Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: 3A4uGCZxqqpnwT3UblFH7DnO587k9/r5Hlsa9ZSKsA8=
Subject key identifier: 84:BD:6F:E5:53:6D:DE:FD:4F:0F:E1:AA:62:4F:08:0A:1B:A1:5B:6B
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019E4F58C32EF48FD049B66EA48306C88391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 16EE
Signing time: Fri 22 May 2026 11:01:17 +0000
Manifest this update: Fri 22 May 2026 11:01:17 +0000
Manifest next update: Sat 23 May 2026 11:01:17 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: Gqw4KjPKje8Tce/WKp9UsPuS/eSZwBCYvYknJdhKhfQ=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:c3:2e:f4:8f:d0:49:b6:6e:a4:83:06:c8:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: May 22 11:01:17 2026 GMT
Not After : May 23 11:01:17 2026 GMT
Subject: CN=84bd6fe5536ddefd4f0fe1aa624f080a1ba15b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:9a:a6:2e:ad:e4:14:84:81:1d:a5:ac:a9:
c6:f4:d3:d6:70:08:9a:62:31:1d:ab:03:fc:41:b2:
cf:6b:79:07:62:c0:01:97:1b:4f:07:b5:98:99:67:
38:e9:b8:b3:c1:52:8a:15:d2:d1:15:bc:e0:0d:3e:
b0:14:00:75:f5:54:79:6a:7e:9b:79:77:30:92:19:
17:8b:9f:5d:c8:0c:2c:58:fa:13:1d:17:78:4f:e0:
c4:52:de:5c:cc:53:2e:2a:c4:29:e4:90:b2:59:e3:
42:0e:95:db:e9:4a:f4:d2:73:a7:ac:bb:e2:2e:6e:
17:01:88:08:d8:8d:12:bd:e5:1b:b1:89:a1:cf:71:
9e:f8:bb:f0:32:f0:f1:45:8f:e0:69:2b:cf:62:76:
e9:da:73:22:2c:c4:ee:57:40:1a:b8:9f:35:87:fd:
e5:ef:d8:6d:e8:72:e6:5e:32:2a:ec:54:cb:1c:ed:
7b:9a:89:b7:6d:25:fd:a7:84:bf:a9:96:f3:22:33:
e8:d0:4c:fc:1a:f8:20:c3:95:28:3e:9a:85:b7:a5:
df:d2:2c:13:fc:4b:d5:d8:f3:b7:31:af:bb:71:ce:
03:fe:03:a3:d6:aa:6b:9d:53:63:83:bf:98:ff:99:
c6:6a:0a:ad:98:ac:85:36:ce:eb:a4:46:f8:2b:9c:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BD:6F:E5:53:6D:DE:FD:4F:0F:E1:AA:62:4F:08:0A:1B:A1:5B:6B
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:29:81:72:b7:1b:9d:89:5b:c1:a4:72:4f:a2:1f:40:71:
76:99:f6:21:0e:a3:e2:d8:bf:c0:52:29:96:be:17:a1:47:29:
4c:84:b7:08:05:8d:9a:b3:62:e8:4b:27:a6:e0:4b:3d:45:b1:
c6:ab:fd:4d:9b:c8:63:3f:9e:69:f7:41:5f:dc:1a:29:cf:c4:
e2:1a:08:58:13:4f:a2:27:87:02:ed:39:d3:36:36:d2:b6:34:
f4:50:91:e2:45:25:69:0e:6b:02:a6:4b:c1:de:96:c5:30:0e:
8d:d5:62:ac:eb:3e:12:e7:ae:d9:ef:d1:46:22:64:17:e0:68:
80:de:67:1b:44:0e:b2:cf:cc:78:d2:a7:11:2b:84:1b:b8:d2:
37:41:1d:7c:db:95:5b:a2:a3:92:c7:f8:12:27:4b:f6:bd:c3:
1e:17:b7:d9:6c:62:22:57:f2:89:09:ed:ad:e7:48:7c:59:3c:
e7:a5:b9:67:3c:25:42:8b:b4:eb:16:8d:22:9b:6d:ce:6b:de:
14:cc:b7:f6:65:5b:24:b8:4a:4e:bd:8b:c5:96:2a:5e:89:53:
61:23:04:99:62:9f:51:2a:84:87:54:88:59:70:c2:1c:9a:62:
6e:96:6b:c0:48:62:23:e4:6c:aa:90:f1:0a:98:73:c5:c1:3f:
db:a2:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:53 2026 by rpki-client