Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: AkViK3vJ7i8V0Y7gYDikjeXgV2Z9MxEOZvcv3WEBt+A=
Subject key identifier: F1:61:73:EF:BC:91:D6:64:55:82:18:42:87:D1:44:40:CF:E6:54:FA
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01A17BBB04A81B9BD52D194F62DFF219F692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0F61
Signing time: Tue 27 Oct 2026 05:00:16 +0000
Manifest this update: Tue 27 Oct 2026 05:00:16 +0000
Manifest next update: Wed 28 Oct 2026 05:00:16 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: ZTRXQsApsCgDKWQfIZU41FvIz2WokMQpEfGoLnMdLCY=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:04:a8:1b:9b:d5:2d:19:4f:62:df:f2:19:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Oct 27 05:00:16 2026 GMT
Not After : Oct 28 05:00:16 2026 GMT
Subject: CN=f16173efbc91d6645582184287d14440cfe654fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:ef:aa:a4:28:6f:d0:42:d8:7e:e2:27:3f:
f0:ed:26:e7:6c:f5:18:7a:46:de:97:56:93:3e:50:
88:b3:73:23:4f:12:35:cb:00:aa:ba:54:61:d6:9d:
df:aa:1f:f1:3f:d0:9a:a6:eb:8b:3a:c4:bc:4b:22:
0f:55:fd:d5:03:fb:bf:ef:8f:be:a4:c7:72:09:87:
5b:e2:8f:b2:90:af:c2:ad:c8:e8:14:33:22:d2:91:
59:7b:fc:ab:23:bf:c1:96:df:cd:44:91:2b:09:29:
24:98:41:1a:00:34:92:da:4b:9f:a3:f8:9f:00:34:
69:e3:51:a3:b6:b5:dd:7e:20:12:a1:43:5d:0f:51:
13:61:4f:48:f7:05:95:dd:fa:39:83:2e:ac:21:d0:
b9:54:91:45:58:91:24:f1:30:aa:21:2f:e4:fd:4c:
f7:2e:67:7e:15:6f:8f:aa:7e:0a:05:01:92:ee:51:
b2:4c:a3:6a:0c:0e:de:fe:70:b1:d2:17:fe:6e:db:
45:2e:47:f7:ac:24:7c:eb:9e:94:39:05:12:f3:b3:
d0:b7:0d:b7:a1:e2:98:70:ce:17:89:47:6f:a5:91:
f9:af:12:b3:be:f5:bf:c0:02:fd:1f:c1:bf:7c:82:
6c:73:b5:f5:9c:5b:0f:13:12:00:3a:21:b6:2d:50:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:73:EF:BC:91:D6:64:55:82:18:42:87:D1:44:40:CF:E6:54:FA
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:8f:ce:a1:64:65:51:bd:23:86:56:60:8b:5a:83:c1:01:
61:7a:36:dc:de:9c:29:5a:13:ec:0b:44:2d:71:6f:3e:0b:24:
ee:a0:29:01:7f:ab:2e:c8:58:53:99:8c:65:96:c9:8d:0d:f5:
fa:5c:88:b1:d9:32:54:2a:fb:02:34:2a:f9:a2:e7:f2:83:90:
1b:f7:56:0e:2f:0a:54:bf:6f:77:1a:1a:cb:df:a1:74:25:06:
5d:fc:95:72:15:c5:7d:f0:f6:29:15:75:fb:47:8a:61:8c:ea:
39:37:8d:47:fd:22:e5:a8:28:c8:ac:4e:c3:97:f1:8d:c0:3e:
c1:bd:9d:70:9d:2c:54:c6:4e:6f:1f:27:50:53:f4:ab:54:4a:
40:ee:ef:f0:5c:bd:69:ad:56:3b:cf:26:ef:cc:a9:72:a6:c7:
ed:93:02:fe:c6:85:9a:99:3d:7a:4a:91:0d:46:c7:b3:5b:0e:
ef:b9:5e:f2:3e:d0:db:c9:82:39:38:bd:28:9f:0e:b9:e1:42:
99:ec:21:47:8c:d7:57:04:d8:d7:2b:b5:7b:ac:56:22:c5:07:
fd:d2:45:2f:ba:c2:9b:ef:3c:ce:de:50:05:5c:0c:91:a7:e4:
03:56:dd:63:97:05:76:8c:73:43:32:b0:f5:d3:e8:99:d7:cb:
dc:72:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:48:55 2026 by rpki-client