
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: UFuC7O6cgm4qu63dkeqMFZpESXCS+DM7OhQJez96q1o=
Subject key identifier: 31:1F:D8:90:A8:8B:35:88:C6:95:D7:03:AE:F5:19:30:31:A6:FE:3B
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 01A0DCF26D2B642079E5615E9D1C7F3239E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 143E
Signing time: Sat 26 Sep 2026 09:01:10 +0000
Manifest this update: Sat 26 Sep 2026 09:01:10 +0000
Manifest next update: Sun 27 Sep 2026 09:01:10 +0000
Files and hashes: 1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: m2ZFH9TH7SU+I8k1qf1PWN3wJlp6ex1XBj7y+qXEScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:6d:2b:64:20:79:e5:61:5e:9d:1c:7f:32:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Sep 26 09:01:10 2026 GMT
Not After : Sep 27 09:01:10 2026 GMT
Subject: CN=311fd890a88b3588c695d703aef5193031a6fe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:d8:16:5c:6e:bf:d6:7e:cb:c0:28:97:9b:
a1:98:1a:4c:11:48:7a:a9:b0:49:a7:3f:ab:fb:88:
d8:c7:fb:9e:c7:a7:75:b3:99:91:01:f8:00:14:5f:
05:62:94:2c:ca:c3:ec:a2:de:81:0a:9b:ec:32:ec:
4f:47:9e:3f:22:b6:cf:71:0d:0d:a1:92:2d:d7:d7:
b6:9b:a2:21:bf:14:50:a1:d8:71:86:13:b3:af:63:
d3:e7:dd:62:34:7d:af:a7:9e:bc:37:67:cd:f1:54:
30:72:aa:c5:5b:bc:f1:87:82:38:e5:81:6f:77:18:
66:a6:11:04:38:53:c4:44:82:46:cc:91:fe:59:db:
6d:89:02:aa:5d:98:e6:0d:f0:2b:16:f9:fd:84:2b:
a9:b4:1d:32:f3:81:ae:a4:aa:ca:3c:26:25:20:9b:
66:03:85:b7:e7:06:5c:17:10:22:8d:f3:fb:78:34:
5d:df:29:58:a0:a2:bd:14:80:22:47:54:be:68:f1:
6f:c7:f0:df:16:8d:3b:40:b5:e5:04:78:b5:c8:45:
c8:05:79:02:19:59:87:52:bc:75:30:6b:60:6a:68:
e4:af:9e:ae:46:44:25:c6:0e:01:36:3f:2b:3a:e0:
b7:1e:c5:ab:d9:89:f8:e4:70:31:00:c4:7d:59:b7:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:D8:90:A8:8B:35:88:C6:95:D7:03:AE:F5:19:30:31:A6:FE:3B
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:21:58:e0:c8:7a:09:6b:c9:d7:6a:af:8b:36:cf:89:5f:43:
ac:a9:09:b1:5b:b3:31:bc:91:71:3c:65:b2:87:32:7f:39:19:
81:0d:57:d4:d2:ea:08:33:66:47:af:41:8e:e8:98:e0:ab:e1:
3a:11:09:99:d6:d8:23:d5:56:b1:e9:35:34:0a:29:66:98:1c:
dc:cb:c8:cd:f5:0e:7b:3d:5e:58:9a:df:b6:94:10:b3:2e:6d:
79:7e:28:09:37:af:a1:08:b8:2d:7e:60:bb:55:b3:02:02:26:
44:41:48:50:ba:5a:f6:8a:3d:2b:ea:50:b0:f0:2b:54:f4:0c:
a3:de:76:00:bb:7a:d3:bc:d7:49:7f:43:04:3e:fc:46:bd:94:
d8:f5:c0:f2:2c:f5:05:a5:51:04:84:3a:03:f0:6d:c1:66:05:
61:49:c6:b4:a2:4e:28:ca:19:27:40:7e:6b:21:45:56:36:8d:
5b:f2:30:26:ca:02:1d:8a:2a:7e:43:1b:e6:a7:01:a4:e8:56:
53:8c:75:2d:68:3b:1b:42:cf:54:9f:09:e4:34:45:45:22:67:
64:a7:14:98:19:eb:f4:b7:17:89:97:b4:68:f1:40:30:76:87:
47:2a:42:00:68:77:88:44:4a:07:ce:36:47:77:83:1f:20:cf:
3d:1b:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:20:19 2026 by rpki-client