Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: sEnBcEHbVUd/CbDtBSVVroYIOQ2uM1rsb0OAJKNMqaw=
Subject key identifier: 53:AA:0C:A3:3C:3C:71:8F:55:D0:1F:F0:89:C4:EE:48:AC:CE:A7:1B
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019D9886AF9D500A85E93FF6193C10E0C22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 14BE
Signing time: Thu 16 Apr 2026 23:00:56 +0000
Manifest this update: Thu 16 Apr 2026 23:00:56 +0000
Manifest next update: Fri 17 Apr 2026 23:00:56 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: PhFYV9nw8VOKt1qqM9BMK2QS6xMTdOnydeJckmoseHM=)
2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:af:9d:50:0a:85:e9:3f:f6:19:3c:10:e0:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Apr 16 23:00:56 2026 GMT
Not After : Apr 17 23:00:56 2026 GMT
Subject: CN=53aa0ca33c3c718f55d01ff089c4ee48accea71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:1b:b6:3b:bb:86:89:57:e2:fd:97:21:80:
ed:c7:b8:ea:8e:68:93:96:af:2d:db:f4:8d:db:64:
c5:86:47:81:75:e5:8d:1c:7d:98:2f:c0:8c:fa:cf:
8e:3f:ef:ce:11:b9:a2:09:4a:7a:07:69:bf:29:51:
a1:d3:e8:9e:53:3b:fd:bd:41:87:8a:8a:ec:d0:d2:
6c:90:44:3e:1a:43:a1:ad:a8:d8:69:f3:98:23:6e:
1c:5d:97:d1:1f:52:2a:28:3a:76:5f:ae:db:f2:a5:
06:a5:df:86:cf:30:49:2e:61:c2:32:e6:df:81:53:
0f:ea:af:83:33:23:47:d3:11:1e:65:79:14:58:b1:
3f:be:78:70:42:44:bf:b1:6b:38:bd:25:63:d1:7e:
5e:9a:14:e3:58:fb:2c:16:07:3b:8b:be:66:4c:9a:
bf:5c:3b:fb:dd:a2:a1:e0:89:c6:b0:4f:6c:20:7d:
49:bf:2f:b8:ee:d8:17:8d:3b:5a:5a:92:de:f7:a9:
f0:00:1b:98:66:ac:4f:2b:c6:9c:a3:b5:c8:72:c4:
14:58:8c:a7:f0:36:4f:08:ce:b6:de:13:ff:e3:8b:
b4:4d:7f:b7:06:b8:1b:2b:15:c9:ed:40:18:24:c9:
13:2c:01:e7:75:8e:a6:79:06:b4:56:1e:7e:fb:0c:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:0C:A3:3C:3C:71:8F:55:D0:1F:F0:89:C4:EE:48:AC:CE:A7:1B
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:18:6a:56:c2:5a:21:cf:be:54:f1:eb:90:1a:a3:38:8e:
3d:81:73:8b:3f:04:82:e4:6d:22:a1:de:02:be:e6:87:9a:5c:
66:1a:1c:6b:e6:ee:3d:65:01:2c:14:88:8a:62:71:95:bd:63:
d7:95:8b:23:b4:dd:f2:48:5e:ec:21:55:20:9d:19:2d:34:06:
e0:d8:3f:4d:75:f6:1f:b5:13:71:99:b5:fa:c5:0c:56:35:c3:
f9:a2:52:df:10:5e:2c:1c:28:e1:7d:db:2e:aa:ce:40:8e:da:
2d:3a:38:78:e0:95:36:95:5b:9f:4d:c6:b9:57:58:83:61:ba:
66:57:e7:7f:9b:bb:61:67:35:43:a1:5b:49:9f:ce:a0:16:56:
19:b5:5f:14:ba:4b:56:74:15:b6:e3:47:15:0f:f7:6c:24:bc:
db:ae:98:a5:4a:91:f5:ae:97:7e:98:af:20:e4:ad:c9:a6:a8:
23:3d:0e:6c:3d:c4:97:7f:dc:b4:e9:e3:54:65:50:c7:ac:b6:
17:f3:c8:cc:12:d5:62:ec:06:97:26:0f:10:ac:dd:75:bd:dd:
9f:72:8d:66:84:bd:b4:d5:b4:0c:9c:56:79:b6:a9:d2:2d:40:
7f:d4:4f:39:36:18:49:c2:6a:37:bf:c4:fd:13:77:73:4c:37:
8b:95:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:59 2026 by rpki-client