Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: DV3yy1A0yKhv+CDNUOFnvVa3U3D3C34IvIBK307zLoU=
Subject key identifier: 51:30:92:E4:83:14:19:D2:EE:81:1B:CE:A6:A6:EF:88:FD:AB:92:81
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019D389BBB29727692F26AD31329841A73DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0D2C
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: aDqHxhnqwyZ5OoUS5RVbSO7r0FdVtte6RxyPtZSirrA=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bb:29:72:76:92:f2:6a:d3:13:29:84:1a:73:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=513092e4831419d2ee811bcea6a6ef88fdab9281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:b2:1f:65:a4:57:e4:bb:90:6b:eb:f7:4f:
08:d8:4e:01:5e:61:b5:6c:9a:2c:d3:b1:e2:1a:05:
25:7c:b8:85:a6:fb:89:18:64:d6:27:12:29:a7:fd:
23:b8:98:bb:1b:9d:2f:ce:1f:cd:c1:6d:35:f9:8a:
ce:ad:fa:e5:15:dd:93:4c:4c:03:0f:44:09:3f:64:
db:ec:87:d7:df:7b:30:f4:c2:8e:0c:00:31:1f:18:
1d:2c:a4:54:e4:89:05:f9:7d:6a:ea:35:81:b7:19:
c9:f5:19:55:4c:d2:56:11:c1:99:53:8e:2d:6e:71:
04:2f:95:01:06:65:ae:75:4c:0e:37:c8:07:42:86:
71:ac:c3:bb:05:4c:42:d4:7e:61:9c:d0:a6:02:16:
a7:09:e4:a9:95:06:73:1f:99:ef:a6:0b:9e:16:98:
51:5f:a7:63:90:f4:a7:59:b5:e5:50:c3:4c:4d:0b:
ae:6f:e4:44:b5:90:21:48:d4:f0:60:a6:de:2a:66:
0b:ad:c4:b8:c6:4b:b7:a4:0c:da:85:06:1f:71:95:
f1:f5:de:cd:cf:d9:bd:69:a8:6a:73:4f:c1:d0:2d:
3f:75:3c:60:11:0f:b9:9d:93:68:8c:a2:5a:77:51:
8e:a8:6c:61:88:f0:f0:9f:8a:7d:59:9f:3a:b4:6f:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:30:92:E4:83:14:19:D2:EE:81:1B:CE:A6:A6:EF:88:FD:AB:92:81
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:33:ff:a6:46:2c:17:ff:9d:eb:4c:98:08:e3:a6:86:8c:27:
ea:23:68:72:07:21:52:96:53:f1:b9:49:da:81:e8:38:fb:b4:
43:40:9a:fe:03:25:5d:f6:d2:0d:2c:fd:4e:87:b3:d5:bf:bc:
13:e2:93:de:a4:80:8b:13:bb:d4:62:ac:34:0f:16:61:2f:7d:
34:60:f0:d9:68:33:be:b0:7c:56:5c:5d:4f:a4:81:5f:32:0d:
3b:47:b0:58:50:2c:43:64:b4:40:f6:ec:b1:09:af:7f:8a:c7:
0c:64:fa:ae:78:45:37:9c:0e:e6:a2:68:ed:af:e2:ac:02:b6:
ae:52:6d:c6:df:d0:68:33:d8:9c:70:54:36:80:ff:d7:34:02:
47:2e:92:0b:c1:1f:99:d6:96:34:49:75:19:8d:75:19:d4:74:
5d:ba:25:49:dd:2e:ff:3e:6e:aa:26:bb:c6:e4:61:6b:ba:d0:
32:c2:f7:49:24:91:3c:17:03:28:04:66:cf:c2:bd:2f:bc:d7:
51:7c:4e:aa:50:72:b0:45:38:dd:92:1f:3b:89:12:a4:3b:d2:
d4:9d:95:9b:28:5d:09:45:cd:4a:9a:ae:bd:90:56:b2:47:7d:
8c:2a:e6:a5:ec:6f:49:84:88:50:28:92:99:b6:53:72:1c:e0:
11:3e:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:42 2026 by rpki-client