Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.mft
File: T6xNt0xC3isU3i8X6-Bc0K4WV6c.mft (raw, json)
Hash identifier: TjxgNm26O/M3euEW6vKaNHV0hrxJKNQ28tv9OLtPLQA=
Subject key identifier: AA:87:20:DB:9A:B2:43:C9:86:A8:E4:44:B1:FF:CD:6A:84:8E:51:60
Authority key identifier: 4F:AC:4D:B7:4C:42:DE:2B:14:DE:2F:17:EB:E0:5C:D0:AE:16:57:A7
Certificate issuer: /CN=4fac4db74c42de2b14de2f17ebe05cd0ae1657a7
Certificate serial: 019D38D347B2506A21A89C5183AA8AEB8234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6xNt0xC3isU3i8X6-Bc0K4WV6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.mft
Manifest number: 5E
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: T6xNt0xC3isU3i8X6-Bc0K4WV6c.crl (hash: uBCO9mX+d7nQbS18ebxU6W+i+FTmcZBsWRUPyhsfiCo=)
2: q5CtvN_l8nCryQtPwFsCoYSMCbU.roa (hash: Y06PYVQHlvVSUgvLJexpCXix3AkNf9Q2yjfvtoBfjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6xNt0xC3isU3i8X6-Bc0K4WV6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:47:b2:50:6a:21:a8:9c:51:83:aa:8a:eb:82:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fac4db74c42de2b14de2f17ebe05cd0ae1657a7
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=aa8720db9ab243c986a8e444b1ffcd6a848e5160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:08:39:6a:fa:13:81:fd:53:f1:de:aa:db:
b0:f0:d1:0c:d6:ef:e9:6a:06:d9:2f:ad:85:98:c6:
ea:7d:a2:7c:0c:17:9e:31:d9:57:4f:95:7a:43:0b:
c7:ee:1a:b2:37:15:6e:6f:39:16:bc:d8:fc:d1:96:
b8:41:85:23:12:24:74:02:f2:eb:b2:be:b3:0d:94:
cc:78:12:a8:ba:bb:53:ac:1d:0b:b7:0b:44:52:3d:
07:1c:62:4a:89:b5:d0:bc:fc:04:22:e8:d1:e5:cb:
e7:97:25:5b:da:21:68:5e:cc:0f:37:4d:ac:24:af:
b6:09:2a:d9:4a:a5:37:c3:72:d7:e2:54:95:3b:e3:
3e:60:86:6a:35:e8:ef:4f:5a:7a:29:93:0d:59:27:
ed:b4:0e:13:1c:d0:b9:2a:a7:9a:64:04:88:4a:4f:
8a:1d:2c:b4:e2:c1:40:a4:54:37:14:b1:0a:e6:fa:
d8:4c:5f:ae:17:25:00:4f:f9:cb:38:6d:54:21:a5:
62:c1:65:2b:f1:9d:44:c7:01:8f:e7:77:ba:92:a5:
83:f5:6c:c9:70:32:c9:df:bc:88:1a:7a:b4:f5:2b:
af:a9:cc:81:f6:a2:9d:af:86:43:38:56:a6:05:4e:
6c:a6:56:c3:04:dc:b0:9b:b4:e3:11:8b:2f:d8:be:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:20:DB:9A:B2:43:C9:86:A8:E4:44:B1:FF:CD:6A:84:8E:51:60
X509v3 Authority Key Identifier:
keyid:4F:AC:4D:B7:4C:42:DE:2B:14:DE:2F:17:EB:E0:5C:D0:AE:16:57:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6xNt0xC3isU3i8X6-Bc0K4WV6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3f243a-4a13-4f5b-9695-27bf74145b9f/1/T6xNt0xC3isU3i8X6-Bc0K4WV6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:e8:fc:40:96:4d:f0:fb:19:98:68:47:b5:ed:31:e9:a1:
24:6a:47:9d:73:4a:bb:15:31:49:ee:3a:8a:5b:a9:ea:35:fb:
92:0e:fb:d1:87:08:0a:08:d7:28:6d:e8:3e:f8:18:8b:ab:06:
96:21:79:a8:a9:ab:c4:f1:8a:2c:fd:85:24:76:59:6a:f8:a7:
63:26:3f:f8:e6:bf:e4:b2:3a:08:d3:17:28:72:0f:d8:a0:ce:
b7:eb:f1:35:92:2b:73:52:49:1a:c3:94:96:d4:24:99:d0:22:
83:04:ac:f6:9b:d5:ca:9c:41:a2:9e:ff:09:2a:4e:1e:95:65:
55:ec:c3:52:18:b0:b8:52:43:cc:d7:59:57:b5:48:0a:23:87:
27:5d:cc:66:ee:d5:e2:d4:31:55:b0:2a:51:35:84:d0:0b:20:
ef:95:f4:20:04:b6:23:f4:2c:29:b9:2e:fc:a0:fb:fa:68:a6:
f7:00:6d:44:6a:78:74:93:61:01:6b:f8:2e:47:f1:19:d3:26:
18:ab:98:e7:4e:88:75:42:77:1a:62:65:4a:42:b2:4f:bd:a2:
39:fd:7c:11:4b:b5:3d:0c:41:4b:e4:f3:9d:ed:14:09:72:97:
52:b6:78:da:8d:6b:6f:bb:ab:34:98:40:e8:65:e7:58:a0:fc:
2a:65:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:09 2026 by rpki-client