Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: q7glmrKx/Yvyke/RMr6pGYyrrp8WGpDVT97Hux1TniY=
Subject key identifier: 2B:F6:FD:54:D5:42:2A:5E:91:8F:DE:41:20:AC:58:25:79:A4:1B:11
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019E51B50304DB05109570BA925A747F5532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1923
Signing time: Fri 22 May 2026 22:01:17 +0000
Manifest this update: Fri 22 May 2026 22:01:17 +0000
Manifest next update: Sat 23 May 2026 22:01:17 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: dJbiDWv3Qgwip8jyfPBjS41z0MjMpU1y6g66hceZjmM=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:b5:03:04:db:05:10:95:70:ba:92:5a:74:7f:55:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: May 22 22:01:17 2026 GMT
Not After : May 23 22:01:17 2026 GMT
Subject: CN=2bf6fd54d5422a5e918fde4120ac582579a41b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:e0:f4:97:7f:b8:a6:10:34:fc:04:dd:c9:
9a:ca:0e:04:b3:8b:80:9b:9d:83:40:ed:03:af:ae:
8c:e6:97:83:92:5e:dd:e4:f4:67:8e:8d:33:13:f6:
ce:22:9b:29:dd:93:9a:57:d5:4f:00:28:f6:64:c1:
5b:76:2f:77:61:f8:3c:44:84:10:97:65:e5:9c:f6:
71:9c:e9:6b:7a:2a:97:9f:f5:b4:a9:0a:c0:69:93:
1d:18:1a:ad:41:84:46:ca:13:7a:73:75:26:d0:58:
57:37:27:d0:04:42:74:5f:2c:a8:f7:8f:d4:b1:6c:
14:14:a6:ac:46:d2:de:2a:eb:67:37:c8:20:7d:99:
c9:97:53:07:38:c8:23:7b:32:f4:bb:22:d7:e4:5c:
e1:7d:bd:43:d8:fe:62:4b:e2:a3:0c:9b:58:31:4f:
d5:4e:db:eb:b3:38:70:b0:57:16:df:6d:b2:0d:9e:
d7:7a:4d:c2:e9:1d:04:32:55:c0:ad:d0:7c:fd:c0:
7f:d6:59:ac:eb:3f:ed:8a:8e:ab:62:7b:6b:15:4f:
ea:38:5e:df:19:f4:6f:84:e2:21:26:a9:a4:09:91:
18:19:e8:66:80:f2:38:1e:b5:6f:85:75:93:50:52:
85:db:cf:88:a9:f4:b2:b8:2d:e0:09:0c:97:2d:f4:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:FD:54:D5:42:2A:5E:91:8F:DE:41:20:AC:58:25:79:A4:1B:11
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:71:73:2d:4d:08:31:2c:98:31:cc:17:60:ac:d1:27:c3:
24:e8:29:1d:36:80:55:a1:80:f1:2e:0b:6a:c2:a5:6c:c3:61:
dc:ad:af:56:7a:ab:03:c6:cc:fb:bf:1f:68:90:e9:05:38:97:
35:b4:d4:04:da:18:d1:6d:23:c1:9e:ce:f8:5d:33:e0:1e:40:
24:1b:6a:c1:0c:17:01:0c:48:1c:c8:f0:25:91:13:99:16:01:
62:fc:dc:c1:4d:fd:43:b9:ea:07:36:34:7c:5d:eb:fd:59:46:
09:06:3e:b5:7d:dd:f0:73:8c:11:50:4d:3f:7f:81:ab:3e:1d:
56:e9:0f:4b:f4:e3:67:dd:29:b0:cc:5a:e4:09:61:cb:53:d8:
c6:65:84:18:50:97:c9:dc:f2:71:c0:93:a4:0e:2c:80:b3:fd:
65:b7:0e:e7:ad:fb:c6:0e:f9:dd:45:54:1f:30:88:c4:e6:c7:
3a:63:ec:f6:42:45:bc:7e:6d:9b:ba:0e:c4:13:18:70:0a:51:
c2:78:6f:07:bc:33:72:a9:8f:dd:e0:96:fe:d6:99:06:9c:e3:
8f:1d:5e:35:f6:f4:1c:b7:2a:81:0e:dd:58:d2:1f:71:3e:cb:
e0:dc:26:98:d0:6b:74:ad:3c:d4:48:ea:ad:11:6a:38:71:3d:
32:a0:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:12 2026 by rpki-client