Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: kUn5LbOCXKPk9Hgxxar39m7GW2yjnfV2Hv/80RAw13A=
Subject key identifier: DB:84:61:BF:4B:7A:55:50:4D:FF:65:B9:0F:A8:00:04:AF:A5:1A:CF
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019D9EBF844265572478EEB168D2F3C9A4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 115B
Signing time: Sat 18 Apr 2026 04:00:44 +0000
Manifest this update: Sat 18 Apr 2026 04:00:44 +0000
Manifest next update: Sun 19 Apr 2026 04:00:44 +0000
Files and hashes: 1: 0dkxclF1U6vYr5lj_eZjUfz7Azc.roa (hash: YJxaOvLCg9PJXa43CpA/uzG5+07fOluR8wxwPEngEDw=)
2: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: oQ+9JIwxPWre965e3B1GYc6BG5NdineikUVrJjGbvNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:84:42:65:57:24:78:ee:b1:68:d2:f3:c9:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Apr 18 04:00:44 2026 GMT
Not After : Apr 19 04:00:44 2026 GMT
Subject: CN=db8461bf4b7a55504dff65b90fa80004afa51acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:b5:c9:e5:8c:c8:55:d0:27:be:d5:94:b0:
5d:f7:c8:7a:7e:57:73:c9:87:25:71:38:9b:d5:15:
74:91:d5:1d:e4:d8:69:59:b9:5f:a7:14:86:bd:56:
e0:c1:d5:08:13:b7:71:96:c9:fe:ad:37:e7:bc:f0:
96:a6:b9:c5:50:7e:e6:63:07:de:5a:4c:7d:b2:ae:
d1:94:3b:00:36:c5:21:93:04:32:4a:c8:6c:c7:59:
0f:3f:19:a9:f3:87:54:45:52:98:da:56:26:c2:70:
13:7f:ab:a0:c0:ef:48:36:37:8d:5e:e0:c3:99:0f:
d2:86:c6:3c:39:58:e9:a9:98:00:09:cf:ef:37:8e:
0f:4d:89:08:84:e3:f4:34:3d:32:53:a4:13:2a:38:
9f:da:c3:c6:13:51:ce:31:d7:cd:b7:f2:2c:7b:17:
bb:69:5d:b3:74:0e:a2:c0:b0:d0:3b:b4:5a:91:2b:
db:6d:54:bf:54:7a:b2:90:53:8b:d7:43:f9:3c:a6:
66:79:e7:4a:fb:05:bb:c9:e7:55:28:55:39:bc:54:
16:70:9a:56:aa:1d:14:83:38:70:5f:a9:fe:61:17:
10:71:d5:4a:92:75:78:28:4b:4b:66:8d:b5:47:b6:
18:fc:7d:f6:ee:35:04:65:ca:8e:50:d5:d5:10:b8:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:61:BF:4B:7A:55:50:4D:FF:65:B9:0F:A8:00:04:AF:A5:1A:CF
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:19:64:01:2d:7f:21:d2:db:7b:e9:6c:d2:42:6b:eb:74:
02:4c:57:40:6e:0a:62:63:fb:f7:e1:0e:e0:f4:b8:72:3a:84:
d1:bf:e3:a1:d1:01:bf:23:b9:c4:04:96:14:01:f8:8d:e6:7b:
28:da:7d:af:f6:4a:af:a3:3e:64:c8:26:9f:56:95:fe:d7:a8:
81:64:34:58:74:e3:da:27:73:05:e8:a9:7f:cf:67:93:b0:71:
a4:49:94:73:5d:17:89:71:ef:58:11:57:eb:96:84:eb:ba:b7:
8a:9c:12:cd:8e:b2:d5:91:48:df:44:0e:e4:cc:7a:01:a0:36:
37:86:3f:49:a8:0e:f5:16:40:37:5c:79:da:e0:8c:f6:44:3e:
95:6f:59:07:53:2e:26:99:32:a4:30:91:ef:89:12:3d:e5:43:
82:fb:19:53:59:a7:55:ac:9d:cb:3a:6d:27:f7:66:a7:03:e8:
b0:9b:ca:f0:c2:b8:52:37:7c:e1:da:f9:e7:b8:d5:04:55:28:
e3:3c:32:96:33:cf:94:49:d4:55:e8:c0:1d:ca:1f:f3:16:c3:
df:b9:37:84:c6:f1:22:6e:25:5a:85:27:b6:36:53:54:f6:18:
2c:27:25:2a:22:cf:dd:f3:ae:48:21:44:0d:58:0a:74:85:7d:
4f:71:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:13:25 2026 by rpki-client