Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: 5nu7GJq/XqIPGD+avXJAPXz+0zTm7G10tkIJmCWhyUg=
Subject key identifier: B1:71:5F:66:45:AB:A0:59:B1:28:A3:4A:D8:14:D5:9B:B8:27:54:B7
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01A17DAA93FE6971238A9B598064BFBF7024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0F62
Signing time: Tue 27 Oct 2026 14:01:33 +0000
Manifest this update: Tue 27 Oct 2026 14:01:33 +0000
Manifest next update: Wed 28 Oct 2026 14:01:33 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: X13fjkmzLQvYYJ0QwgSBQAh27+qMczy5PAd1p4lmVQc=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:93:fe:69:71:23:8a:9b:59:80:64:bf:bf:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Oct 27 14:01:33 2026 GMT
Not After : Oct 28 14:01:33 2026 GMT
Subject: CN=b1715f6645aba059b128a34ad814d59bb82754b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:33:d0:e8:48:4d:69:dc:c2:a2:ce:42:76:
bc:5d:18:ff:ff:f2:35:97:ef:94:f6:11:50:c2:c7:
90:37:7c:45:c4:d5:50:94:76:fa:4e:74:28:b3:c2:
88:76:7e:9b:f9:55:da:43:96:be:f2:46:24:65:21:
73:8a:44:cf:46:2a:97:6f:4a:6e:2e:5d:b4:67:ee:
aa:6c:4b:92:f9:48:d4:55:39:96:ac:75:90:9f:4f:
a8:a5:97:e1:ec:eb:ad:81:76:86:55:65:cc:b0:ef:
ee:f0:a6:70:9d:8b:fc:cd:eb:97:ce:70:fd:8e:97:
e9:8b:82:c4:03:ad:df:12:39:68:1b:d2:bb:6f:93:
9f:6e:5a:2f:1d:76:e2:2f:db:e8:f8:d0:61:3f:43:
92:f4:20:64:f9:88:39:8c:3a:80:9f:e7:46:ab:bf:
8c:ec:2b:5a:08:cb:6c:c4:56:0c:30:dd:38:99:7b:
09:c5:d2:1c:dc:ee:59:90:72:ce:5a:30:ab:fc:9a:
50:a3:f7:6b:4b:d3:25:66:f7:fb:26:85:29:96:a4:
12:ae:d7:42:87:6a:48:ed:ec:c3:f6:23:1b:56:25:
76:67:3d:36:c2:c4:8a:63:67:c3:c9:ca:f3:42:d3:
50:00:a0:d2:a4:e2:d5:6e:5b:80:e8:06:2f:d1:ea:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:5F:66:45:AB:A0:59:B1:28:A3:4A:D8:14:D5:9B:B8:27:54:B7
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:15:90:e8:76:74:19:29:e9:7e:bc:74:41:fa:e4:b5:62:
ab:6d:a5:19:d7:58:1e:ab:58:d7:2c:51:19:60:74:af:76:61:
25:5e:84:b2:ef:2b:c8:e6:b6:81:71:49:d4:10:71:b1:2f:07:
2e:3d:d0:bf:7d:fa:4c:91:ea:62:18:bd:49:5f:90:77:4f:2a:
e2:5c:ba:fe:5b:75:a1:50:c4:c3:4c:0b:c4:ac:f4:a5:3c:70:
1b:f7:99:f6:28:04:c1:cf:cb:16:89:ba:5f:29:0f:55:77:d1:
3b:a3:c2:30:51:5f:60:dd:28:c3:c0:c2:01:e4:a0:92:d6:32:
8c:fc:d7:ec:61:4e:9b:d6:06:d7:2a:9a:8a:db:9d:58:92:e6:
01:af:ee:a1:f9:a3:cf:fc:7c:4f:e8:1c:20:dc:2f:98:6a:b6:
7e:20:23:0a:96:76:46:9d:09:7a:56:84:e7:ba:58:5e:67:4b:
4c:d9:8f:42:87:60:dc:7c:58:07:7c:05:dc:da:56:74:f5:72:
2c:79:ce:a1:28:1e:90:f1:2e:ce:ac:92:ec:7e:52:79:a7:6a:
86:da:11:a1:78:ee:d3:6b:3e:c0:de:1b:94:2a:f3:19:b3:d1:
fa:d1:97:44:12:7d:9f:7a:d7:05:cc:2d:0a:92:a7:ac:17:3c:
6a:0c:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:46:30 2026 by rpki-client