Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: QKdvrjA+bw8zldcCLSdAvXyvkYsEeEwDKxi5lraGVxU=
Subject key identifier: B3:54:6D:43:61:75:31:BF:8B:6E:6A:89:C1:F1:71:91:7C:95:DD:63
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019D992B198F5CDF8F7852083C253AA51AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0D5E
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: uOWJgUoQmTMLzh6f0OXVagfPaqRahnAQA46sJhWPCf4=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:19:8f:5c:df:8f:78:52:08:3c:25:3a:a5:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=b3546d43617531bf8b6e6a89c1f171917c95dd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:07:07:84:ab:f4:73:54:d2:90:15:bd:ab:
25:70:05:e6:0e:3e:66:c6:06:cd:46:bc:74:37:4b:
51:09:86:66:24:b4:54:9e:18:e6:d2:88:28:ba:01:
1f:10:e3:20:f0:4d:2a:05:91:6f:14:37:93:e2:f0:
3a:18:09:be:c0:b0:53:1d:18:df:62:dc:63:2e:4c:
f0:a1:2b:e4:d3:db:96:a7:7b:bb:a7:85:6d:be:71:
4f:e8:eb:2e:7d:32:11:71:45:3e:cd:07:5a:09:7c:
60:f4:26:f2:be:bd:8b:e2:16:57:6d:31:d6:6e:b5:
b3:f0:45:40:d8:06:25:1d:65:51:8f:ab:f9:21:14:
a1:c2:4b:59:07:4e:02:8a:84:79:ed:54:fa:f1:68:
36:a4:8c:2d:ba:ba:02:38:a8:b7:99:42:00:83:2a:
17:4b:4e:f2:11:25:39:05:f5:fc:e9:3e:93:db:37:
ec:12:88:e2:b2:6e:94:9b:50:03:64:82:29:a1:6f:
04:e4:16:eb:b9:57:97:5f:ee:83:de:37:5d:f2:8e:
63:1c:cc:7e:ad:1a:d0:92:08:0c:0e:69:6c:69:85:
f4:3e:87:e8:b7:e5:59:b5:b4:44:cb:f7:f9:15:f0:
83:17:52:91:71:15:0e:d0:ef:32:67:15:ba:07:62:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:6D:43:61:75:31:BF:8B:6E:6A:89:C1:F1:71:91:7C:95:DD:63
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:15:14:4d:e2:71:cd:62:f0:b5:a9:03:d1:e7:70:2f:29:
57:b6:af:4c:a9:e4:dd:3d:aa:1b:5a:68:05:0a:67:d3:0f:3a:
fb:5b:7b:5f:96:b6:2a:02:3e:19:d8:b9:84:d7:78:76:35:bc:
17:d8:b3:ac:35:71:99:82:f6:a0:9b:b9:e1:29:53:48:d7:e5:
56:eb:44:05:c8:e3:c7:ea:f0:32:98:1e:2f:33:e0:95:b6:f6:
3e:78:97:ec:13:67:8d:86:db:0a:45:81:81:a0:52:93:57:82:
da:27:72:45:18:b2:d3:c1:37:14:96:67:50:73:d1:7e:f9:78:
99:d4:b5:1c:5a:16:cc:91:05:73:fb:ac:63:0a:db:79:e0:a1:
a3:18:55:b2:97:0a:e0:c4:d2:ff:e2:cb:ef:00:14:7a:39:9c:
96:09:03:d2:c8:18:ba:99:12:7c:6b:59:68:97:c9:f8:c9:10:
66:68:87:ff:26:c8:b9:f3:be:04:a8:ea:e6:34:a7:83:b3:4f:
aa:bd:0c:6d:07:15:da:c7:76:5c:fb:05:ec:b7:97:99:e5:88:
4d:40:a2:bb:2f:4b:2c:ed:5c:28:cd:fd:55:d1:da:c4:54:e4:
47:de:ff:d6:99:e6:13:f0:7e:c7:f4:57:f2:8c:3b:0a:cc:f6:
e3:c9:2d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKxmPXN+PeFIIPCU6pRrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3
ZjM3MzIwHhcNMjYwNDE3MDIwMDMxWhcNMjYwNDE4MDIwMDMxWjAzMTEwLwYDVQQD
EyhiMzU0NmQ0MzYxNzUzMWJmOGI2ZTZhODljMWYxNzE5MTdjOTVkZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5YHB4Sr9HNU0pAVvaslcAXmDj5m
xgbNRrx0N0tRCYZmJLRUnhjm0ogougEfEOMg8E0qBZFvFDeT4vA6GAm+wLBTHRjf
YtxjLkzwoSvk09uWp3u7p4VtvnFP6OsufTIRcUU+zQdaCXxg9Cbyvr2L4hZXbTHW
brWz8EVA2AYlHWVRj6v5IRShwktZB04CioR57VT68Wg2pIwturoCOKi3mUIAgyoX
S07yESU5BfX86T6T2zfsEojism6Um1ADZIIpoW8E5BbruVeXX+6D3jdd8o5jHMx+
rRrQkggMDmlsaYX0Pofot+VZtbREy/f5FfCDF1KRcRUO0O8yZxW6B2J6lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNUbUNhdTG/i25qicHxcZF8ld1jMB8GA1UdIwQY
MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt
YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh
LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/kVFE3i
cc1i8LWpA9HncC8pV7avTKnk3T2qG1poBQpn0w86+1t7X5a2KgI+Gdi5hNd4djW8
F9izrDVxmYL2oJu54SlTSNflVutEBcjjx+rwMpgeLzPglbb2PniX7BNnjYbbCkWB
gaBSk1eC2idyRRiy08E3FJZnUHPRfvl4mdS1HFoWzJEFc/usYwrbeeChoxhVspcK
4MTS/+LL7wAUejmclgkD0sgYupkSfGtZaJfJ+MkQZmiH/ybIufO+BKjq5jSng7NP
qr0MbQcV2sd2XPsF7LeXmeWITUCiuy9LLO1cKM39VdHaxFTkR97/1pnmE/B+x/RX
8ow7Csz248ktJw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:54 2026 by rpki-client