Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File: T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier: Dd91GrYKdiKU0Q1IYXv2YMiEkR7o127hjBKqvV2RFdw=
Subject key identifier: 09:98:04:FC:DB:F2:9A:10:61:9B:B8:91:CF:4F:69:0B:62:24:0D:25
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer: /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial: 019D9B87F7392AC2E89B306F695E9F10DFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 13:01:12 +0000
Manifest this update: Fri 17 Apr 2026 13:01:12 +0000
Manifest next update: Sat 18 Apr 2026 13:01:12 +0000
Files and hashes: 1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: 2+iO6IUMjfAj5bN/V6L3WGANxR8Yg94LlLM4p6wMziI=)
2: saKUd1nXbIug4fGWqb0fMv0LqfE.roa (hash: UTNxxWMancSqCn9jNpepiP9P3sBxTQaMyddSyFTQ6ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:f7:39:2a:c2:e8:9b:30:6f:69:5e:9f:10:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
Validity
Not Before: Apr 17 13:01:12 2026 GMT
Not After : Apr 18 13:01:12 2026 GMT
Subject: CN=099804fcdbf29a10619bb891cf4f690b62240d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:37:db:4f:38:bd:7c:5c:0e:e4:a9:86:62:
ec:2b:00:20:45:42:a5:43:55:24:7e:6e:da:13:01:
a0:a7:4b:54:df:b2:c8:22:ae:eb:6b:7e:31:be:cc:
a4:c9:81:89:bd:be:17:75:36:6f:37:76:a2:4f:93:
99:f8:56:3f:6d:dc:c4:a5:23:e4:6d:49:34:84:f5:
e9:14:c3:45:81:7e:c0:59:38:49:25:eb:78:3d:4c:
28:10:d7:be:ad:a2:36:92:cd:ca:8c:29:d5:04:61:
68:0e:7c:fd:c8:d4:ba:dd:84:50:37:9a:98:46:3c:
14:25:4a:8c:91:cd:06:73:d8:ca:4f:19:57:b5:2e:
73:2b:14:8e:4a:5f:88:d7:12:c1:ef:e9:b5:19:1d:
01:e0:d9:fb:e5:67:eb:e0:66:58:47:b7:aa:db:51:
02:ed:14:68:14:2c:5e:36:52:f2:c8:0f:3d:59:b6:
13:8e:3e:ce:52:d1:cf:df:13:0a:33:68:b3:c1:66:
71:6b:c9:fd:cc:c1:1b:17:c9:93:4c:d7:35:7a:1a:
db:39:80:f1:21:93:b2:71:13:de:11:ba:7b:bf:7c:
7e:c8:8f:b8:ff:99:52:73:d5:5a:1a:f9:2c:48:2e:
64:51:34:1b:31:6e:5e:0f:bf:8a:9e:71:5c:f6:76:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:04:FC:DB:F2:9A:10:61:9B:B8:91:CF:4F:69:0B:62:24:0D:25
X509v3 Authority Key Identifier:
keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a2:5e:62:c1:6e:5c:d7:ac:ce:f7:bd:3e:89:42:0a:a9:33:
c1:3f:cf:e7:e2:67:47:ad:76:d7:22:a6:0e:d5:c3:07:c9:1d:
3c:74:21:34:1c:1e:03:eb:52:7b:6b:6d:bb:f9:37:a3:4e:35:
01:a7:5d:88:5d:30:1e:2b:80:38:4d:af:03:6e:30:2e:cd:b8:
cf:f7:b6:5c:dd:72:dc:73:99:18:c7:e3:3b:a3:88:26:25:51:
30:9b:e3:fd:c7:61:dd:c8:6d:a0:0c:90:a9:37:0a:88:13:9b:
68:58:07:72:9c:b8:aa:ce:b4:80:6c:8b:2c:44:c4:2e:4d:55:
1f:94:7d:28:f7:78:d7:7a:af:2f:51:f1:f4:6f:f1:24:80:da:
61:9a:43:0d:fa:93:bc:fa:15:15:03:ec:99:16:dd:9d:72:e1:
43:c8:0a:ba:50:a7:dc:96:e6:66:8d:bc:c2:25:ad:ef:79:33:
28:72:ac:89:4f:4f:ca:d7:a2:59:ba:42:d2:8a:52:36:9f:20:
85:6a:df:3a:d4:57:62:6f:a8:2c:9d:6a:2c:f0:72:30:83:f5:
c0:87:6f:ea:46:2d:2f:80:d0:a0:f0:41:40:7b:e8:d5:10:77:
67:fc:17:ae:73:1d:01:c2:50:77:6b:21:5a:b0:d3:34:7d:26:
14:aa:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:10 2026 by rpki-client