Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: gqgm5p8dO5Vd8uzk0PIX3a+h62JAtwYMBZCig7GM47o=
Subject key identifier: 69:54:65:F1:30:33:C3:78:6F:EA:CC:46:F0:20:A5:41:7C:3D:0B:10
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 01A172EFBD9BEBBD9BA6637BD38388CAECB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0633
Signing time: Sun 25 Oct 2026 12:01:16 +0000
Manifest this update: Sun 25 Oct 2026 12:01:16 +0000
Manifest next update: Mon 26 Oct 2026 12:01:16 +0000
Files and hashes: 1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: f630reEnJsnVmZvfz6o87UgVJf45WXM5vXgcUFFXF50=)
2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:bd:9b:eb:bd:9b:a6:63:7b:d3:83:88:ca:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Oct 25 12:01:16 2026 GMT
Not After : Oct 26 12:01:16 2026 GMT
Subject: CN=695465f13033c3786feacc46f020a5417c3d0b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:c5:07:58:44:54:b2:d2:68:37:b4:5b:9e:
2a:cb:f7:f3:f5:6e:76:f7:97:a0:94:be:98:32:da:
53:15:3b:56:08:61:9f:d9:12:90:d1:e0:a5:a1:e3:
74:de:38:92:69:29:86:e9:b9:a5:a0:51:e2:46:88:
3f:d6:81:e4:f0:42:2f:cf:7f:b3:e8:8e:d5:89:be:
a0:ad:cf:2f:16:c8:ee:15:28:3f:5f:cf:1b:3f:dc:
09:b2:8c:f5:87:85:db:bf:10:30:55:a1:09:3f:cb:
ee:90:da:b4:0c:67:75:eb:32:df:d5:99:a5:8d:3b:
e2:9e:c7:d8:6c:6c:3b:a6:02:2c:00:69:f8:b9:df:
99:77:f3:5e:cf:58:d4:c1:8f:4f:58:f5:f6:4e:ea:
8c:13:72:5e:5c:1c:62:4c:2e:aa:18:06:f7:1b:25:
f3:29:71:6d:4d:a5:6a:74:7c:72:01:ff:cd:a3:e6:
1b:a7:1a:34:82:ca:e8:30:6c:a6:c8:d3:fc:38:b0:
90:a0:c7:be:e3:3f:0c:82:66:dc:ea:4f:87:69:97:
01:34:4b:ac:01:af:82:43:cd:a8:35:92:e0:f9:3d:
5c:95:94:dd:5d:81:6e:0f:a8:15:0f:65:00:02:f8:
06:9a:da:3c:5a:66:0c:87:21:11:a4:ea:24:9e:e9:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:65:F1:30:33:C3:78:6F:EA:CC:46:F0:20:A5:41:7C:3D:0B:10
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:ea:ce:e2:5b:12:c0:f5:2f:02:3c:3d:61:98:89:76:cf:
a1:ef:29:a8:80:29:36:1b:a2:18:84:73:95:60:6b:ac:08:8c:
75:11:49:ef:f0:52:57:d9:eb:65:f5:e7:ee:a9:92:19:5c:9b:
02:60:8d:74:64:29:e3:09:47:f8:83:3c:52:0d:e6:41:90:5a:
96:4b:22:a1:12:59:e9:f5:48:d3:c2:69:d1:c8:f1:94:cc:d3:
ce:e8:58:48:09:5a:b0:c4:90:d3:3b:3a:de:44:09:7d:71:1e:
9a:60:16:8e:a9:05:3a:4c:b3:1c:b3:4d:1e:db:81:a6:ed:56:
5a:bc:2b:a4:9e:d9:f4:55:79:51:57:57:a4:d7:28:37:d1:45:
47:08:81:c6:b3:2f:ac:8a:60:fd:6d:95:9d:5a:72:50:33:51:
2d:ca:c1:29:f9:94:ef:d2:53:02:f5:37:56:bd:be:dc:75:15:
47:35:db:e5:cf:ea:d8:2b:e1:59:05:6b:76:6c:4b:00:f1:3c:
dd:53:6c:79:47:4d:d8:f9:a7:8a:15:15:2f:01:80:9d:4d:87:
42:e8:56:1c:54:56:67:99:d2:dd:9e:9a:c0:f4:2f:b8:6c:7a:
a9:f4:5f:9b:de:c1:e5:5a:da:bf:4f:65:de:4b:b4:78:f4:cb:
50:02:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:48:04 2026 by rpki-client