Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: fwOmLbEkqE3LGdYaaPeOaYL4Vg6S+u0fQ4HPHGBBGhk=
Subject key identifier: B5:7A:B5:8F:40:86:3A:95:B0:FF:D8:4A:92:51:0E:01:CA:AC:5A:8B
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 019D390A1D14002266801C2FE16A4B0A8EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 0AA2
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: clFIubjbLQqxbnoigbE4pHEFWAU.roa (hash: 1t4DJkKFGPggpFIGiXnW0fwPm80oShJdtzZrjtLGtZQ=)
2: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: tvS4Vzg15PVa7J1ms7DOiIQ6frOYw2O1npg/uBidOy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1d:14:00:22:66:80:1c:2f:e1:6a:4b:0a:8e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=b57ab58f40863a95b0ffd84a92510e01caac5a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:b5:fc:6a:3f:50:75:e3:45:25:fc:bb:b4:
7b:87:83:0a:37:12:08:9b:f5:a6:95:38:41:5d:d3:
7a:7e:4e:05:6c:6b:45:99:9e:4b:59:9a:1a:da:37:
d7:0a:65:e7:05:3f:72:9c:6a:f1:13:de:48:f8:c3:
a1:45:44:b9:0c:22:44:ac:74:67:e5:42:30:5a:20:
51:45:1b:9e:05:f5:40:1f:ce:fe:85:d3:70:a5:f9:
21:bd:50:65:12:4c:61:65:c7:3c:11:72:c4:a5:b7:
75:f3:ba:5f:93:44:a0:32:68:49:9d:c6:6e:8d:f0:
5b:ec:17:dc:e7:5f:cd:85:12:83:7f:25:c8:8f:a8:
9f:25:15:60:c4:ae:c3:83:c6:70:e9:49:bd:63:28:
33:37:df:c6:db:cc:f2:6f:22:93:83:53:1e:62:f2:
6b:54:a8:88:22:b0:3a:63:be:9e:0d:27:0d:5b:f5:
15:54:23:2d:f4:d6:df:f5:35:9a:b5:53:a3:79:b3:
05:12:2f:5a:ab:1f:6d:9b:a1:54:51:35:67:d1:16:
f3:ff:1d:5d:dd:52:77:6d:0a:71:fe:00:18:54:ac:
29:09:4b:e3:e3:f3:c7:e3:cd:11:d4:7b:0e:c1:d0:
59:6b:c1:02:28:b8:96:b7:e4:c2:48:98:9b:de:63:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:B5:8F:40:86:3A:95:B0:FF:D8:4A:92:51:0E:01:CA:AC:5A:8B
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:c3:7b:0d:8f:92:e8:25:46:97:7b:30:fc:69:8a:89:62:
86:09:26:32:b4:2b:13:44:a3:9c:d0:35:ba:28:4c:4d:42:32:
ee:c9:bc:91:36:e8:a5:4c:14:0d:fb:0a:8e:bd:53:75:36:1f:
b6:54:a1:50:f0:0c:01:de:0a:78:55:3f:be:93:e8:b0:2e:6c:
ef:ec:ea:08:fd:96:44:67:45:02:e2:1c:b1:76:d2:13:7e:f3:
d8:00:cf:1f:90:37:4e:16:9f:0c:97:12:42:7c:f6:d8:ca:5a:
3a:53:8d:cd:72:13:a1:80:8f:40:fe:b9:72:66:42:0a:d6:a0:
45:1d:41:6e:87:7a:b1:e5:58:5c:2d:f2:89:ed:5d:3a:c7:00:
7e:5f:30:c7:21:66:50:fb:02:07:e8:5b:b4:a2:a6:fa:b1:1c:
62:e4:d8:84:fa:e1:8d:a1:39:08:c0:e6:30:34:db:f8:c8:04:
ab:16:ea:d0:b3:04:3d:7b:ee:96:81:70:aa:52:c1:b3:77:44:
43:7b:6e:ad:5a:5d:2f:3f:e3:9c:73:09:06:92:91:01:10:3a:
af:ff:49:9f:af:26:cb:38:99:86:b3:81:12:55:cd:61:86:3d:
d1:f2:71:d6:e5:ca:e7:6e:4f:ca:63:4c:a5:1a:87:f6:6e:1f:
43:07:76:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ch0UACJmgBwv4WpLCo7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWRlOTQ1OGQxOTBlNjM0MzI5ZjlkZjE1MDNiNTIyMmMx
NjI0ZWUwHhcNMjYwMzI5MTAwMDU3WhcNMjYwMzMwMTAwMDU3WjAzMTEwLwYDVQQD
EyhiNTdhYjU4ZjQwODYzYTk1YjBmZmQ4NGE5MjUxMGUwMWNhYWM1YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYG1/Go/UHXjRSX8u7R7h4MKNxII
m/WmlThBXdN6fk4FbGtFmZ5LWZoa2jfXCmXnBT9ynGrxE95I+MOhRUS5DCJErHRn
5UIwWiBRRRueBfVAH87+hdNwpfkhvVBlEkxhZcc8EXLEpbd187pfk0SgMmhJncZu
jfBb7Bfc51/NhRKDfyXIj6ifJRVgxK7Dg8Zw6Um9YygzN9/G28zybyKTg1MeYvJr
VKiIIrA6Y76eDScNW/UVVCMt9Nbf9TWatVOjebMFEi9aqx9tm6FUUTVn0Rbz/x1d
3VJ3bQpx/gAYVKwpCUvj4/PH480R1HsOwdBZa8ECKLiWt+TCSJib3mP2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV6tY9AhjqVsP/YSpJRDgHKrFqLMB8GA1UdIwQY
MBaAFLed6UWNGQ5jQyn53xUDtSIsFiTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODkt
ZjFjZDlmYTI4Y2M1LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODktZjFjZDlmYTI4Y2M1
LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBfDew2P
kuglRpd7MPxpiolihgkmMrQrE0SjnNA1uihMTUIy7sm8kTbopUwUDfsKjr1TdTYf
tlShUPAMAd4KeFU/vpPosC5s7+zqCP2WRGdFAuIcsXbSE37z2ADPH5A3ThafDJcS
Qnz22MpaOlONzXIToYCPQP65cmZCCtagRR1Bbod6seVYXC3yie1dOscAfl8wxyFm
UPsCB+hbtKKm+rEcYuTYhPrhjaE5CMDmMDTb+MgEqxbq0LMEPXvuloFwqlLBs3dE
Q3turVpdLz/jnHMJBpKRARA6r/9Jn68myziZhrOBElXNYYY90fJx1uXK525PymNM
pRqH9m4fQwd2mQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:32 2026 by rpki-client