Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: NpEuas8QIz3boGdiSWQct7bu3CiAHeKmT7uKJLe/ehc=
Subject key identifier: 45:D3:64:64:DC:26:C1:79:D8:42:B8:1B:03:12:88:AD:D8:D0:8C:C5
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019D9F9C01F07DDF95E7B1FAEBA86812ABE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0251
Signing time: Sat 18 Apr 2026 08:01:34 +0000
Manifest this update: Sat 18 Apr 2026 08:01:34 +0000
Manifest next update: Sun 19 Apr 2026 08:01:34 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: JcnvY9DvX8apOQVddEfPVzUnHNIKIBr3W86mADaQfLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:9c:01:f0:7d:df:95:e7:b1:fa:eb:a8:68:12:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Apr 18 08:01:34 2026 GMT
Not After : Apr 19 08:01:34 2026 GMT
Subject: CN=45d36464dc26c179d842b81b031288add8d08cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:be:58:2e:49:c3:b4:64:77:bc:8b:fd:ec:
cc:86:16:31:4c:98:9e:dc:67:3d:b9:15:20:f9:93:
d3:ec:8d:bd:94:f5:d1:54:91:47:06:09:a0:27:f3:
fb:06:e7:f5:ee:26:12:32:0d:8f:70:0a:9d:ea:34:
8a:c2:5f:94:f9:ed:51:28:83:25:7b:20:b0:3c:fd:
f2:a4:b9:52:6a:17:bb:4c:ba:93:54:c8:95:8d:d5:
9b:e4:cf:8b:82:79:32:9f:f1:38:7c:0c:75:ce:a1:
9c:05:62:69:c6:ca:49:a7:a9:7f:32:dd:43:48:89:
97:ba:4c:61:5b:06:6e:8b:f5:9d:85:fb:13:e3:8d:
e6:bf:1b:bb:62:5d:87:be:47:19:c0:64:5a:eb:7d:
d8:e0:9b:1f:36:44:ac:8f:61:e8:ae:4d:fe:7b:96:
09:49:7b:ff:fe:f2:9e:ca:c7:b4:31:30:7f:6f:20:
b7:c0:bc:1f:55:28:08:87:1b:75:9b:2c:4f:94:65:
4e:93:2d:34:c6:90:fc:de:8c:d9:07:86:de:26:f4:
d8:6b:c4:de:75:f6:ce:9f:df:b9:54:bf:df:71:e9:
fe:2e:54:69:56:a3:6a:1c:09:3b:0e:e5:fa:1e:8a:
12:15:83:e2:0f:2b:07:ae:b7:cf:74:5b:e6:be:86:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:64:64:DC:26:C1:79:D8:42:B8:1B:03:12:88:AD:D8:D0:8C:C5
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:0a:6e:cc:9c:61:3a:e6:8f:dd:37:56:25:bf:48:6a:6b:
2b:c3:fa:85:a0:53:5e:14:8d:23:48:61:d1:cf:ad:d5:17:be:
c5:a4:90:9c:86:6b:0c:31:23:90:16:96:78:af:2e:83:96:12:
ba:72:54:4f:8b:77:1d:6f:8a:fc:a3:a3:0b:ab:d3:1e:30:56:
e9:b1:a6:ca:87:76:cb:43:13:36:fe:c9:5c:7d:52:41:61:a8:
46:fa:72:15:51:e9:6d:9c:b0:24:d4:8a:53:6d:4a:96:21:52:
6e:b8:d5:33:44:29:66:93:c2:72:04:2b:70:c8:2d:e3:8e:99:
b3:6a:57:45:aa:03:73:2c:98:0d:1c:58:73:7f:20:16:b5:b0:
e9:89:2c:78:9a:6d:a6:07:98:96:50:2c:fd:bd:1a:6f:38:d0:
11:f7:90:0f:61:05:80:53:d3:ea:5d:5e:32:35:29:0e:37:e0:
5c:f5:a1:ec:97:28:b4:53:c3:54:9c:f2:fe:86:37:7d:15:d6:
dc:c2:14:22:4f:e3:a8:a3:87:fc:be:40:0d:1c:db:b6:95:22:
10:39:a5:30:a0:fa:6d:18:26:3c:34:62:c1:06:20:ca:a5:d8:
77:2a:ba:7f:9c:5a:59:a4:cb:fc:51:e9:75:87:4e:c2:b4:18:
57:06:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:25:17 2026 by rpki-client