Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: jXaPBlzROcUUvbje/SoYGRvfTbb5t8l2MlhdjOwqL3Y=
Subject key identifier: 37:58:D5:2F:C9:8B:E3:FB:DE:C7:17:B3:52:48:AC:34:17:88:D5:39
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019CB7DD286B0CCF432D9D812E8806D9F0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 01D9
Signing time: Wed 04 Mar 2026 08:00:50 +0000
Manifest this update: Wed 04 Mar 2026 08:00:50 +0000
Manifest next update: Thu 05 Mar 2026 08:00:50 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: uh3INt9pAz/jEW23tIrpcSGT0RYF3i3wrw8cXpQ7nTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dd:28:6b:0c:cf:43:2d:9d:81:2e:88:06:d9:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Mar 4 08:00:50 2026 GMT
Not After : Mar 5 08:00:50 2026 GMT
Subject: CN=3758d52fc98be3fbdec717b35248ac341788d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:6f:6b:4a:94:a4:d7:a9:f9:3b:9c:8c:e1:
b7:80:88:08:14:a0:26:20:f3:27:11:38:19:0e:9f:
6e:38:9a:43:f6:19:5c:ba:50:3a:a1:d1:ab:c5:21:
68:47:83:ba:f5:3c:fb:b9:59:ed:62:f0:53:8c:48:
3f:2b:3d:c3:5f:06:2a:34:79:63:12:3b:72:13:26:
5f:61:e0:f0:c8:90:29:e6:fd:6a:55:79:bc:fe:ed:
6d:28:8d:ec:24:76:74:72:9f:7d:b0:2f:cf:e1:2b:
71:2e:29:c2:2d:a7:42:5e:06:89:0e:49:74:c0:3a:
13:7a:a3:82:bd:6d:a5:aa:df:9e:26:3a:e5:9e:ea:
39:86:f8:30:c4:6e:3f:b9:d7:ba:3c:c1:cc:6e:bc:
69:a9:fd:16:b0:08:4d:3d:f9:5b:55:27:01:60:0b:
4d:c5:b3:33:26:ff:59:0f:d9:a5:b0:01:12:07:62:
ce:a5:87:4c:67:58:b3:e0:a1:8b:cc:70:2d:4d:d0:
18:e4:3d:81:d8:ea:72:1e:b9:58:6a:21:60:bb:46:
7f:f0:72:0e:8a:26:7f:da:58:19:09:2f:a1:e3:6e:
31:98:24:50:20:4a:a8:60:b5:42:ec:8f:be:51:6e:
29:71:2b:f2:c6:ed:91:be:ab:93:72:49:f1:a4:cf:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:D5:2F:C9:8B:E3:FB:DE:C7:17:B3:52:48:AC:34:17:88:D5:39
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:97:ba:fa:f0:4d:07:9f:c1:75:ff:72:30:fc:4a:fe:78:
10:67:7e:cc:7a:da:aa:39:b8:db:d8:46:02:63:ff:d9:0b:aa:
aa:70:9c:ef:a6:6d:93:c8:09:43:a7:a1:41:0b:91:5a:22:0f:
91:b1:db:96:47:a1:d7:27:e2:e6:6d:5e:03:b5:09:0f:04:93:
61:ec:05:1f:00:14:16:ae:a0:30:a2:6f:ee:27:3a:d7:17:7a:
fa:bb:e9:d1:50:94:a4:1d:2d:4b:88:b1:65:12:4d:f0:41:0d:
46:7e:78:e9:d0:d7:a4:a7:21:88:21:80:dd:79:46:03:f3:7b:
28:e1:2b:f8:17:4e:f9:e3:cf:9b:de:f1:e5:8b:93:a6:05:2e:
d5:69:11:19:95:e2:e2:0a:22:10:7c:96:26:08:f4:db:12:d3:
53:c9:32:07:8c:25:2e:f5:9d:27:f4:c0:de:d8:cd:60:8a:f2:
69:a0:9b:93:be:0a:9c:d6:31:6e:cb:dd:81:f9:ed:31:d7:65:
a6:a7:14:a5:b4:2b:2f:2f:ea:05:36:bd:57:f6:d8:9f:58:a1:
68:b1:77:ae:9c:8d:4d:75:a2:1a:bc:be:8b:ce:c2:77:78:ce:
ed:35:6c:02:32:2e:e2:9b:f1:9a:bc:89:cd:e8:8f:8f:83:23:
32:9a:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:55 2026 by rpki-client