Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: APzC/UFt6bB2f3En1g6fLAfuNRo8xnIMmNrgAMa3OmI=
Subject key identifier: 29:07:5C:87:E5:D3:54:EC:04:0C:3F:7F:F5:A6:2D:77:2C:72:1C:18
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019FA03B47DC222FB93E688A617197CC8067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 1253
Signing time: Sun 26 Jul 2026 21:01:07 +0000
Manifest this update: Sun 26 Jul 2026 21:01:07 +0000
Manifest next update: Mon 27 Jul 2026 21:01:07 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: kZq33BHakZDY4YJudXNmheZzloo.roa (hash: KtUW+9Vb1TNUqTSbu6bQAx1rz4MVZIFaAepB6yKKaic=)
3: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
4: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: oJ0kH8wG8Vni5wSubO2PyPd4LLdXwJglf//ZkfCNFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:47:dc:22:2f:b9:3e:68:8a:61:71:97:cc:80:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Jul 26 21:01:07 2026 GMT
Not After : Jul 27 21:01:07 2026 GMT
Subject: CN=29075c87e5d354ec040c3f7ff5a62d772c721c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:e8:a4:98:d9:06:13:71:a8:75:f4:54:5e:
69:ab:c8:1c:43:6e:b9:e0:77:53:3c:a1:ee:99:1e:
89:3c:fb:2e:5a:ca:a3:bd:3b:8f:3e:5c:f3:80:9d:
02:9a:3c:0f:91:97:dd:94:2b:8a:3f:14:59:ed:c6:
4b:6f:d6:c0:6a:59:0f:6e:63:f0:08:6b:31:73:7a:
a7:2b:79:f3:89:df:c3:34:2f:dd:af:0d:16:d6:42:
9d:e0:3a:a9:cf:c4:38:47:1b:2a:eb:0e:a9:de:71:
06:a9:ae:18:41:87:8a:c3:3e:36:56:43:0d:fa:c8:
09:1f:cf:2f:98:f0:08:a7:08:fa:2c:b2:f6:ef:28:
0e:94:54:8a:8b:3b:c9:47:f9:d5:dd:41:5e:3b:0d:
2f:0d:47:82:ca:80:95:8b:81:d6:78:eb:e2:e3:0d:
34:cd:03:9d:b7:dd:5f:34:4f:54:66:cb:a0:0c:91:
ad:d6:9f:7c:1d:3d:db:4f:5f:32:ad:58:d8:f4:c6:
13:c4:d9:36:6d:4a:7a:9a:37:31:0f:73:98:f7:05:
6c:c1:b7:41:f0:81:2b:57:57:07:16:a1:cf:67:79:
b2:19:40:f5:75:7b:d5:0e:0b:c2:42:05:b1:46:8a:
54:32:02:71:47:92:30:c0:ab:ed:c5:ce:76:f5:5c:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:5C:87:E5:D3:54:EC:04:0C:3F:7F:F5:A6:2D:77:2C:72:1C:18
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:d3:e3:6e:82:56:c5:af:9d:b0:c1:7a:db:5f:fc:2d:f5:
10:e0:ce:10:24:20:d8:b1:53:32:dd:44:a6:f4:4f:33:88:3b:
0c:cb:58:21:d0:32:83:6e:0c:9a:f8:fb:b1:c6:e7:4e:49:23:
5f:6d:01:2a:d1:8c:48:5a:91:9e:6f:68:b1:47:a7:e0:8a:45:
87:72:ea:f3:91:b7:9a:af:f1:8d:d5:19:07:b0:6b:75:c8:60:
c3:8b:a1:ff:c5:f3:2e:29:be:ae:32:b2:ba:5a:33:a9:90:c5:
d9:c6:57:ae:73:51:da:74:19:47:b2:79:6a:7b:97:8d:1f:36:
58:e7:0c:b5:9e:ef:bd:50:d7:05:03:7e:3f:36:1a:a9:4e:96:
40:95:8b:ce:63:a6:46:1e:ba:7c:87:1b:49:6f:1c:df:f1:ef:
a7:82:6b:87:4c:40:e2:5a:30:5c:e5:0c:fd:b4:c1:bd:6c:f6:
b8:a3:05:52:72:bf:15:bd:e3:d6:90:c8:63:18:b1:6f:6d:13:
73:3b:7c:b0:44:72:da:5f:9c:a8:57:a2:88:ea:ed:9f:cd:3a:
21:25:fa:5f:a0:1b:a0:37:30:70:17:a8:59:32:58:49:39:e9:
32:4e:42:11:cd:01:b9:57:16:5b:98:71:fa:f7:37:be:d4:ea:
80:1c:1c:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gO0fcIi+5PmiKYXGXzIBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTNhNTQ3YmYwYmUyZGVlZDdjODRmZTkwMmUzMzY2NTc3
YTIzMTQwHhcNMjYwNzI2MjEwMTA3WhcNMjYwNzI3MjEwMTA3WjAzMTEwLwYDVQQD
EygyOTA3NWM4N2U1ZDM1NGVjMDQwYzNmN2ZmNWE2MmQ3NzJjNzIxYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobopJjZBhNxqHX0VF5pq8gcQ265
4HdTPKHumR6JPPsuWsqjvTuPPlzzgJ0CmjwPkZfdlCuKPxRZ7cZLb9bAalkPbmPw
CGsxc3qnK3nzid/DNC/drw0W1kKd4Dqpz8Q4Rxsq6w6p3nEGqa4YQYeKwz42VkMN
+sgJH88vmPAIpwj6LLL27ygOlFSKizvJR/nV3UFeOw0vDUeCyoCVi4HWeOvi4w00
zQOdt91fNE9UZsugDJGt1p98HT3bT18yrVjY9MYTxNk2bUp6mjcxD3OY9wVswbdB
8IErV1cHFqHPZ3myGUD1dXvVDgvCQgWxRopUMgJxR5IwwKvtxc529VzoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkHXIfl01TsBAw/f/WmLXcschwYMB8GA1UdIwQY
MBaAFLeTpUe/C+Le7XyE/pAuM2ZXeiMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMt
ZjBjMzMyNTZmYjIyLzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMtZjBjMzMyNTZmYjIy
LzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEazT426C
VsWvnbDBettf/C31EODOECQg2LFTMt1EpvRPM4g7DMtYIdAyg24Mmvj7scbnTkkj
X20BKtGMSFqRnm9osUen4IpFh3Lq85G3mq/xjdUZB7Brdchgw4uh/8XzLim+rjKy
ulozqZDF2cZXrnNR2nQZR7J5anuXjR82WOcMtZ7vvVDXBQN+PzYaqU6WQJWLzmOm
Rh66fIcbSW8c3/Hvp4Jrh0xA4lowXOUM/bTBvWz2uKMFUnK/Fb3j1pDIYxixb20T
czt8sERy2l+cqFeiiOrtn806ISX6X6AboDcwcBeoWTJYSTnpMk5CEc0BuVcWW5hx
+vc3vtTqgBwcPQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:52:59 2026 by rpki-client