Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: OHYPkCUbGdtlkoIaK35SwR0GX+nR/oAEIPMNnXIUnx4=
Subject key identifier: CF:27:F5:50:72:5B:37:35:2C:38:1F:9A:37:55:4A:B3:FF:7A:F2:AE
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 01A08DC4C424192765899A21E4DECDED6FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 12CE
Signing time: Fri 11 Sep 2026 00:01:17 +0000
Manifest this update: Fri 11 Sep 2026 00:01:17 +0000
Manifest next update: Sat 12 Sep 2026 00:01:17 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: kZq33BHakZDY4YJudXNmheZzloo.roa (hash: KtUW+9Vb1TNUqTSbu6bQAx1rz4MVZIFaAepB6yKKaic=)
3: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
4: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: 9RD2qmYetkj+nHURWyvGJbo4NJQoxQMRUSYTL8gWxsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:c4:24:19:27:65:89:9a:21:e4:de:cd:ed:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Sep 11 00:01:17 2026 GMT
Not After : Sep 12 00:01:17 2026 GMT
Subject: CN=cf27f550725b37352c381f9a37554ab3ff7af2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:51:8a:11:45:f4:43:b2:e0:a2:3d:e4:61:
b0:e9:b2:ab:61:9e:e8:2f:9e:f6:2d:91:c4:ba:32:
85:e2:00:ba:db:0b:e3:4a:06:e6:65:f7:f8:99:9d:
d4:b2:63:12:97:c0:80:62:13:76:af:ee:1a:5f:90:
72:bd:5f:43:2a:dc:9a:34:20:74:0c:fa:af:84:d7:
6b:ca:2a:94:d1:4f:92:2d:8c:19:ec:39:95:b0:4b:
77:7e:b3:fe:da:8e:13:fd:fd:ae:a9:5c:4b:31:3d:
df:9a:8b:01:9d:59:b3:b5:ac:88:2e:7a:6d:52:a7:
4c:4c:77:11:2a:c2:06:91:2c:3a:44:69:95:d8:23:
58:ad:db:d6:b1:fd:9e:a1:be:bf:7f:28:3b:ce:0e:
4b:f1:92:78:13:81:d9:00:4b:6b:44:ef:0f:fc:ba:
29:df:05:03:61:8a:96:d6:54:36:a6:3a:18:80:89:
41:bc:57:dc:f1:2d:39:c4:09:11:de:0f:b0:d1:6e:
88:43:f7:5e:c3:85:97:ff:de:e6:34:fe:98:89:74:
fb:6c:e1:73:3e:d3:51:ce:48:93:f0:7e:a1:99:bb:
e5:e1:dd:42:bd:62:44:86:d8:80:3d:75:d7:d9:b9:
23:36:67:ee:4a:27:a6:41:8a:17:90:cb:a7:b8:b8:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:F5:50:72:5B:37:35:2C:38:1F:9A:37:55:4A:B3:FF:7A:F2:AE
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:6d:8a:2a:8f:d9:36:7f:4f:16:07:c0:58:18:f9:56:17:
2a:e4:4d:5d:cd:f5:aa:1f:e1:f8:07:79:3d:64:b6:82:00:74:
6d:cb:21:c3:b5:e8:40:2e:b8:be:f9:05:7d:ac:ff:1e:90:37:
3c:b6:af:5a:f4:3a:0b:5c:f8:f2:7c:05:00:49:45:89:2c:fb:
5b:c9:2c:0e:b2:a2:11:88:0a:86:f4:fb:72:e8:a7:af:b7:e9:
b7:3c:02:64:11:48:c8:79:c0:4c:7e:15:ba:24:84:d6:f4:00:
8f:06:6f:7a:d2:99:af:3f:c9:12:2f:4f:cf:1c:c4:00:bc:13:
d0:2b:19:eb:b5:d6:1c:2b:27:4b:18:8e:f1:b7:97:67:31:1b:
92:db:cb:43:29:cd:57:5e:02:28:65:86:2e:60:b8:b3:2c:0b:
b2:63:4b:46:61:bc:32:dc:c0:9a:64:d1:ef:b2:7a:02:ac:10:
1e:b9:4f:20:99:f1:7a:43:ab:92:f4:25:67:71:3f:ca:69:a2:
98:05:1c:ae:fe:d4:6f:7d:cb:c6:05:77:1e:37:26:06:e1:97:
d1:fd:13:c9:b1:93:02:cd:9c:1f:a4:14:5e:b6:3b:1d:0d:2f:
08:00:a7:35:13:6c:1e:5c:8a:ec:d6:b7:dc:fe:7a:a4:f7:a4:
fa:9c:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:38 2026 by rpki-client