Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: ojq7UDvDf7j7zNIRpGdySZp408qh7sRL9nTYflYKX/o=
Subject key identifier: BC:48:CB:2A:86:0A:BB:B0:E1:75:BC:7A:7E:9D:2A:D6:FF:0A:F5:DF
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 019D9BF5486B5FF3E34ACAA73D4264E838C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0436
Signing time: Fri 17 Apr 2026 15:00:36 +0000
Manifest this update: Fri 17 Apr 2026 15:00:36 +0000
Manifest next update: Sat 18 Apr 2026 15:00:36 +0000
Files and hashes: 1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: Sq4giogbENHt3l97I7fPMUCI0iB5VcjXNwRK6SQB524=)
2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:48:6b:5f:f3:e3:4a:ca:a7:3d:42:64:e8:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Apr 17 15:00:36 2026 GMT
Not After : Apr 18 15:00:36 2026 GMT
Subject: CN=bc48cb2a860abbb0e175bc7a7e9d2ad6ff0af5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:6c:50:82:bc:65:ad:c4:bc:c9:be:af:1d:
fd:3f:f3:8d:9e:43:e8:37:27:14:6a:9a:37:9d:d5:
27:dd:e3:06:1e:4b:eb:97:00:6e:e3:9c:09:cb:66:
55:61:04:32:bb:d2:88:cf:75:72:4d:e8:c5:29:38:
79:03:83:ff:99:a1:a4:70:a8:61:06:62:16:f9:1f:
0f:94:33:18:ed:a2:ad:5d:ed:72:2a:f0:62:80:90:
e5:04:aa:3e:f8:a9:b9:f2:9d:4f:d5:39:94:78:1a:
3d:03:3e:5f:dd:6c:3f:16:f3:6b:b9:b2:5b:40:6e:
a6:08:8a:22:67:6e:05:47:ce:84:db:a1:e1:50:fd:
6a:33:64:6b:ef:37:81:17:4b:ac:f8:d8:bc:b7:0e:
f9:2c:93:14:99:af:15:96:09:ac:08:da:34:2e:51:
88:c2:50:31:c7:3f:3d:3f:ea:96:a6:52:80:e0:6d:
56:b7:36:58:47:c2:d0:79:41:9a:7c:cd:a5:2e:60:
46:07:28:1c:13:89:1c:48:92:70:27:4f:2a:d9:2e:
fb:87:a0:42:1c:e9:6d:43:09:ce:d4:43:e0:92:f2:
a5:48:7c:95:41:c1:69:da:b8:9f:19:fb:3f:61:a7:
f7:25:78:3e:53:a3:d4:97:36:63:6a:24:98:08:59:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:CB:2A:86:0A:BB:B0:E1:75:BC:7A:7E:9D:2A:D6:FF:0A:F5:DF
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:04:bb:cf:7d:e0:7a:99:b0:57:26:88:3a:53:a4:5d:a6:
27:6a:5f:3a:c9:58:89:46:d3:a1:6b:8a:24:ce:d0:62:8d:39:
2e:1f:b5:57:b5:73:f4:9f:73:f7:e0:db:04:38:a4:e9:e4:dc:
f5:9e:66:7e:7e:02:2e:39:1e:53:31:9c:ca:0f:96:23:12:45:
76:0d:4a:6a:eb:be:6e:34:32:7b:cc:18:85:0c:a5:93:01:e0:
75:a2:59:c5:7d:50:cd:72:10:ec:4d:de:e9:9d:4e:73:09:08:
1f:f4:43:e6:d9:bc:dd:45:a5:ab:17:b9:df:a6:f3:aa:ca:bd:
4a:40:97:35:2d:d1:b2:9f:0a:64:87:4e:9b:f1:4e:2c:4e:b1:
88:9c:0a:f4:1b:be:51:a3:dd:0f:d6:99:3c:21:40:2c:bb:13:
54:d4:de:8e:9a:bc:10:2e:9e:64:7f:75:4b:81:22:cc:0d:c0:
1d:6d:bd:2e:01:92:e7:6a:fd:91:b8:b1:aa:ea:e5:fb:b5:43:
93:c6:bf:53:b6:dd:e4:50:b3:ce:2e:9d:87:74:a2:0d:d7:d5:
98:46:1b:1a:27:b1:64:a5:9f:77:d6:85:7f:39:07:60:85:d2:
d8:c8:36:59:6f:86:30:25:b7:59:c9:cb:c7:d7:7c:4f:cd:2a:
12:46:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:13:50 2026 by rpki-client