Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File: T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier: xqTh9phGX/ZET/5EqIrwfmYzheJ45OZekKx+BCrkt10=
Subject key identifier: A8:E4:16:1F:12:0D:96:C0:46:F9:74:CA:2E:2D:52:6A:0E:AD:1B:A3
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer: /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial: 019D98F41F8B42B318A1ECE1AADA83627FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number: 13A5
Signing time: Fri 17 Apr 2026 01:00:28 +0000
Manifest this update: Fri 17 Apr 2026 01:00:28 +0000
Manifest next update: Sat 18 Apr 2026 01:00:28 +0000
Files and hashes: 1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: crXbcAvJQ9ZI0u3KTa5/ijnJ8ri4kT0cuBqHVi5mZGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1f:8b:42:b3:18:a1:ec:e1:aa:da:83:62:7f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Validity
Not Before: Apr 17 01:00:28 2026 GMT
Not After : Apr 18 01:00:28 2026 GMT
Subject: CN=a8e4161f120d96c046f974ca2e2d526a0ead1ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:b9:5f:bc:73:63:c5:fe:e8:05:78:2e:64:
6b:b2:a8:1f:e9:b9:2b:9b:ba:cb:e8:bc:de:ad:07:
6c:62:f4:fe:e4:11:b1:75:90:7a:aa:8e:dd:ea:e4:
bb:10:d8:c3:e5:40:3a:18:4b:06:1d:5d:a2:80:91:
32:3e:6b:66:20:f3:eb:5a:dd:21:2e:f4:76:07:f3:
93:d8:14:e2:79:bb:45:52:bb:11:f8:d3:93:1c:ee:
68:16:7c:3d:91:f0:40:d1:52:e0:e4:06:27:48:5b:
ae:ee:9c:cd:11:74:b4:9f:26:0a:74:b9:e9:b9:ee:
7f:55:4b:68:ce:7e:0d:3d:13:41:0c:9c:05:e4:ea:
27:cb:3e:ae:41:1a:99:47:14:54:81:57:0a:88:8f:
5e:f1:2e:99:06:f0:26:35:72:1c:d8:59:d4:89:83:
15:17:9e:60:8b:78:26:f9:75:be:ab:d7:46:30:d1:
39:90:a2:96:5b:e4:05:8e:89:06:66:8f:9e:9c:1e:
97:d4:ae:16:cd:ab:95:ad:65:fd:e8:b6:12:a2:82:
6d:dd:e8:4e:5a:de:92:97:9b:b6:2e:f7:00:38:2b:
55:af:54:ed:32:06:15:96:40:75:b4:dc:1e:78:e7:
56:d7:c3:74:d9:47:91:83:f2:ae:d8:bc:0a:04:f9:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:16:1F:12:0D:96:C0:46:F9:74:CA:2E:2D:52:6A:0E:AD:1B:A3
X509v3 Authority Key Identifier:
keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:72:fa:c9:b4:78:3f:f5:3d:81:30:9b:75:10:7e:c6:4f:fe:
7c:42:18:eb:49:47:dd:c9:99:ba:78:0a:65:74:f8:b1:dd:95:
14:d4:cb:98:4f:09:b8:90:fb:a2:c6:88:a5:a4:00:14:8e:d7:
ed:49:e2:12:8d:37:5f:aa:96:d5:42:8a:ee:4a:5f:06:ba:e9:
a7:b8:a2:eb:fa:25:d3:59:ec:61:d6:4a:d4:22:0a:49:80:fb:
23:58:3a:1f:fd:84:39:00:5d:40:b0:7b:d5:a7:58:25:25:4a:
03:5e:1a:4c:51:07:bd:31:ef:ad:7f:39:aa:fa:4d:ab:58:aa:
28:9a:46:a9:25:ae:24:69:4f:54:e5:a1:b2:3e:80:24:c5:fc:
ad:e3:4f:8e:f4:6f:17:26:fc:68:1b:c3:c9:39:04:85:bc:5c:
67:40:cb:36:bf:fb:d1:dc:7c:48:b4:47:fb:f7:f9:c8:2d:39:
22:70:ca:99:cd:29:c8:60:1e:45:fc:4e:09:e5:fe:6d:df:a6:
25:96:cc:57:eb:2b:01:09:22:58:5c:39:96:d0:30:83:e2:30:
bb:0b:d5:c1:ab:40:cc:66:06:8a:7b:5a:14:cd:c5:3d:2e:ea:
ea:cb:3a:b6:d7:12:f8:0d:04:b2:1f:19:ec:58:8f:5a:2b:a3:
2e:b3:cb:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9B+LQrMYoezhqtqDYn/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjlhZWFkNzk2ZWJjYmU5MjUwZmFhMjkyYzQwZThhODU4
OGM3OWQwHhcNMjYwNDE3MDEwMDI4WhcNMjYwNDE4MDEwMDI4WjAzMTEwLwYDVQQD
EyhhOGU0MTYxZjEyMGQ5NmMwNDZmOTc0Y2EyZTJkNTI2YTBlYWQxYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswG5X7xzY8X+6AV4LmRrsqgf6bkr
m7rL6LzerQdsYvT+5BGxdZB6qo7d6uS7ENjD5UA6GEsGHV2igJEyPmtmIPPrWt0h
LvR2B/OT2BTiebtFUrsR+NOTHO5oFnw9kfBA0VLg5AYnSFuu7pzNEXS0nyYKdLnp
ue5/VUtozn4NPRNBDJwF5Oonyz6uQRqZRxRUgVcKiI9e8S6ZBvAmNXIc2FnUiYMV
F55gi3gm+XW+q9dGMNE5kKKWW+QFjokGZo+enB6X1K4WzauVrWX96LYSooJt3ehO
Wt6Sl5u2LvcAOCtVr1TtMgYVlkB1tNweeOdW18N02UeRg/Ku2LwKBPn7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjkFh8SDZbARvl0yi4tUmoOrRujMB8GA1UdIwQY
MBaAFE+5rq15bry+klD6opLEDoqFiMedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5Mjct
NzZhOTEwOWE2MmU3LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5MjctNzZhOTEwOWE2MmU3
LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3L6ybR4
P/U9gTCbdRB+xk/+fEIY60lH3cmZungKZXT4sd2VFNTLmE8JuJD7osaIpaQAFI7X
7UniEo03X6qW1UKK7kpfBrrpp7ii6/ol01nsYdZK1CIKSYD7I1g6H/2EOQBdQLB7
1adYJSVKA14aTFEHvTHvrX85qvpNq1iqKJpGqSWuJGlPVOWhsj6AJMX8reNPjvRv
Fyb8aBvDyTkEhbxcZ0DLNr/70dx8SLRH+/f5yC05InDKmc0pyGAeRfxOCeX+bd+m
JZbMV+srAQkiWFw5ltAwg+IwuwvVwatAzGYGintaFM3FPS7q6ss6ttcS+A0Esh8Z
7FiPWiujLrPLOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:11 2026 by rpki-client