Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: 9Gy6SGC40+0OCV2oBRxC6tVdoXJ9znLzwc4G9K6iPxQ=
Subject key identifier: AE:4D:F9:9B:6D:CC:27:4E:BD:22:F3:8B:0F:61:A8:2E:66:D4:F8:CF
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 019D9C9A1B129C9EFDC93684C2259270C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 128F
Signing time: Fri 17 Apr 2026 18:00:38 +0000
Manifest this update: Fri 17 Apr 2026 18:00:38 +0000
Manifest next update: Sat 18 Apr 2026 18:00:38 +0000
Files and hashes: 1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: KE8ARwdiPqWnQ2IhP+Yd9wtGX31C8rY0+wa0Q/MvugM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:1b:12:9c:9e:fd:c9:36:84:c2:25:92:70:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Apr 17 18:00:38 2026 GMT
Not After : Apr 18 18:00:38 2026 GMT
Subject: CN=ae4df99b6dcc274ebd22f38b0f61a82e66d4f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:6b:c0:f9:c3:08:92:a9:1d:90:eb:e0:21:
21:a1:d5:05:09:f4:8e:61:7d:be:a0:da:65:c5:22:
cf:e6:63:42:55:31:bd:98:9d:96:68:b6:0c:27:71:
fb:5d:f9:e9:e4:a3:7f:2a:7b:3d:c2:e7:a2:a6:96:
11:17:a5:32:41:1a:ad:15:d7:ec:86:56:03:d2:b5:
c5:a5:30:d6:78:22:cd:4e:ad:48:a7:94:f3:a7:e5:
36:2a:f4:15:d8:8e:eb:b5:54:7c:8f:3d:7e:84:ef:
80:45:22:83:af:b3:e3:ad:41:4c:fd:5c:d8:e1:52:
dd:98:bc:bc:60:19:da:92:17:04:d6:4a:fd:ff:ab:
78:3a:36:24:0f:1f:a6:fd:fd:3a:fe:85:6a:6d:89:
bc:61:26:e6:e7:52:ef:6f:a7:88:88:7e:8f:0d:5a:
e6:14:e0:a0:b0:33:57:2c:0b:6f:b2:94:b4:93:ad:
4d:cf:4f:dd:4d:c9:d5:dd:14:ec:2b:44:2f:02:50:
d2:e5:35:96:e1:0c:05:8b:9d:45:16:1c:f1:da:85:
9f:df:6f:56:40:d4:2b:65:a4:ef:d2:db:58:39:f7:
ed:25:dc:6c:e8:83:9e:02:da:ce:f8:a1:48:66:77:
2c:45:43:a2:0d:3f:96:4a:3b:5e:18:fc:ea:fd:5a:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:F9:9B:6D:CC:27:4E:BD:22:F3:8B:0F:61:A8:2E:66:D4:F8:CF
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:a5:3b:57:77:84:86:37:dd:44:01:ce:af:d1:6c:0b:ee:
62:d0:b0:d4:30:b3:f5:f8:82:81:60:dc:36:ca:66:7d:60:0e:
55:14:0a:be:33:88:f7:f0:b5:90:a5:2b:b7:c9:05:72:32:9a:
b1:1b:e3:39:34:d8:19:94:0d:5a:a1:eb:79:a7:02:c0:b7:ba:
1d:1b:33:bd:a5:0c:d2:de:ee:84:03:31:a3:cd:c6:1a:f4:d5:
27:e2:dd:d3:bb:3b:50:8c:c0:3e:e9:5b:bc:df:1e:69:bf:b7:
b9:0f:55:5a:37:dd:17:41:4f:f4:60:3f:1b:f9:15:88:e3:3d:
2b:33:75:11:7e:77:51:38:cc:be:84:e3:c1:18:65:e8:a5:7e:
1c:16:86:fc:9a:af:f4:c5:81:10:f7:f6:8a:8e:ef:9a:69:6c:
ed:a4:89:0a:50:9e:d1:39:c1:45:a8:6c:68:47:8b:df:9f:32:
a4:d1:81:25:19:0d:65:c7:87:39:29:5c:2e:00:b8:24:3a:37:
70:d6:7a:82:e5:d4:6b:f5:7b:a4:07:02:32:e8:ae:02:a9:91:
14:12:c1:e6:5a:9b:62:b8:78:f7:74:a8:93:21:7f:ae:c2:78:
48:24:38:97:bd:b3:7e:78:d8:01:f5:f5:a8:b7:90:33:ee:c7:
56:12:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:15:50 2026 by rpki-client