Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: iIhDD/0wXF29UGkM0+MOHuUkmweGH7r2JMko9QFRrGo=
Subject key identifier: BF:F1:1B:C5:DC:E0:59:16:96:3C:F5:64:DD:61:3D:B3:B2:0A:AD:5D
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 019D37C057F8EDA75C9DF29A8F77F7050332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: KX9pBYzJepVMCe4BaOlDn/XOEZZ8GjnlqXbQhF7JsSg=)
2: x89rzjrs6Nt2XEc3vV8pZLa4I9c.roa (hash: ye+jK9rOukJBboMMHLahiU263X6F4SzisjCcXlAZk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:57:f8:ed:a7:5c:9d:f2:9a:8f:77:f7:05:03:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=bff11bc5dce05916963cf564dd613db3b20aad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:ba:c1:3c:f3:69:a0:09:fe:af:5d:eb:e1:
a7:14:19:51:e5:fd:0a:c6:01:32:99:d1:24:5f:e7:
fc:d6:80:28:18:5e:f0:90:ff:ec:96:ce:54:fd:15:
ff:33:e4:d7:65:37:03:b9:31:5a:84:f3:ab:2b:74:
58:65:37:bf:e3:8a:a8:ea:d4:08:92:23:52:87:65:
b0:2c:2c:67:87:41:03:94:72:ac:84:3a:bf:6f:6d:
4c:b6:9d:d9:8c:5b:07:85:a3:48:d9:15:91:31:f0:
1b:cd:cd:79:46:38:b3:d6:ab:c4:51:80:a2:89:ad:
61:a6:3e:b4:65:8f:94:dc:bc:b3:c3:12:fd:e7:3f:
ab:98:b0:9b:8b:43:f9:10:c1:18:10:ac:78:9a:8f:
1b:14:76:80:44:45:a8:07:47:ba:a3:9f:20:e8:98:
84:19:77:68:03:77:90:62:41:7b:f5:bc:58:f3:c8:
2a:fd:00:fa:a8:1a:79:e2:08:fe:ba:01:bf:e0:13:
70:f1:7e:17:c9:9b:e1:fb:ad:49:e6:91:97:18:3d:
4a:0f:61:f5:41:80:d4:b0:61:4b:7e:ca:8c:39:57:
38:fe:6c:9b:fb:48:b2:32:68:31:e4:d0:cf:fc:68:
0a:f3:30:d1:24:a9:72:d4:83:7c:28:d8:67:cb:74:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:1B:C5:DC:E0:59:16:96:3C:F5:64:DD:61:3D:B3:B2:0A:AD:5D
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ef:5c:31:d3:b0:f5:5f:96:9d:2d:6b:ec:92:0f:21:c6:08:
60:9a:bc:fe:5b:3b:5a:2d:8d:10:58:97:21:64:43:ff:bb:a6:
72:d4:99:e4:3c:27:b2:47:26:4a:24:b8:5f:a2:7c:78:e2:de:
84:6e:61:e5:27:c0:4c:5d:ab:b6:35:36:40:21:0f:68:c5:41:
01:38:72:d2:a5:5c:d3:cc:88:05:5a:7c:30:61:c9:8e:e9:4e:
1b:5d:54:fe:2a:72:e9:91:bb:b8:ea:0b:c4:c4:14:c1:a9:3a:
b6:08:ad:68:79:52:5d:26:68:e6:ed:3a:b8:4a:32:14:27:33:
24:ee:5c:db:31:cc:0a:49:fc:32:59:54:f1:4d:0e:e4:85:07:
ce:5a:c3:f9:68:5f:03:8f:6b:0f:5b:0e:8d:df:dc:71:16:ad:
d2:8d:ec:1d:a8:83:89:74:2d:f2:53:f2:fa:2f:14:3f:9e:a5:
cd:b1:4b:e5:6d:17:9f:b7:63:d2:ab:97:4f:72:88:4b:f5:06:
c5:2a:d3:34:b0:49:69:2b:b0:1c:0e:5b:4b:0d:6e:b6:b4:72:
10:4f:cc:9f:b9:bd:02:8e:c6:9b:bd:66:23:b1:85:16:7c:4b:
6b:5a:5b:7b:66:de:e4:65:77:0c:41:4e:fe:39:4c:11:3c:19:
70:5c:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client