Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: 2UB12p3a98MWFz5c0qEqMdtMevNZoutZC3+wn00Vwuw=
Subject key identifier: DA:A7:A7:EB:18:45:A2:B5:18:5A:9E:8C:FA:DA:04:79:16:43:10:BE
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 01A14E06E3B69AF710F7D71800BECBC0907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0439
Signing time: Sun 18 Oct 2026 08:00:36 +0000
Manifest this update: Sun 18 Oct 2026 08:00:36 +0000
Manifest next update: Mon 19 Oct 2026 08:00:36 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: irYT+/ItJGGJdCRu8lY82wcRclIC+nIqLEjuyKR7BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:06:e3:b6:9a:f7:10:f7:d7:18:00:be:cb:c0:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Oct 18 08:00:36 2026 GMT
Not After : Oct 19 08:00:36 2026 GMT
Subject: CN=daa7a7eb1845a2b5185a9e8cfada0479164310be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:18:2b:46:f4:c2:a0:3d:34:18:96:72:fa:
a1:f4:00:2b:02:38:3d:49:3b:67:c0:62:96:3d:d1:
05:83:e0:8a:8d:f6:dd:96:d8:01:f3:44:03:d9:bc:
4e:4d:33:0a:d2:4a:8c:e4:c4:ca:fa:71:3d:cf:07:
f4:f6:16:01:e7:d4:9a:91:23:8b:41:71:92:b3:06:
22:c4:1a:87:3e:b8:36:97:63:b9:3f:f7:c2:63:24:
f7:48:69:a6:fd:8b:32:6e:c4:93:82:5d:a1:69:4b:
c0:e8:ea:a5:8d:de:5f:6b:c4:23:95:ed:27:6f:44:
9f:13:10:58:25:b0:7b:b0:63:59:d0:64:ff:23:8c:
50:5a:78:b7:05:71:c7:de:29:9e:d3:bc:63:a1:9a:
c5:f7:2e:1a:39:9c:74:74:c3:dc:c9:ca:1a:da:c1:
88:02:38:79:ab:79:47:5b:b3:77:e3:19:9d:d1:ee:
52:23:97:cb:2d:fc:de:2e:09:80:4a:8f:64:31:bb:
4b:2d:00:49:a9:4b:91:84:1c:be:10:82:93:b5:d4:
80:49:ee:9e:7e:d3:35:13:9b:41:5e:62:39:df:07:
fc:29:91:17:aa:29:13:2b:67:3a:3e:e1:94:fa:b6:
00:4c:cb:18:23:ea:b2:e3:49:49:c5:71:6c:4c:41:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A7:A7:EB:18:45:A2:B5:18:5A:9E:8C:FA:DA:04:79:16:43:10:BE
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d0:df:d7:b1:de:9a:0e:8e:a3:f7:a4:ca:39:57:12:ee:7c:
ef:70:b9:68:f9:44:d5:82:14:b0:c4:a1:6b:be:2e:45:d7:e3:
18:6a:65:1b:67:0b:c3:43:3c:bf:6a:17:62:ce:a7:84:39:38:
29:c9:ee:21:bc:ae:7c:46:42:33:63:a5:70:51:86:39:93:be:
41:47:65:b1:08:f5:dc:b5:bf:58:b2:0b:93:e6:c6:0b:0a:db:
c5:27:92:0f:f3:54:63:db:f7:15:b9:a5:93:6d:58:23:1e:32:
42:4f:8c:13:be:e1:e9:9b:8c:e8:2b:88:fa:0f:5d:79:e8:68:
60:62:99:6e:f5:bf:38:eb:d0:7e:1b:5f:95:69:20:bc:ff:ad:
17:1a:89:44:7a:1c:b9:29:8e:7f:e7:4f:57:b4:5b:88:56:40:
df:6d:91:64:00:99:4b:48:8a:b0:18:5d:bc:37:10:b3:fc:5e:
ab:54:7d:3e:35:fb:35:7b:8c:da:49:ea:e0:5c:16:55:c7:1b:
5c:56:f1:9e:88:69:55:a0:37:6b:54:63:80:58:a9:03:97:b0:
7e:b0:b3:68:f9:f2:32:7c:0e:9b:1b:08:ca:60:6e:c1:99:f3:
82:66:ec:24:ff:56:5d:46:2c:28:7c:1b:37:ed:83:3f:09:d0:
2d:ed:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:49:59 2026 by rpki-client