Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: h+/Dm2r1MPR5amNEftVqSxO0mFv+9Idp4aELZ/ZV7NQ=
Subject key identifier: A2:81:D3:25:74:38:01:EC:48:75:76:10:A6:76:35:A2:E4:59:20:90
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019D99CFB9E14C39BCC68B572D0A5FE7532B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1690
Signing time: Fri 17 Apr 2026 05:00:20 +0000
Manifest this update: Fri 17 Apr 2026 05:00:20 +0000
Manifest next update: Sat 18 Apr 2026 05:00:20 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: fv6ExeaAMQyae6n0qRWm6Vf0p9nO2kCuQfmqUJiqHTE=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:b9:e1:4c:39:bc:c6:8b:57:2d:0a:5f:e7:53:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Apr 17 05:00:20 2026 GMT
Not After : Apr 18 05:00:20 2026 GMT
Subject: CN=a281d325743801ec48757610a67635a2e4592090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:fd:0a:6c:eb:e3:f3:b9:12:da:ae:3e:dd:
c3:0c:ca:46:9b:d1:cd:5c:9d:bd:f5:6e:03:3c:cc:
a3:d4:28:26:dd:35:79:4a:58:34:d4:2f:b2:7a:6b:
d5:d9:2e:6f:4c:44:d3:8e:a7:3d:6b:6b:a3:38:b1:
70:80:33:f3:3c:53:57:18:bf:f5:d7:41:b7:9f:2c:
0b:ed:bd:4f:c8:b2:90:45:25:36:14:ea:a0:a0:96:
06:7c:8a:a5:33:6e:ea:f5:7f:30:c7:62:6b:a5:ff:
4d:48:3a:48:e7:3d:2f:c2:f5:96:4e:a0:df:04:3f:
af:10:1f:b0:d8:7e:99:06:20:86:88:97:d6:fb:00:
9f:c7:79:dd:27:c0:47:ac:29:80:ac:b3:4e:86:b5:
31:73:95:63:d4:87:e8:ae:b9:7c:96:9e:a2:1d:42:
57:d1:ae:e2:4f:02:f4:e7:57:45:6e:ba:a4:06:90:
29:d6:11:1d:27:56:d7:a6:01:78:09:89:2b:58:ce:
f3:bb:38:be:b1:a1:94:53:14:af:49:da:3e:0c:42:
4e:d7:4a:2d:2a:d5:f6:0d:12:25:0d:9a:87:a8:04:
97:4a:4c:26:49:7b:6b:7a:3f:de:7b:57:ae:94:8e:
90:4b:a0:da:a5:f6:4c:65:85:52:4c:6a:b9:61:aa:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:D3:25:74:38:01:EC:48:75:76:10:A6:76:35:A2:E4:59:20:90
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:aa:59:2a:fb:fa:5a:6d:ca:75:96:5d:7e:d0:0e:c8:9c:
df:95:69:e4:d5:d2:95:44:65:40:e3:02:ea:5a:0a:6b:5d:f1:
62:cb:a8:d9:03:c1:7a:28:13:a8:c3:a1:9d:6a:6d:14:fa:02:
96:20:7a:4f:23:2b:55:90:b1:8f:b5:93:fd:61:c9:5d:8f:c8:
33:3a:31:70:84:d4:82:65:1b:04:77:1a:98:08:5a:f6:ee:1c:
9e:ed:04:d0:bc:61:50:c3:df:49:79:0c:40:6c:34:1d:93:35:
4b:e4:f3:cd:56:37:cb:ab:06:12:f4:cb:c4:cb:23:12:78:e0:
eb:44:cf:93:cc:f6:a0:c1:1f:1a:77:67:aa:e8:58:a4:a4:65:
d9:1a:b1:11:f1:5e:1d:36:5f:d0:c6:89:1a:14:19:c1:6b:ee:
71:84:14:bc:29:ea:2f:4e:57:2d:33:87:69:fa:7d:8d:9d:f1:
c2:86:d2:0f:31:f2:d3:b1:10:fa:39:30:e3:0b:67:9a:86:d1:
9c:a6:0f:ee:d9:8e:ef:ea:11:fe:ad:c6:6c:12:f5:0e:aa:bd:
9a:92:08:d8:ce:15:2c:36:e8:ab:88:c4:53:56:d4:5e:04:49:
1d:ba:45:1a:e3:8b:c6:61:7d:41:e9:5c:74:f4:a4:36:04:1a:
c4:d7:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:00 2026 by rpki-client