Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: t5YzfKsIM/rI2hAN9hzKy/iUBVGWFBX5ZgpPBxh2+fE=
Subject key identifier: 53:2E:B5:4F:AA:F6:7D:B0:DD:91:45:57:73:CB:32:B1:CD:7B:FD:85
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019FAA50C2BD021D55ECA2DD0D9DAFF9CFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0E70
Signing time: Tue 28 Jul 2026 20:00:46 +0000
Manifest this update: Tue 28 Jul 2026 20:00:46 +0000
Manifest next update: Wed 29 Jul 2026 20:00:46 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: e4P2/PLpC9/oAFj640QZWmUrTCstVFJJalAtzTIh9p0=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c2:bd:02:1d:55:ec:a2:dd:0d:9d:af:f9:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jul 28 20:00:46 2026 GMT
Not After : Jul 29 20:00:46 2026 GMT
Subject: CN=532eb54faaf67db0dd91455773cb32b1cd7bfd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:52:ba:d2:62:2f:1d:9f:b2:f1:90:21:2f:
ac:ff:9a:b7:c6:72:58:ba:c7:e8:b6:05:86:1a:df:
48:3f:86:63:b7:07:21:8f:3d:22:0b:01:09:a5:4a:
d4:c0:5f:70:17:63:ca:0b:57:d3:05:e8:df:96:42:
81:6b:09:c2:f1:dc:38:f4:bd:43:17:b9:54:67:9b:
23:92:67:21:ce:af:cc:17:31:43:a4:9b:40:c4:11:
0e:a1:8d:2a:a6:bd:87:7f:39:d0:8a:7e:99:ed:ec:
63:c6:fd:44:45:0a:d1:61:4c:7c:4f:aa:7c:22:fa:
90:76:86:ad:d4:c0:d9:11:7c:a0:4e:e6:1c:2e:09:
d8:4e:ba:bc:e3:fc:5e:65:7e:98:82:16:aa:b9:96:
43:17:bf:48:04:a6:bc:18:d2:41:de:0b:a6:36:29:
78:92:b8:36:c4:4c:ca:8a:7e:32:19:fb:4c:24:62:
b6:28:35:fe:22:66:18:5a:95:96:aa:81:24:fc:09:
6e:5d:a1:e8:12:d2:97:d5:47:f2:3c:c5:1e:ee:a6:
eb:83:58:c2:50:83:6c:88:35:c2:57:dc:90:01:8f:
74:93:38:0d:e4:38:95:08:1a:e9:5a:f3:c1:b3:3d:
0e:4a:2f:0a:04:83:7b:2b:2f:49:ac:b3:54:d2:19:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:B5:4F:AA:F6:7D:B0:DD:91:45:57:73:CB:32:B1:CD:7B:FD:85
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c2:65:4f:42:30:3a:4b:14:03:66:1d:12:8d:c5:4a:64:73:
bc:5a:78:bd:fb:52:d8:87:c0:b3:10:b0:f9:9d:75:41:76:9e:
1a:2f:bb:61:70:c7:b2:6e:7d:47:7a:15:37:e1:cb:0a:36:f3:
a5:6a:cd:f1:8f:4c:57:dd:14:58:5c:70:70:46:c3:fb:2d:ca:
14:55:46:f7:48:4e:5c:f1:f4:0a:a5:ed:6b:db:32:f3:c9:16:
3d:8a:46:0f:70:e5:e7:c4:d8:c7:36:45:11:cb:ef:f2:b4:dd:
77:10:41:06:8f:5e:63:4b:35:fa:38:21:5f:88:d9:8a:84:d1:
b7:14:f1:91:d1:87:70:dd:8e:cc:c6:b3:d3:21:ff:25:b8:33:
06:8a:72:40:6f:3b:0d:b8:c6:5e:77:53:3a:ca:28:c9:9a:0f:
86:ab:d2:11:6f:c1:8c:9c:5a:be:f1:bd:c0:34:2c:3f:63:02:
e3:40:45:4a:95:34:54:74:ae:fb:f2:67:cb:7c:fb:4c:7b:4f:
7d:55:a4:41:b4:71:f6:bc:1e:ee:d1:5e:9f:9c:d9:73:4f:a7:
03:42:ea:03:ad:90:45:1e:8c:65:8d:39:32:ba:94:70:d6:33:
41:e3:88:c3:7d:bb:c7:bc:6a:a5:52:c4:d7:4f:0e:e7:e9:f9:
0a:3b:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:22 2026 by rpki-client