Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: 0W2HVfNGmXb6mTwFbEXI5n9n/yl2wWCFRJM2ef0QMrw=
Subject key identifier: D6:13:1D:9F:9C:32:03:77:4A:8C:FB:FD:99:EC:62:7E:A0:89:2E:ED
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019DA52F5D47A03ECE25A04A181C65B4DCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 03D8
Signing time: Sun 19 Apr 2026 10:00:37 +0000
Manifest this update: Sun 19 Apr 2026 10:00:37 +0000
Manifest next update: Mon 20 Apr 2026 10:00:37 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: O0w9Ib3aeTkDxZ9L0YnMRNY0OTOCNsVMWrmoST0hkyM=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:5d:47:a0:3e:ce:25:a0:4a:18:1c:65:b4:dc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Apr 19 10:00:37 2026 GMT
Not After : Apr 20 10:00:37 2026 GMT
Subject: CN=d6131d9f9c3203774a8cfbfd99ec627ea0892eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:68:6c:4a:b5:3f:d1:fe:62:3e:8d:32:e8:
77:cf:41:eb:04:d0:04:1a:0b:f4:33:43:71:4a:ad:
8e:70:dc:0a:d5:7c:1d:ff:cc:9d:44:3a:2c:d9:c3:
2d:9b:93:4e:e3:fc:08:b3:b4:84:f4:7a:ff:86:4f:
1c:20:71:cd:b1:d9:e0:b9:16:d7:96:25:a5:84:8a:
d6:30:fc:f2:e9:38:11:29:7c:9a:66:92:1b:61:78:
0d:98:99:80:6b:3e:8f:a8:a1:5d:4d:66:75:fe:00:
2c:42:5d:18:da:8b:8f:4f:db:01:b2:a8:1c:19:6d:
a4:16:9b:70:81:15:96:7c:cf:32:09:37:5c:d2:ff:
98:c6:25:1b:ac:0f:5f:9a:a1:a3:e7:e5:f2:0f:20:
7e:e0:09:22:80:f1:9a:ac:c9:20:5f:49:b2:77:67:
29:57:3b:bb:06:48:da:d5:2f:b5:0f:35:93:19:8d:
8e:5a:52:2d:52:04:5e:f9:67:ec:34:29:43:68:e4:
11:62:40:1e:56:25:11:ab:31:27:5f:8a:f2:07:78:
ab:10:c7:35:76:52:3b:80:ad:04:4b:54:1e:0e:aa:
29:02:08:4b:24:dd:f9:0c:4c:d1:44:33:c5:30:36:
71:4d:9c:c7:16:7f:76:26:f5:27:9a:9b:70:b1:b5:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:1D:9F:9C:32:03:77:4A:8C:FB:FD:99:EC:62:7E:A0:89:2E:ED
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ed:e4:26:f7:e4:9c:5e:2f:9a:45:a1:e5:86:bf:f8:9b:0c:
c6:bc:3b:a0:aa:96:24:a8:d2:e9:ce:03:3d:ea:0a:18:f4:6b:
a4:7a:7c:f3:3c:55:68:6f:67:5b:90:6d:ba:e8:07:93:49:85:
dd:33:8d:b7:2a:13:d1:2b:c5:fd:20:06:a1:f5:c5:a1:ab:46:
6e:b9:4f:86:50:b4:ae:7f:b5:67:a2:6b:40:ac:04:92:81:77:
6b:3f:14:fc:95:3b:78:b9:e5:ae:51:85:80:43:20:79:d1:c2:
8e:6f:9f:15:37:09:92:34:44:e8:76:33:fa:92:07:0d:52:1f:
ac:7e:75:f0:33:85:e0:ed:40:c2:ce:e3:d6:f2:a7:a6:48:17:
7f:50:e3:2a:53:c6:f8:7d:c2:46:78:e4:f9:98:52:3e:83:67:
bc:09:ca:52:6e:1c:83:b6:a7:31:f6:f8:69:9c:34:8f:d1:b4:
c6:c6:a9:69:4f:e0:14:c2:f5:be:51:e5:4d:85:b8:34:a3:a8:
ce:92:f5:16:f6:d4:67:0c:10:03:87:09:68:be:32:c7:e3:60:
e4:69:3c:89:f3:68:85:e0:26:6b:18:70:1c:fe:f1:29:8e:f5:
bf:35:5c:92:3d:cb:a5:1e:fe:79:72:f3:96:3a:7b:e5:68:c2:
44:57:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:24 2026 by rpki-client