Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: ewtY+6mSx0wNzI2EM8XCNocu5qhv/zHwFmCZG3mNwTY=
Subject key identifier: 17:1B:D3:26:2D:3B:A5:05:52:63:41:61:BD:EC:BA:AB:9A:26:E5:93
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01A0902089242C74EE65A22927EF95DE4497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0EE7
Signing time: Fri 11 Sep 2026 11:00:46 +0000
Manifest this update: Fri 11 Sep 2026 11:00:46 +0000
Manifest next update: Sat 12 Sep 2026 11:00:46 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: BxvtZn6Sh1O0oUs29rJxX8LtwGD4myHP3nRwL1Tk25E=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:89:24:2c:74:ee:65:a2:29:27:ef:95:de:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Sep 11 11:00:46 2026 GMT
Not After : Sep 12 11:00:46 2026 GMT
Subject: CN=171bd3262d3ba50552634161bdecbaab9a26e593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:50:5d:0b:08:5a:8c:5a:42:a8:12:6e:26:
1e:44:e8:11:bd:af:d1:e3:8a:a8:fc:e9:32:2b:47:
7f:d6:7f:d9:3d:09:76:79:52:ae:5a:ad:14:b4:cc:
59:cc:9b:52:f0:2b:ed:8b:b5:29:a7:ba:1c:c7:7f:
6b:2c:9c:14:79:72:15:c6:9b:7f:fc:6b:11:cf:c9:
03:36:e5:3a:93:ef:0e:9c:be:8d:38:5c:8d:40:e9:
dc:7c:d6:48:d6:81:16:39:9d:bb:d2:40:32:aa:64:
42:a0:8c:db:61:21:94:d7:42:70:e8:41:4c:db:63:
ca:47:cf:2d:d1:49:70:50:1c:dc:49:b2:90:f5:7a:
30:d4:b8:c3:14:ea:91:30:32:06:d9:6a:57:2f:37:
59:6b:83:68:a8:21:ea:97:88:12:26:e5:9d:f9:26:
a9:c6:58:6b:f1:a4:b2:39:b8:47:c5:73:98:7a:e3:
6b:60:0e:87:67:43:c0:6a:47:cf:a0:95:5f:0c:99:
b5:ce:a4:c7:d9:40:b0:67:f8:b8:70:76:fb:a0:93:
84:eb:f3:1d:ba:6f:5b:58:c1:88:b6:be:84:6c:4a:
bc:af:f4:53:28:30:44:ce:d0:0f:d1:57:f3:00:c5:
f7:79:3b:55:c7:97:19:8b:d0:3d:2d:af:72:2f:cf:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:D3:26:2D:3B:A5:05:52:63:41:61:BD:EC:BA:AB:9A:26:E5:93
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:10:28:8e:ab:14:54:7a:a9:df:f3:31:81:7a:79:32:60:
c5:00:7a:8f:00:76:ac:eb:ba:12:e5:32:e3:21:db:de:08:71:
44:15:1b:c1:26:7f:4a:7e:55:f1:db:15:27:38:a8:90:c4:00:
3e:32:ad:eb:fa:ac:89:82:e3:b5:78:52:fa:a4:58:e0:d5:de:
a9:a6:3a:fc:cb:d3:9d:e6:6f:0f:8b:3c:02:ac:d0:69:e2:b8:
68:96:1a:2b:cd:ae:8f:5e:af:b0:4e:fa:39:ee:b3:bc:6e:fc:
00:4f:89:ca:05:85:69:86:1f:d2:7c:be:a7:32:a0:42:fb:16:
13:bb:8b:e6:ba:58:6f:14:87:e5:0a:03:01:d0:96:29:62:77:
02:58:37:5b:f2:5c:29:36:fe:ad:c1:05:08:c9:ac:2c:d0:ee:
0c:b6:be:9c:b2:00:25:71:51:7d:9c:c4:1e:af:8b:72:45:38:
c3:98:fe:1b:76:d7:35:9f:1f:ea:fc:b6:dd:24:b9:93:02:e5:
64:01:a1:00:ce:83:aa:a2:b3:8e:59:e8:f5:81:ff:1d:b8:b3:
88:87:c3:03:51:1c:51:41:73:4b:8e:89:e6:48:df:05:d0:34:
6b:aa:80:12:a0:94:65:75:5b:6c:5b:2f:01:17:c7:d8:16:ff:
db:25:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:08:50 2026 by rpki-client