
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: SF+BKGfacYxDjBzEiZjn97mfTeD8qb5LLCLVe7N0u/o=
Subject key identifier: EA:17:C7:B2:7D:5D:DC:EB:B9:50:1A:66:4F:76:92:F7:D7:38:66:CA
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019F3B625C69DD8AFFF91D73A0E2130B3FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 199C
Signing time: Tue 07 Jul 2026 07:02:09 +0000
Manifest this update: Tue 07 Jul 2026 07:02:09 +0000
Manifest next update: Wed 08 Jul 2026 07:02:09 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: ZJhsX3acyynNl6WWvoM/zM8bst+m0dSxsPuCnphhwfw=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:62:5c:69:dd:8a:ff:f9:1d:73:a0:e2:13:0b:3f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jul 7 07:02:09 2026 GMT
Not After : Jul 8 07:02:09 2026 GMT
Subject: CN=ea17c7b27d5ddcebb9501a664f7692f7d73866ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:1f:88:3c:cf:5a:af:62:52:1b:4a:e8:a2:
98:c1:63:ad:a1:1f:3b:da:2c:2e:48:75:5d:e2:fd:
2b:e1:09:43:ca:7f:54:79:3d:1f:de:a4:75:23:ab:
e7:55:b2:61:30:d7:6c:96:53:36:b5:14:1c:ad:27:
fa:55:81:ee:b2:d8:c0:d0:ed:ae:5b:d7:e3:40:c0:
ea:e4:c3:7f:75:a8:ad:c4:cd:5b:db:75:f1:12:bc:
b5:28:2f:7a:75:ad:5a:ba:fa:2d:4e:15:0d:eb:4d:
9c:83:c3:70:24:7d:d1:f7:b7:0b:c0:a2:0b:b9:12:
cc:dd:bc:0e:f7:01:a1:86:09:1c:63:e8:16:8f:f9:
8c:32:f9:e6:0e:fe:b9:24:5b:52:5c:ef:c4:ca:0a:
74:54:84:5c:e8:b1:00:3b:e6:6b:b5:a0:e4:81:c0:
5a:49:38:f7:cf:3a:60:d3:ab:4f:ec:1e:42:58:b9:
fd:8b:d8:b9:47:c6:d2:41:1e:83:87:07:1f:79:26:
a2:ff:5d:e1:16:81:73:25:06:89:39:44:65:52:60:
57:d5:9a:82:7e:4e:07:df:51:f8:99:a6:f9:f3:0a:
1c:02:62:16:ce:0d:bf:68:ab:b3:bc:16:ae:5a:79:
c2:ad:2a:93:a7:22:6f:bc:d6:e8:9f:cf:dc:41:cd:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:C7:B2:7D:5D:DC:EB:B9:50:1A:66:4F:76:92:F7:D7:38:66:CA
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:bc:73:2f:90:86:68:98:08:86:36:4a:c3:74:cf:7c:35:
b2:4c:ac:02:21:84:8f:49:86:da:79:ac:b1:16:d7:0b:19:6e:
9a:0a:a0:ac:6f:b4:19:3d:5c:29:a6:ee:81:f8:97:a8:e4:e7:
51:10:d1:ce:be:f6:7f:c4:fc:fe:bf:c8:77:86:33:af:80:9a:
9a:5c:6c:7d:8f:7f:e0:c1:4e:22:df:14:d0:7a:0e:66:4c:25:
f7:72:8b:64:7a:a6:63:49:f1:61:ab:4f:b8:d6:98:d7:a9:15:
2e:71:95:60:2a:e3:c5:8c:39:7f:7a:e6:8a:4d:a4:06:cf:a3:
f8:46:34:c8:c9:c0:7e:76:a5:9b:63:f5:af:ba:c4:a9:87:3c:
20:93:0e:0e:57:d8:65:a4:01:0b:25:5a:2b:f6:cb:51:c7:12:
68:58:8a:bc:65:32:c3:f2:9b:51:a1:81:ae:2b:0c:af:d1:ce:
49:d5:1e:d4:b4:02:e8:72:28:d4:96:fe:3c:43:93:ca:68:96:
bb:db:f7:bd:f5:13:e0:a2:6b:80:3a:22:a7:11:6b:ea:78:16:
7e:aa:f3:ed:2e:49:28:46:83:1c:43:59:b1:64:d9:c4:9f:d9:
4c:8b:d8:db:12:21:a3:4e:aa:2a:ea:a0:ff:24:94:39:c5:a9:
09:56:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:58 2026 by rpki-client