Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: Z6/CvI0BC9YI9RYtngcvRkKkKXmZNJaGNlyNQVUYKNA=
Subject key identifier: 3A:41:65:47:3D:93:A0:C6:A7:53:C3:0C:E2:8B:13:A6:98:45:1D:2B
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019E894807E8368A2DBEEFDE26DDAB4A102E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 02CA
Signing time: Tue 02 Jun 2026 17:00:59 +0000
Manifest this update: Tue 02 Jun 2026 17:00:59 +0000
Manifest next update: Wed 03 Jun 2026 17:00:59 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: u55LwoIjhvwvs99aX44ol4TBGhsTZeLcAv7+E++YR+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:48:07:e8:36:8a:2d:be:ef:de:26:dd:ab:4a:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Jun 2 17:00:59 2026 GMT
Not After : Jun 3 17:00:59 2026 GMT
Subject: CN=3a4165473d93a0c6a753c30ce28b13a698451d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:9b:34:4b:e4:d2:a4:5d:a5:75:ce:ae:40:
e8:aa:66:03:1c:2d:5d:b5:eb:d7:15:a1:7b:7c:1e:
29:9a:02:55:f6:c8:f9:35:f8:5b:2b:bd:6e:52:88:
e4:53:cf:ab:ef:d3:87:1e:19:94:80:71:36:ca:4c:
28:74:2c:c5:31:29:5f:44:fd:6d:62:ef:e9:46:42:
0f:6a:5b:ed:53:8c:3d:c7:15:fa:9e:37:cb:e3:06:
f2:b4:c1:9e:35:2e:bb:c1:64:e0:7e:20:04:3b:2c:
e3:f9:1f:79:41:23:d6:5f:52:09:07:1d:96:10:bf:
98:c8:b5:b0:5a:a5:5b:35:42:1d:72:a6:19:f4:a8:
2b:76:76:49:11:41:ac:6c:38:d7:ae:04:ff:67:c2:
1f:1d:d7:2a:f4:71:4e:6f:1f:75:15:0e:f3:0e:6f:
ec:e1:82:8d:d4:e0:da:84:a5:41:ba:8f:bf:f4:11:
c5:eb:2a:94:04:17:4b:f6:73:98:da:a0:32:12:fe:
bf:6c:ba:54:fb:47:9a:0f:aa:43:20:31:59:7f:dd:
32:0f:5a:4a:03:ad:de:1b:9e:50:13:4d:84:63:b9:
82:08:6a:64:3b:a1:b1:1c:2a:57:37:cc:b1:10:ed:
26:df:d4:45:52:e9:4c:06:02:c9:6a:b1:fd:bb:d6:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:65:47:3D:93:A0:C6:A7:53:C3:0C:E2:8B:13:A6:98:45:1D:2B
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0c:2b:4b:33:83:ac:5c:3c:5f:1c:df:d6:4c:4a:e9:8b:6a:
3e:87:34:18:26:f4:c8:ff:d2:2f:62:e2:83:5c:1a:8c:7f:20:
a2:c4:6c:02:8d:02:d0:fb:4d:14:45:ed:ac:06:40:51:3d:74:
1c:64:04:36:e1:36:0f:78:7a:f9:6d:a2:ca:28:8e:6f:db:1c:
5a:30:84:6e:f6:66:e1:ab:ce:15:78:77:5b:bf:f3:fe:4f:35:
fa:32:e4:e9:a4:6e:c6:d3:db:3c:cc:e8:05:31:a5:e8:4b:f6:
19:98:5d:01:cd:76:6d:e3:a0:5a:83:97:3f:41:c5:80:a7:3a:
cf:92:0f:ee:1c:10:f6:55:61:7b:26:9f:24:af:68:f0:28:f7:
d4:ec:d0:99:a0:a8:db:e4:88:3d:fb:a5:15:d5:48:6d:c2:3f:
0c:dd:58:9e:58:db:92:55:99:4d:00:f9:88:e6:bd:35:39:e0:
9c:4d:0c:b5:ae:3c:31:4f:d8:a4:9f:14:16:62:aa:23:fa:03:
8d:b3:bb:1c:61:b8:46:cb:23:86:bf:37:db:f1:5c:c1:21:fb:
70:1e:21:d3:c2:b7:9e:32:2c:e1:0e:7f:02:45:53:73:fa:3b:
cd:27:a3:bd:a9:0f:b8:ab:af:ea:09:12:2b:70:42:a9:b9:93:
8c:1a:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:12:32 2026 by rpki-client