Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: 5lB5gx4GSDqPdZoNOXHCGj81ax9NURcgNmtocw+Pcws=
Subject key identifier: A4:16:9F:A0:47:2C:C7:ED:1C:48:CA:41:5B:7B:55:F2:AA:84:30:C5
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019D37C037FAF0DC69BA6AD7DE921AD58343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: xPRHP+nOxI7qR7xwLJ9wltWSasFA9g/LEE0ntoUJASg=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:37:fa:f0:dc:69:ba:6a:d7:de:92:1a:d5:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=a4169fa0472cc7ed1c48ca415b7b55f2aa8430c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:af:0e:03:5d:f1:7a:48:e4:98:17:c8:38:
57:0a:f4:65:25:2c:36:03:e1:8d:36:ca:55:13:6f:
93:30:42:e0:bd:5f:2b:a9:0b:69:40:1a:1a:63:83:
9a:ab:87:7d:9c:19:8a:c8:00:9d:12:0d:f6:10:ca:
b7:83:e7:a4:4a:92:04:e4:41:b7:d6:fb:ae:79:8a:
4c:7f:73:9f:82:b7:f5:96:25:f0:e4:13:a4:07:c2:
c3:3a:22:2c:d1:21:f2:94:35:7a:e4:a6:ff:e7:de:
98:51:8e:66:7c:e9:c6:da:f4:af:a8:3a:7e:1e:0a:
88:0b:1b:38:28:6e:41:b6:0d:2c:ac:71:2e:b3:42:
79:60:84:42:25:c8:d8:50:64:d9:05:8d:ef:dd:e1:
c2:9a:1d:b0:32:4d:e3:72:fe:b4:ec:18:de:85:96:
8d:40:a1:d4:42:33:63:96:c2:b8:33:31:9f:2d:b4:
f7:a8:61:d9:cc:6f:57:90:a7:87:f9:3f:fb:f1:a9:
56:6c:2c:39:5d:a0:9e:4f:2d:41:8a:ac:0f:16:be:
ae:3e:60:54:8a:39:1b:bb:86:26:47:99:e5:87:11:
a8:df:6f:2b:db:4e:4b:32:ce:1d:a6:c9:2a:5c:2e:
64:40:d5:6f:e0:25:89:ae:7a:5c:f3:0c:97:75:4a:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:9F:A0:47:2C:C7:ED:1C:48:CA:41:5B:7B:55:F2:AA:84:30:C5
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ab:72:a0:a8:19:58:e3:21:37:6f:94:94:3a:ef:11:7c:30:
e4:6f:1b:ed:c8:23:7d:2c:47:f4:97:75:ce:33:fa:5a:30:72:
eb:ef:ae:af:70:94:01:a1:22:4c:5f:47:f6:0c:3a:44:7f:2a:
fe:50:e9:0b:1a:34:dc:db:0d:73:5d:ef:9a:90:b1:ed:e8:b2:
4d:0c:fa:32:1e:86:a6:04:7e:d0:f9:99:25:f8:13:59:96:1d:
ce:92:02:51:ae:1c:2c:38:1f:b3:20:d9:19:31:12:0e:9e:42:
3e:ca:f1:53:1b:95:99:27:b1:2c:78:bf:cd:e2:59:5e:54:4a:
d1:6a:8d:f7:7e:a5:db:63:9d:8c:45:19:d5:ce:c1:da:b1:77:
16:01:35:1d:85:8a:e6:4a:a6:aa:8a:35:b2:25:c2:db:fd:0b:
ae:e3:1c:07:f7:8e:65:dd:48:1b:d9:e6:3a:1c:d6:5d:c7:2a:
a6:58:96:f9:7d:ea:8e:76:d3:51:2e:6b:92:a0:54:a1:34:72:
a4:dc:f1:8f:df:7b:b8:ac:0b:83:2b:6c:1c:6b:e6:79:e0:52:
ab:3c:c3:70:3d:71:0a:93:7b:5d:ba:6e:8c:1c:d3:cd:ac:2f:
c3:27:e1:d4:d2:6e:4a:89:34:4c:0a:90:f4:3c:f2:13:83:3c:
2c:4d:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:49 2026 by rpki-client