Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File: t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier: SBtfPUcbkxv3uW5y8FbVHcKgHwdfGgCyuzlQB1WDVU4=
Subject key identifier: 99:0F:BC:87:CA:FB:B7:71:C0:1D:9E:64:77:37:C5:EF:1E:68:83:5F
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer: /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial: 019D3A1C9C8816BF977F4881C463157246ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number: 09A2
Signing time: Sun 29 Mar 2026 15:00:46 +0000
Manifest this update: Sun 29 Mar 2026 15:00:46 +0000
Manifest next update: Mon 30 Mar 2026 15:00:46 +0000
Files and hashes: 1: O3jJqwByUIEUnhHlOFee0Yzt6gg.roa (hash: TX2mHbMp/LUKoxPthyOcmH+FA50JbLoahkLETRZ/Uwg=)
2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: NnFHNf924qQ0ylX3zI2ytkCtdo5Idy/CDHr1sXEYzNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:9c:88:16:bf:97:7f:48:81:c4:63:15:72:46:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Validity
Not Before: Mar 29 15:00:46 2026 GMT
Not After : Mar 30 15:00:46 2026 GMT
Subject: CN=990fbc87cafbb771c01d9e647737c5ef1e68835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:56:9d:85:48:5e:88:e4:6c:55:dd:3b:a4:
e6:06:88:f3:09:a2:04:ea:a3:05:b8:b7:c3:dd:b2:
d2:b9:c0:7e:ee:48:f5:0c:b7:0c:e8:a1:dc:04:9b:
d9:1d:e5:2a:c6:ae:02:34:d4:5c:da:90:95:9b:73:
e8:8d:b5:7f:38:35:5f:1e:ff:f9:70:eb:48:fe:56:
94:78:ab:9c:7a:0b:ec:a5:ea:df:5c:36:00:54:3c:
98:7d:45:11:47:eb:d4:f4:df:c4:02:e2:b5:f1:70:
09:63:45:ff:37:5e:01:40:82:a0:17:93:36:02:2e:
29:23:c6:bf:4e:91:b5:a8:89:1a:cb:93:07:91:5d:
69:3b:c8:2c:8d:6b:a0:2d:d0:b6:0c:dd:63:d6:a1:
2d:64:96:4d:7b:9a:20:1c:58:6b:89:55:f7:2b:a2:
04:4b:30:9b:4c:9e:3c:98:f1:61:c6:9a:a5:e8:25:
b1:25:51:63:79:4a:48:6a:28:06:27:3c:d3:0c:a0:
fd:ba:1c:95:fc:de:b9:cc:a7:72:66:dc:8d:92:98:
c7:50:53:06:a1:a8:26:fc:f3:a1:5d:20:ae:f4:fb:
ae:62:52:e3:cb:6f:81:d5:5a:fd:79:f0:30:4a:1a:
e4:b7:aa:32:59:11:07:fd:cd:e8:91:02:64:d2:f7:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:BC:87:CA:FB:B7:71:C0:1D:9E:64:77:37:C5:EF:1E:68:83:5F
X509v3 Authority Key Identifier:
keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fd:4e:22:03:c1:07:ff:00:2b:0a:ef:fc:1d:cc:6a:3e:b8:
0a:ed:aa:8d:84:36:2c:75:3f:a8:e1:30:ed:71:a6:13:87:22:
4c:7e:62:d3:09:17:f9:99:50:6e:ab:15:2b:9a:dd:a0:f5:6b:
08:85:79:18:79:6a:81:a9:4e:b8:36:3d:ed:ff:e4:f2:6a:bd:
53:51:bf:e0:96:d0:18:6f:f1:3d:79:b6:df:fa:04:fd:7b:16:
20:7c:06:8b:ca:63:12:01:8d:fc:8f:f4:7d:dd:c9:34:d1:04:
6f:4b:5f:df:c9:2c:ea:db:82:7c:9a:8e:01:b5:40:20:4a:04:
e2:b8:3e:ce:f5:3f:0d:73:52:ab:f2:cb:7d:87:bb:08:f1:dd:
7b:09:d5:bb:64:0a:33:b2:8c:0a:54:67:e7:54:53:f2:fb:df:
43:cb:2e:9c:24:d8:05:93:c3:7a:aa:32:e0:64:53:94:cf:d3:
bd:8b:38:fc:08:88:99:86:c1:99:46:4e:03:8c:e7:4e:08:59:
3f:c1:14:92:2f:93:b7:68:a6:e9:8f:6f:3c:1e:e9:30:1a:0d:
42:05:22:d8:b3:9d:01:6f:26:6b:2b:88:f4:05:0a:ae:31:53:
94:09:79:24:5e:7b:12:01:e4:c6:26:16:77:30:4d:b8:fb:59:
fb:17:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:34 2026 by rpki-client