Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: NsfZhLaTfGHm0NvRTzYeE/jsU3d9+bRrEihc2Hfp1S0=
Subject key identifier: 3D:52:C4:20:80:6F:A9:FF:66:09:BF:4F:6A:E3:FC:9E:DC:64:98:6F
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019DCFABC3703A961EB7A1DCDE998D362639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 03EE
Signing time: Mon 27 Apr 2026 16:00:33 +0000
Manifest this update: Mon 27 Apr 2026 16:00:33 +0000
Manifest next update: Tue 28 Apr 2026 16:00:33 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: a6y6YiYc233GyRWm5S4bo6ZTZbtS89+VgAQ0q9vK3bM=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:c3:70:3a:96:1e:b7:a1:dc:de:99:8d:36:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Apr 27 16:00:33 2026 GMT
Not After : Apr 28 16:00:33 2026 GMT
Subject: CN=3d52c420806fa9ff6609bf4f6ae3fc9edc64986f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:a0:4b:4c:51:96:bc:10:90:1b:1f:12:8b:
e4:c4:fb:0b:ef:c3:69:18:2f:f9:d3:5b:a9:0c:70:
b4:5e:53:46:52:4a:a6:76:19:e7:92:02:0b:9c:28:
85:e4:a9:21:c6:c1:42:ed:de:18:ef:e1:9a:2a:6b:
5e:61:99:61:b7:ca:d5:87:38:55:f3:9e:4f:d3:99:
c6:62:57:ec:58:88:72:2e:a5:e0:b9:0b:ba:90:3f:
39:67:c3:83:42:22:54:7e:53:cb:51:c3:31:50:b1:
50:b9:8d:5b:4e:18:f5:2a:db:a5:8c:54:7f:20:79:
f8:3e:f2:89:eb:ef:b8:99:5d:ef:32:10:83:e0:51:
57:50:33:b5:61:14:ae:cf:0e:41:dc:a5:0e:5c:06:
6d:f9:dd:35:f3:29:d8:90:7b:d6:28:1a:94:c0:2c:
7e:5d:0c:ef:50:ee:ee:0b:f0:53:d7:af:be:80:18:
86:da:ac:41:18:e0:4c:f4:72:56:07:65:dc:79:5a:
16:37:be:87:5e:f0:ff:78:76:2b:fd:b1:db:b8:12:
63:88:aa:84:18:3b:69:44:37:9c:48:64:d9:9a:07:
b3:ad:70:8f:e4:26:f9:1a:14:b6:ca:b2:1d:bf:82:
09:ee:b9:d1:84:fe:eb:15:18:1f:7e:b2:bf:6c:f6:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:C4:20:80:6F:A9:FF:66:09:BF:4F:6A:E3:FC:9E:DC:64:98:6F
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:62:cc:16:69:db:c6:16:3e:19:73:03:01:5e:3b:f8:76:
83:8d:f8:fb:14:15:2f:e5:29:ed:ca:5a:90:91:5c:7b:df:23:
ac:1b:83:84:07:88:b1:04:f4:2d:00:9f:81:fe:31:d6:7a:39:
8b:b0:c1:7d:80:96:ae:40:ca:61:be:ef:fc:e8:be:13:47:a4:
b5:3c:0e:e8:c7:c2:75:cb:99:0a:2b:ac:eb:8d:ea:4b:93:3b:
2a:09:93:1d:e8:15:ce:8b:4c:33:e0:63:4e:13:35:de:5b:81:
cd:cf:99:ca:0e:7a:02:60:3b:2b:f6:c8:21:c6:ae:0b:28:1f:
81:a4:85:06:18:aa:e0:98:c6:5a:df:6f:6f:da:13:84:58:55:
99:48:22:dd:30:79:cc:ff:7e:d8:c9:06:6a:9a:5e:95:31:f1:
6d:40:93:9e:c6:4e:be:33:bf:8b:b5:b9:a1:c0:07:56:f9:1e:
49:f6:bf:1d:a1:86:1e:2e:6e:fc:05:c9:71:e6:0e:aa:9e:d8:
4d:d6:78:10:6a:4e:4d:3f:71:d5:45:32:fb:22:9b:e1:e9:a9:
b2:b6:7e:6b:4e:df:16:e7:0e:32:5a:5a:79:8e:7c:d9:f9:66:
1e:fe:f0:6c:88:cc:cf:0c:61:32:83:39:0a:fd:b9:77:ab:ef:
e8:82:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:17 2026 by rpki-client