Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: lWvLt37iYz4ABlU27LmKcseQRt9ZqHRyfztpZdbH3Mk=
Subject key identifier: EF:F3:99:6E:34:B1:61:34:73:BA:8D:8D:62:63:02:90:31:34:45:BF
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019DCE2B57BCE85C6D324F2187EDA1BD02CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 1161
Signing time: Mon 27 Apr 2026 09:00:40 +0000
Manifest this update: Mon 27 Apr 2026 09:00:40 +0000
Manifest next update: Tue 28 Apr 2026 09:00:40 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: XdbLfcqNo3jOL9esjH333vOhPAvb/jqZEMkTyBkRRXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:57:bc:e8:5c:6d:32:4f:21:87:ed:a1:bd:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 27 09:00:40 2026 GMT
Not After : Apr 28 09:00:40 2026 GMT
Subject: CN=eff3996e34b1613473ba8d8d62630290313445bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:e9:b4:cd:9d:1c:f4:7d:e1:d4:44:49:2a:
9d:74:94:43:e6:a6:d8:40:31:70:ca:c8:76:b4:8d:
35:e8:41:3c:1b:f2:4a:bb:dc:43:63:ca:d3:32:d9:
74:48:9d:34:1d:d4:d6:5c:57:97:cc:5e:04:9a:2c:
df:6b:f3:28:cb:4b:23:73:74:25:aa:b8:0f:10:28:
23:d2:53:e7:cd:7c:2a:e9:4c:2d:28:a1:a9:2c:58:
6b:d5:0d:ba:e5:74:c9:08:34:cd:b3:e5:7b:21:99:
2c:ce:f1:d2:87:55:cc:59:06:dc:b9:c3:b3:8d:ce:
8b:4f:9d:0a:88:5f:57:d3:5c:b0:8e:48:e9:ee:5a:
dd:43:32:6d:9e:a2:5b:bc:46:91:f8:ee:ce:1f:e0:
4f:27:98:08:45:8f:66:55:30:45:83:c0:cb:61:30:
d0:2e:a6:1b:09:aa:52:d1:b3:53:c3:50:17:c1:eb:
44:1a:75:68:e5:fc:f8:2c:66:b8:8f:b1:73:cb:19:
e2:87:d4:05:2f:c5:af:23:9b:f5:25:64:96:1d:32:
83:07:36:c9:a9:a3:cc:42:8d:42:aa:b4:03:ea:1b:
13:6f:fc:5e:e2:68:cd:37:dc:26:3d:0b:05:a9:e8:
d2:b0:90:c1:d0:57:d2:c6:31:b2:b1:65:15:4f:fa:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:99:6E:34:B1:61:34:73:BA:8D:8D:62:63:02:90:31:34:45:BF
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2b:9f:7e:85:32:d5:9b:2a:23:12:d8:c0:23:59:c0:94:2a:
08:e1:3b:6c:b1:14:0b:b2:cf:d3:79:ea:8d:3f:26:2f:56:52:
c4:ac:69:9d:d0:32:02:f4:67:bb:3c:36:7e:b9:bc:9d:1f:46:
56:07:ab:5e:01:6f:b2:ac:a3:e6:e6:78:f5:bb:96:a7:40:05:
76:9f:69:1a:5b:d1:a1:43:36:8b:16:d8:18:48:28:f2:3f:3c:
e6:05:18:70:28:ed:8d:cf:81:ac:61:43:c2:ee:35:4c:4e:fc:
1b:7a:07:b2:45:dc:8a:34:ab:82:17:8d:66:03:82:c8:15:cc:
d7:a9:e4:97:48:55:5e:42:cc:ea:d6:c1:f2:a0:1e:ac:95:e5:
76:cc:2a:69:58:73:0e:2a:29:4b:b9:c4:18:3d:00:1c:f4:dd:
b9:c7:9a:d7:d5:15:7f:83:3d:8f:54:56:f2:65:97:32:9f:26:
ff:43:35:aa:0a:ab:25:c9:2b:b8:d3:18:d0:b2:13:48:b1:ce:
9c:c2:c9:25:14:75:4a:c1:c4:49:d0:4f:bb:f6:14:56:2f:d7:
a4:77:8b:fb:00:34:ce:b3:0d:42:88:3e:43:98:bc:9d:54:cc:
19:0e:52:56:63:22:4b:8d:60:37:09:66:6f:4e:3e:1f:58:9b:
9d:3b:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:50 2026 by rpki-client