Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: 680V9x4fbzPihVEmDZXQjtyEAc/GYCUTPQYzadiaDuo=
Subject key identifier: EE:7F:62:C4:36:B3:E4:76:A4:49:EC:7D:C5:3E:7A:42:56:C5:1F:70
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 019D378949CEB06FE5AD46DD34BCA42F392B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0402
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: gGyVqS1OuxlXZiTU2ydDitYvfzQiu7NrBtWVronNqNQ=)
2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:49:ce:b0:6f:e5:ad:46:dd:34:bc:a4:2f:39:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=ee7f62c436b3e476a449ec7dc53e7a4256c51f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:bb:06:01:2a:42:9b:4a:75:a4:bb:33:5d:
2e:62:1b:56:9d:e9:35:bc:54:0d:89:22:6c:0c:71:
55:d1:63:2a:95:fc:7e:55:18:23:58:60:02:77:47:
9a:c0:c0:67:a1:14:06:60:c4:b5:76:58:67:28:de:
21:15:80:25:6c:38:1d:f0:d2:7b:9b:2c:63:6d:6f:
04:4e:72:3f:6e:1d:4e:08:62:0c:d4:2e:f1:f0:d8:
3c:7c:ca:7d:aa:dd:79:e2:44:41:5b:da:12:12:ed:
bc:a7:6f:a1:1e:c6:84:ee:c6:07:0f:a1:f0:d7:0f:
7d:d9:65:59:12:84:71:d7:a1:9c:ea:00:3b:a0:9c:
55:ee:77:ad:d6:1c:f0:3f:f0:fa:b6:72:eb:84:e4:
ad:a7:b7:a1:23:10:2e:19:9d:fc:98:4b:bf:e7:b0:
28:8c:f4:47:ac:8d:74:6b:4d:46:87:e2:7e:36:77:
38:35:2a:c5:97:01:7f:99:20:20:1d:9e:cb:b7:1c:
5f:d0:fe:13:3a:a9:b3:23:e9:26:26:07:68:9a:13:
a5:1e:2a:0e:fd:b6:21:90:bc:38:55:8f:92:42:d6:
f2:e5:f0:9d:5e:0a:72:ae:f5:90:c1:c5:86:51:61:
3c:02:3d:94:7d:fe:a9:0f:47:b0:7d:55:b7:30:eb:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:62:C4:36:B3:E4:76:A4:49:EC:7D:C5:3E:7A:42:56:C5:1F:70
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:ec:ef:6a:7c:f3:90:b7:d0:98:53:89:ae:36:4f:b7:f2:
af:c0:39:35:42:90:c0:54:c1:17:c6:6f:5f:9f:47:48:60:ea:
09:53:fb:07:ee:36:a3:e4:86:54:cc:a7:9d:ab:dd:b1:49:0b:
f4:c7:bb:88:15:18:4d:c0:1a:09:4f:2e:95:21:7c:ce:77:d9:
a1:f7:cd:c3:b6:72:69:d1:11:d7:9d:07:54:75:f4:76:d6:65:
23:66:03:fb:15:04:fa:a5:d0:cb:73:f9:58:39:d5:5e:10:0c:
bb:20:4b:41:d6:0b:26:01:62:26:3a:f8:7b:e4:be:3b:a9:b3:
fe:71:ba:f1:ac:ce:44:6b:8c:50:57:b1:8d:61:3b:19:ea:06:
20:7e:cf:17:dd:b2:ea:3c:9c:41:63:21:6b:ff:2a:86:2d:10:
9b:c0:ce:d4:64:e8:0b:56:42:02:57:2d:84:6e:be:2a:78:0f:
22:32:73:58:0b:37:54:35:7c:b6:13:af:99:08:19:a7:20:7a:
96:96:11:6d:e1:eb:bd:cd:ca:59:ca:4f:f4:86:c5:56:94:28:
fc:64:31:5c:6f:37:9c:07:d4:3c:8c:7a:f5:37:12:30:58:b3:
6c:09:b5:13:f7:84:87:4f:84:23:63:86:e8:4e:30:7b:24:83:
12:fa:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:23 2026 by rpki-client