Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: Qf4AOtvrz3Nbhl9UAHrfirm8vfof/NHKKSZzqU3Ox5E=
Subject key identifier: 5B:9A:92:7F:69:AB:D1:FD:49:97:A2:4F:C6:23:32:FC:74:F7:64:5A
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 01A0250E754C6B817D15626ED57E0843BBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1A15
Signing time: Fri 21 Aug 2026 16:01:39 +0000
Manifest this update: Fri 21 Aug 2026 16:01:39 +0000
Manifest next update: Sat 22 Aug 2026 16:01:39 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: v16hVEgSe8Gf9CO7DNPtZ6jmZex63lhJx0pYfAKVu7A=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0e:75:4c:6b:81:7d:15:62:6e:d5:7e:08:43:bb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Aug 21 16:01:39 2026 GMT
Not After : Aug 22 16:01:39 2026 GMT
Subject: CN=5b9a927f69abd1fd4997a24fc62332fc74f7645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:cc:61:cb:92:85:58:2d:1a:7b:3f:e3:23:
75:38:8b:f5:92:09:f3:55:c0:5c:07:06:fc:e5:81:
90:5f:b8:bf:aa:2a:b7:b1:2c:1c:52:ab:c3:d8:bf:
69:55:f8:6b:2e:9f:61:12:17:99:ec:e5:1c:de:bc:
c9:8a:e0:04:11:7d:2c:1e:85:32:bc:3e:d1:dd:9a:
14:92:76:0a:7e:a2:6c:32:33:55:36:82:21:f5:cf:
ae:e0:f6:6c:27:41:f2:24:3c:19:dd:22:91:ac:d0:
8a:56:d0:23:72:86:9b:d9:8a:85:9f:f6:40:e1:6e:
c4:03:0a:a0:87:17:5d:9c:51:ad:ad:c7:2c:20:83:
f0:58:75:3b:2a:a0:ff:21:e2:c1:d5:87:8a:3a:5d:
1c:9a:bf:fd:b8:92:ba:83:cf:a4:ba:57:38:04:9f:
85:15:30:c4:4a:8d:ea:bb:45:78:a4:ed:68:09:33:
9e:7e:47:9a:6b:e0:45:3c:cb:6b:d2:45:99:46:7f:
17:23:a3:ad:53:e0:f9:cf:1d:f8:27:dc:5f:bc:dd:
7f:1a:23:1f:aa:0c:02:75:50:76:f8:e9:f5:44:a4:
64:40:65:e8:f4:32:bc:8e:95:33:16:9c:71:e2:31:
de:05:9c:58:f0:cf:b6:c2:c4:23:8b:01:de:f2:0c:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:92:7F:69:AB:D1:FD:49:97:A2:4F:C6:23:32:FC:74:F7:64:5A
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:23:e1:f5:c0:99:bf:7f:1f:b1:c4:15:45:a5:1d:c6:2e:
ac:ce:8b:4a:11:35:da:65:4c:43:2b:9e:de:df:11:2c:9b:af:
aa:03:a9:bf:26:e4:05:4e:a6:70:23:01:67:e7:c6:64:59:a9:
91:16:40:c2:f4:06:4c:de:6f:ed:01:05:ef:0a:ae:0e:c9:f9:
6e:ce:99:a5:84:43:fb:9d:bf:7f:38:37:08:3d:b3:70:76:a0:
20:f7:8d:70:dd:83:3b:4b:97:27:c1:1a:bc:0e:41:7b:43:66:
8a:ef:62:f7:99:91:ee:3b:dd:94:8f:f0:40:77:57:ae:e8:f2:
ec:eb:76:bb:eb:54:ad:86:a6:c9:8e:b8:13:0b:fa:fb:ca:97:
dc:84:55:dc:1a:23:75:32:65:40:e4:20:6b:83:7d:1e:a7:de:
06:58:01:42:88:8f:eb:6d:b7:29:58:45:27:06:17:b0:45:46:
55:11:89:e2:9c:4f:88:bd:65:46:0f:58:8d:ee:81:c7:07:ae:
eb:86:67:37:2e:f6:49:d8:9f:71:73:ee:c8:f3:30:fc:20:90:
51:f6:32:76:fa:43:2c:7d:a2:9e:d7:37:c6:50:fb:32:4e:99:
ad:5e:31:f2:08:36:fa:48:27:59:7a:0f:ac:c1:73:b9:1a:4f:
a1:be:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:40 2026 by rpki-client