
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File: t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier: 59dju/N8xlu2JmRzlQoQ6mRNoyFfDOLbkUl7cVg5RZ0=
Subject key identifier: 5B:A4:0B:54:5A:90:8F:63:2D:83:CE:1C:CB:25:B0:AB:58:5C:24:73
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer: /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial: 019D37C051A971DF28A61F57C171CCE2F1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number: 07D9
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: 2Z3MAs1LYaaiq7CAnKlMAQFoZyQewrSacU2+D4T+6/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:a9:71:df:28:a6:1f:57:c1:71:cc:e2:f1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=5ba40b545a908f632d83ce1ccb25b0ab585c2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:b5:d0:34:5f:b9:ea:80:02:29:00:8b:f3:
39:da:78:da:79:ff:e3:46:98:b6:d3:b4:57:2c:79:
bf:61:38:c4:8e:d3:c1:44:34:9a:0e:23:7f:c1:0a:
7b:b1:9d:ab:ff:03:f2:90:58:b6:24:83:3f:19:bc:
e5:2d:d2:57:a4:1e:28:57:c3:ad:9a:33:2f:08:f5:
7d:fc:28:f9:52:71:f8:92:12:cb:3d:0c:8e:1b:b0:
a4:32:31:f5:2e:38:7b:5c:d9:27:47:8d:f6:a8:e0:
da:2a:24:23:6c:6e:bc:73:32:6e:cd:4e:b9:10:44:
eb:b4:c4:10:22:01:c1:23:b3:49:6d:d8:47:2e:b9:
b9:d6:e7:11:fa:b7:3d:94:3d:d9:61:70:e5:b8:cb:
26:76:7b:88:9e:f5:a1:e3:19:78:0f:14:c5:13:77:
cd:d3:e9:52:bb:1b:6e:1c:c4:8c:21:6a:8b:40:f3:
f6:9d:6f:41:ea:25:d1:b7:c4:f4:ca:57:0c:bc:04:
0c:57:ba:7a:74:90:0b:81:78:52:83:09:1d:b9:73:
65:4b:65:71:33:0e:f4:7b:94:ae:f8:91:23:7d:fa:
ab:10:61:0f:d5:6a:b9:d9:8b:e8:86:92:eb:9f:ec:
06:10:de:be:0f:8b:99:52:7e:7b:de:9c:87:9c:91:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:0B:54:5A:90:8F:63:2D:83:CE:1C:CB:25:B0:AB:58:5C:24:73
X509v3 Authority Key Identifier:
keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:e2:6d:86:fe:92:3d:e4:12:a8:f5:fa:83:9f:b4:14:25:
c2:3d:f8:bc:5b:81:7a:9d:42:7e:fb:25:cc:05:f8:99:27:ab:
17:bd:92:a2:bf:a7:5c:24:b3:ae:b6:77:37:ed:6d:ac:ca:ed:
79:4f:29:b1:f7:80:69:05:50:68:69:5a:1c:8c:ed:f5:ce:46:
f6:5e:5c:53:73:8f:f8:5b:b3:78:79:55:21:20:96:6f:f2:9e:
38:41:2f:c6:28:d0:85:93:8d:3b:6a:95:be:51:b1:df:b1:d1:
43:44:93:13:93:d7:b4:93:be:ad:d2:c8:f4:4a:67:4a:bd:f1:
2f:66:62:35:9f:51:32:50:ca:ec:c1:09:0d:75:76:67:27:24:
4d:ac:14:b3:c6:98:62:d4:f7:b3:ad:1f:66:44:f6:bb:22:37:
1a:fc:66:5d:03:ac:cd:e8:20:40:36:39:14:8e:ee:31:ca:5b:
c0:7d:7d:c4:30:86:ad:d5:cd:41:d2:d0:c4:bd:26:75:cc:c4:
72:11:e9:a1:14:05:83:1a:b4:dc:4b:63:c5:ce:4f:e1:e7:7e:
48:81:00:9c:cf:14:8e:dd:d2:99:f8:22:8e:dc:70:d7:ee:b2:
01:90:e5:53:67:35:2a:e8:ea:59:29:1d:57:c7:26:31:55:52:
b5:d8:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:31 2026 by rpki-client