Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: PzUKluDe1Y8doWHjuarZZ6JNXb/xrjphz8j8cdytyzE=
Subject key identifier: 14:F0:B7:B1:F7:DF:42:41:71:12:17:DE:65:98:28:21:4D:18:88:B4
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019CE47F23755400FD9C1EBBA82413B41F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 10E8
Signing time: Fri 13 Mar 2026 00:01:03 +0000
Manifest this update: Fri 13 Mar 2026 00:01:03 +0000
Manifest next update: Sat 14 Mar 2026 00:01:03 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: n033H1B7HjwJcexEca1W90Jnii0DGQ7LLJxmlo0J0Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:23:75:54:00:fd:9c:1e:bb:a8:24:13:b4:1f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Mar 13 00:01:03 2026 GMT
Not After : Mar 14 00:01:03 2026 GMT
Subject: CN=14f0b7b1f7df4241711217de659828214d1888b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:95:3e:e7:ff:c2:e2:d3:f4:1c:d3:e9:31:
16:f9:53:7f:aa:2b:1a:da:58:4d:09:e0:51:33:0e:
26:6a:64:bf:ac:34:e0:4d:40:a8:4d:de:84:1f:b8:
39:ee:94:92:ae:a8:40:af:de:04:63:1c:b3:58:55:
84:85:ab:ed:74:a8:9e:4b:ef:e9:10:71:b9:4d:d7:
17:58:56:56:dc:be:36:67:3f:de:34:d0:28:08:91:
e0:ea:2c:f3:40:01:8b:96:ac:00:4b:2d:e5:ce:ed:
6f:8f:7f:d4:3d:23:52:d7:e2:22:77:37:60:80:62:
86:67:db:fb:ea:ce:6f:02:ab:e0:fa:f3:5b:73:6c:
ff:54:1d:d0:80:88:d5:e3:88:87:46:44:53:8d:5f:
15:b6:83:33:12:b3:ff:1f:45:ac:24:b9:26:56:5d:
67:a5:0f:56:74:7c:fe:f0:b9:98:cd:64:14:93:dc:
c9:35:43:36:6c:ab:18:3d:f7:62:35:bf:bc:cf:e3:
41:83:52:2e:91:d5:0a:fd:f2:39:a3:be:1c:9b:a2:
b1:30:28:00:b5:17:fe:bd:68:28:dd:8a:59:51:64:
d2:8c:ad:e3:59:c3:45:52:59:a6:98:0b:13:7b:de:
27:74:f0:48:65:bd:bf:67:cb:d9:05:b7:9f:33:93:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:B7:B1:F7:DF:42:41:71:12:17:DE:65:98:28:21:4D:18:88:B4
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:85:48:b3:f2:6f:f8:06:f5:84:09:db:62:bb:c7:9a:01:
01:7a:09:60:a0:30:e3:e1:41:f7:b4:aa:a8:20:cb:05:0e:20:
d5:e0:b2:b3:4d:21:d6:87:ba:d2:84:da:ba:d8:3e:4f:15:95:
3e:2f:dc:62:de:ca:7b:a7:57:2f:87:76:0f:0a:9b:e6:5e:1e:
18:a8:1e:a8:12:02:7d:67:93:48:b2:1b:ae:57:a4:0a:71:b5:
20:9b:eb:51:04:98:82:f9:d9:f1:bf:54:10:86:7e:f1:89:c7:
1e:36:47:a4:d1:2b:d0:ca:a4:d0:37:35:03:67:94:d3:02:84:
08:b1:c0:f0:6e:b0:f9:89:36:88:15:7f:2f:4a:4a:17:2e:76:
7e:d0:57:19:b5:88:eb:66:c7:63:b6:52:31:2a:8a:98:1d:c1:
7a:13:33:23:7d:15:58:75:0f:d6:0b:38:8e:e4:5e:09:b9:1a:
b8:f9:88:8a:75:b8:08:a5:66:12:ec:85:2b:f8:cf:0d:1d:d9:
51:f1:89:2c:12:1a:fd:d1:6d:0c:5c:82:a5:a8:65:47:f9:1d:
ba:42:38:db:5b:b7:1a:b0:47:63:25:8d:25:66:44:47:f2:03:
13:a1:14:6f:92:72:e1:ae:7f:72:6f:6f:4c:9b:68:b0:35:c4:
c6:d0:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:45:23 2026 by rpki-client