:df:78:c4:05:1e:3b:
91:3c:dc:37:93:49:24:cc:2a:0a:95:57:ad:ff:c3:
d8:c4:8f:fc:4e:85:bb:36:27:47:6c:9c:12:da:c0:
ba:c4:fa:7e:54:d3:1b:7c:b2:88:bf:c0:65:0f:ca:
e2:30:54:63:09:d5:3c:63:bb:a5:2c:43:21:c0:1f:
7c:57:8a:56:41:24:39:32:f0:9c:fd:25:cc:3f:e2:
db:9c:52:9b:c0:94:a6:85:78:bf:53:e4:c8:ce:ac:
74:d6:3d:1a:db:7a:96:a9:6f:fb:e4:66:a5:c6:0c:
84:e6:8b:c2:c0:b6:6b:30:b6:6c:0d:7b:05:55:1e:
f5:b9:66:16:27:e1:8d:1b:25:86:1a:16:47:cd:e5:
49:0e:7b:36:70:e8:a8:42:be:c9:4a:99:5d:98:6c:
7b:b5:98:9f:ba:6d:fb:f4:a7:e2:8e:a6:63:45:1e:
73:fe:83:9e:f9:ef:0d:7a:98:4d:2c:f7:7d:30:98:
09:54:00:03:2a:b7:21:62:96:9b:3a:52:36:16:f4:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:95:8A:C1:39:9B:3B:44:FF:B7:B7:7D:7F:19:7A:1D:6D:B1:FD
X509v3 Authority Key Identifier:
keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:42:7e:15:dc:2c:ac:06:0d:ef:24:c5:cb:f7:fe:24:38:55:
7a:19:15:26:c5:c1:37:aa:63:b5:54:fa:85:c2:ed:b1:04:a2:
1c:d0:4f:43:47:dd:6a:4c:11:4f:5b:b9:6b:d4:65:c2:a7:ec:
54:d0:4e:07:3e:a1:f5:0b:92:be:05:8d:cc:bd:a8:c3:30:ae:
70:f6:38:fd:a2:e5:8f:ef:8e:71:10:d3:0a:35:05:bd:dd:ee:
a6:10:46:9d:2d:84:75:12:1a:03:45:95:37:5f:f6:2b:bb:75:
58:08:af:cf:97:0a:6e:d0:9e:a0:a5:21:a9:ef:e6:04:ff:69:
37:96:17:36:9d:70:9c:32:f0:c4:6e:a9:f0:d7:7c:20:94:97:
8d:ac:75:ff:39:9f:f7:5a:1f:63:5c:84:a2:ac:de:c0:c8:07:
45:21:54:d3:d9:f6:5d:a3:07:64:45:41:dc:2d:fa:c2:10:dd:
b9:62:2d:2d:7c:77:c3:9c:08:60:b1:89:a7:89:74:39:5b:bc:
87:c3:c3:bc:c9:7d:58:f4:19:c5:06:bb:0f:d6:46:77:32:53:
98:f3:de:dd:b7:33:af:3b:24:f4:9c:ed:b7:1f:76:28:cf:4c:
c4:9b:24:fc:58:24:67:c8:c0:ac:38:d0:a8:9a:b3:74:2f:79:
d7:dd:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:39 2026 by rpki-client