Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: Z2F+ANNYyNrEkskgeFWTefwGlqnqHBGqUPdyKdUbIBE=
Subject key identifier: 6B:55:0C:6E:C3:3E:B1:1A:4B:B4:D2:E2:9E:B5:27:79:56:C6:D9:FC
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01A0C63348E5D5392AB11B5FA92904289BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0F03
Signing time: Mon 21 Sep 2026 23:00:44 +0000
Manifest this update: Mon 21 Sep 2026 23:00:44 +0000
Manifest next update: Tue 22 Sep 2026 23:00:44 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: Es1b8bKt2DtH9k/GEAeZwjEW2XBc6uONQzQbHXYhQb4=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:48:e5:d5:39:2a:b1:1b:5f:a9:29:04:28:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Sep 21 23:00:44 2026 GMT
Not After : Sep 22 23:00:44 2026 GMT
Subject: CN=6b550c6ec33eb11a4bb4d2e29eb5277956c6d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:35:22:8b:d0:d4:7d:dc:0a:ad:6b:37:7f:
1d:8a:4f:86:2c:1a:a1:b9:9a:7b:10:01:13:a7:96:
2a:28:b6:c6:36:6a:18:2e:76:20:55:b5:46:b1:11:
37:d2:33:e0:08:21:a7:e1:fa:db:2b:d8:ae:11:ef:
a6:a3:20:39:87:cd:94:f8:48:53:9d:1a:e4:26:71:
47:72:9d:f9:6c:92:11:31:ca:7c:60:d8:a9:3d:10:
f6:03:c5:07:ed:d4:f0:6d:f7:b8:45:6d:f4:ed:aa:
00:82:96:d4:76:d6:7c:57:53:67:fb:13:11:d4:0a:
ad:7a:01:b1:63:2f:65:86:12:52:57:eb:71:c4:c2:
9d:09:a4:8c:2d:9f:f3:fe:a6:6f:96:e6:d7:6b:00:
da:00:d7:df:fc:db:42:59:a5:fa:ba:f6:8f:63:1c:
3f:26:f4:38:82:81:b0:c8:a1:89:10:16:a8:31:6b:
5f:83:6a:e8:7e:1b:fc:69:ca:3d:3a:67:9d:90:da:
9d:71:7d:62:53:34:7b:61:04:19:ca:71:3b:3e:2c:
dd:a1:c4:be:1c:61:a2:91:4a:54:fe:bf:dd:7d:8f:
b0:a1:bb:b1:b2:44:54:27:12:14:40:90:34:a8:8f:
8e:02:91:1b:5b:e0:b8:88:70:8b:65:8e:f4:27:9b:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:0C:6E:C3:3E:B1:1A:4B:B4:D2:E2:9E:B5:27:79:56:C6:D9:FC
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:f4:1d:7d:55:ec:20:8d:09:7a:a1:93:06:68:97:d6:06:
7f:a8:89:a0:93:09:b0:92:12:86:40:d3:b0:fc:82:0f:73:61:
13:30:24:a4:5f:cd:74:4f:e8:3f:78:d5:91:f5:bc:97:2f:27:
cb:83:a5:62:99:e5:55:9b:1c:f1:91:9b:9b:0c:20:23:a2:2e:
bf:27:08:fd:46:f9:9a:c2:d3:ba:54:be:75:fb:de:f7:fc:ec:
31:f0:96:f0:76:a7:4d:07:36:70:a7:f3:57:80:22:7a:99:82:
5e:bb:44:3d:b0:41:e9:e0:04:74:f8:26:8e:74:b9:2c:94:0b:
88:27:6d:39:fc:77:3a:da:c1:2e:0f:0a:39:41:44:e5:d8:34:
2d:ed:1b:19:2e:26:09:2e:cd:99:56:45:09:aa:6d:32:06:a0:
9f:f2:f5:97:60:d9:fa:68:d8:d6:f1:6f:7c:17:7c:4a:06:17:
51:fa:e3:7e:46:41:97:07:3d:55:67:ef:29:50:f0:34:b2:41:
43:77:7e:65:aa:d4:93:32:64:d3:00:5b:ec:f5:db:67:90:59:
3a:72:88:e5:18:1a:e9:69:21:0a:cd:0d:5e:22:54:57:f6:4c:
56:95:8a:a7:d1:b9:13:f2:ec:9e:46:05:0c:3a:81:b8:f3:4f:
65:9d:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:37:48 2026 by rpki-client