Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File: T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier: b9LnEmh12fzdoyKh/+5BtaTTFJaNWuJSZTjwTnVJj/4=
Subject key identifier: BA:56:7E:F5:27:21:54:DC:25:47:78:69:3C:5B:1D:34:60:6C:27:A7
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer: /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial: 019CADFE9FD029FD9DCC0B3A9738E682A4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:01:11 +0000
Manifest this update: Mon 02 Mar 2026 10:01:11 +0000
Manifest next update: Tue 03 Mar 2026 10:01:11 +0000
Files and hashes: 1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: XBIaKWU5UjmzKNrJt2u12rA9/uoBBPmxvMpr+ywrsEM=)
2: saKUd1nXbIug4fGWqb0fMv0LqfE.roa (hash: UTNxxWMancSqCn9jNpepiP9P3sBxTQaMyddSyFTQ6ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:9f:d0:29:fd:9d:cc:0b:3a:97:38:e6:82:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
Validity
Not Before: Mar 2 10:01:11 2026 GMT
Not After : Mar 3 10:01:11 2026 GMT
Subject: CN=ba567ef5272154dc254778693c5b1d34606c27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:3e:e5:fe:12:02:0a:66:7d:a7:6e:fb:ce:
cc:09:7a:60:4b:62:c3:69:d2:30:2e:10:c9:f6:c1:
1b:95:08:85:d4:7e:62:0b:dc:2e:b2:84:88:50:09:
b3:33:7f:1f:72:9c:bc:3f:f4:ab:e0:af:ea:7b:92:
fc:0b:57:ac:c1:23:e1:d6:35:ac:0d:92:a9:76:c7:
c3:22:78:d7:07:89:d5:8f:a5:30:a0:85:f9:18:da:
0d:35:01:6c:eb:23:9f:9f:8b:0f:31:f6:9d:73:49:
c2:3f:6d:4e:23:a4:38:1b:e2:26:52:14:de:79:f9:
de:f6:9a:8f:e5:7d:31:42:26:9f:67:cb:4d:c8:04:
bd:cf:23:c8:0d:b6:00:3e:f5:f3:9f:7f:21:9e:79:
cf:8d:8a:eb:35:53:71:60:c2:64:67:cd:52:d5:dc:
c0:21:d4:34:7e:53:67:60:61:fc:94:d1:da:72:5c:
47:13:6f:d0:a1:04:8a:ca:ac:69:c2:18:62:27:69:
e0:8f:1c:c9:a6:db:c0:ae:54:ed:87:18:70:fe:ab:
1e:f1:3d:d3:0a:c9:5c:c1:4b:5f:e5:3f:a2:8b:44:
e4:ac:b6:9e:ec:aa:15:50:9d:01:13:24:34:1d:12:
98:d8:dd:03:61:52:70:d7:ab:71:c2:c2:ad:b1:58:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:7E:F5:27:21:54:DC:25:47:78:69:3C:5B:1D:34:60:6C:27:A7
X509v3 Authority Key Identifier:
keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:2e:24:b6:93:08:6a:89:c0:4f:20:4c:dc:85:93:52:f3:
75:ef:90:67:2e:81:a5:91:d8:17:ba:1d:2f:b0:13:70:d0:25:
e6:73:93:c3:3b:2a:e6:34:2a:48:b3:ec:71:e2:e3:26:49:06:
9d:73:8f:cd:c7:d4:9e:2f:fd:a7:80:61:88:28:2d:b3:93:c1:
b1:52:10:33:d6:b6:dc:fc:23:e0:59:61:db:05:72:7e:6d:c7:
bd:64:e7:d3:31:77:3b:88:b5:17:8c:e6:27:da:aa:2a:ef:8c:
b0:43:47:26:43:eb:70:5a:75:61:cd:ec:c9:a1:62:b4:59:36:
9f:b7:c0:f3:8f:30:2c:c6:b9:86:9d:8e:a8:e9:f0:33:e8:27:
03:05:13:e0:be:d4:c0:bc:fc:73:61:bc:29:c6:70:2d:70:e7:
bf:29:90:c1:8d:47:07:9f:a2:35:29:fe:15:ec:ab:5d:34:7e:
5e:ef:fc:42:cd:ef:f1:9d:cc:c6:1d:1b:99:31:25:46:f2:c7:
a5:a7:a4:9f:25:6e:9b:f3:6a:70:d9:58:32:66:fc:23:77:ba:
7d:07:d4:18:c3:4d:b6:eb:a8:8c:09:e7:d8:1a:26:99:ab:82:
64:1e:7c:8a:dd:8a:78:6e:86:3b:5d:4f:8e:b3:57:31:51:17:
2d:db:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:26 2026 by rpki-client