Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: OuEGLvTN73kIh1TG/pkYgA7R3vsALsaF2fp2oskqtjw=
Subject key identifier: CA:EC:E6:99:02:BD:AB:84:02:9D:97:57:30:7F:B8:02:6C:85:22:F9
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019D9BF511DE59B0D9B7CEFE885AD86EA7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 1147
Signing time: Fri 17 Apr 2026 15:00:22 +0000
Manifest this update: Fri 17 Apr 2026 15:00:22 +0000
Manifest next update: Sat 18 Apr 2026 15:00:22 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: JGs4oAncVPaa8gQ6p6A26yGh0+H2Ps56dXsL/QYqaf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:11:de:59:b0:d9:b7:ce:fe:88:5a:d8:6e:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 17 15:00:22 2026 GMT
Not After : Apr 18 15:00:22 2026 GMT
Subject: CN=caece69902bdab84029d9757307fb8026c8522f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:ce:d9:95:8b:15:2b:51:fd:9a:74:ad:1c:
e2:e2:24:59:4c:df:df:d1:fb:dc:08:0d:53:a9:99:
8c:b2:a5:8d:bb:57:d4:47:a0:a5:cc:e6:1b:91:e9:
14:84:36:ff:6a:63:e5:ff:50:82:ca:bb:1c:6b:73:
a1:2e:70:5e:eb:14:ce:26:9e:ff:d8:a7:6d:a3:02:
96:25:0a:fa:5e:4b:20:e8:ac:27:54:bd:52:90:c7:
f7:e2:44:60:06:66:e3:87:3c:7c:14:1e:16:c6:1c:
1d:f4:66:b1:9e:80:80:96:7d:ad:9b:da:0b:f2:a0:
18:1c:fe:b2:1a:1e:ce:28:d5:1d:a7:51:f3:98:49:
95:a1:05:62:39:52:d7:53:fa:d7:71:be:7d:d7:09:
9e:08:a7:f5:f1:7b:e5:09:ce:9e:82:9f:dc:9e:bf:
7a:58:70:e9:89:11:82:3c:b7:d6:a7:87:c5:1c:1c:
3d:83:a2:a1:68:78:14:5d:90:88:7d:8c:dc:70:38:
de:cc:29:fc:eb:59:ff:ab:16:72:60:8c:0c:37:d1:
08:8a:40:82:53:5a:e0:39:d4:81:0d:d6:56:c9:e3:
94:ff:6a:aa:21:f8:c6:19:25:d0:4b:08:6e:09:0e:
b5:16:00:0e:ba:ca:f2:21:5e:70:e8:ed:23:91:ac:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EC:E6:99:02:BD:AB:84:02:9D:97:57:30:7F:B8:02:6C:85:22:F9
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:50:5b:c0:1c:c3:69:a2:03:94:50:d1:c1:12:60:ce:bf:03:
a9:32:69:a4:07:41:2a:9a:7f:99:29:d3:fa:e2:af:15:35:fc:
5d:c3:72:da:4d:a8:73:c9:67:16:bc:7f:45:fa:72:ac:ee:7e:
c5:6e:1b:9c:79:3f:67:f6:eb:d0:7c:ef:b5:46:68:6c:7e:47:
77:0c:74:52:e8:06:3c:77:5e:d3:00:15:6a:b2:1b:9f:a1:cd:
74:11:60:eb:40:19:72:74:4d:2c:e3:07:ee:3d:e0:51:07:07:
0e:ab:37:63:08:e6:27:06:94:15:fd:da:9a:3e:c6:89:61:6d:
87:07:ea:4a:7d:3d:f7:f9:72:65:a2:9d:7c:22:52:cf:a7:d6:
76:51:9d:14:40:6c:94:d4:c5:9d:71:a7:fb:8f:83:33:91:a7:
9b:4a:70:58:b5:96:97:ec:17:88:9d:f7:bd:6e:e1:4d:89:3f:
02:b6:17:03:b8:ee:a4:f5:d3:82:7d:b6:50:eb:0d:24:55:d9:
c5:2e:10:4f:a4:33:8d:7a:2d:1b:7c:65:fc:3a:f6:bc:97:08:
45:e3:98:a7:05:0d:17:2e:f6:c3:13:f6:c2:36:9a:0c:91:a7:
13:33:7c:90:15:37:2e:19:26:0a:19:8a:d8:d5:7d:4e:7f:b2:
ac:5e:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:53 2026 by rpki-client