Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: c66F38pTJHs7FsnWQi/TF5AcnfpuvzZel30nMr7wmhA=
Subject key identifier: D4:75:A0:F8:39:82:8C:4A:03:D5:8A:A5:3E:6D:5D:F1:32:D7:CC:EA
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019D9DE37962648F994B920C300EF4CE19B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 1148
Signing time: Sat 18 Apr 2026 00:00:23 +0000
Manifest this update: Sat 18 Apr 2026 00:00:23 +0000
Manifest next update: Sun 19 Apr 2026 00:00:23 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: lCRAqkPjNz7IW2X0RdMG5xkC32neKnbtbZtGUiyowC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:79:62:64:8f:99:4b:92:0c:30:0e:f4:ce:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 18 00:00:23 2026 GMT
Not After : Apr 19 00:00:23 2026 GMT
Subject: CN=d475a0f839828c4a03d58aa53e6d5df132d7ccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:0c:b2:4c:c2:ab:17:8c:87:f1:f8:15:4e:
e1:02:f1:08:e1:b5:70:8c:3b:c2:0e:b4:38:ef:b1:
71:e0:3c:49:2d:28:eb:58:0c:24:84:f2:0b:60:76:
84:73:db:75:8f:50:d1:45:ca:cf:54:ed:f8:3e:b2:
e6:0b:6a:dc:81:5f:b7:b5:2b:64:ac:7b:65:96:4d:
89:70:0d:55:df:00:fd:aa:cf:80:2d:8a:c8:90:72:
f3:b6:a3:71:02:31:c3:a2:f4:01:33:cd:f8:eb:c0:
6d:41:55:51:3d:89:ed:43:74:a2:bd:92:12:6e:1c:
98:ce:7b:ef:4d:14:9a:df:3f:a2:06:38:2b:ff:8d:
43:74:4f:6e:d4:cf:aa:f3:c0:e4:5c:1f:8c:56:16:
d2:0a:14:e7:96:17:00:1a:71:26:c4:03:bc:64:6f:
5f:dd:c8:fa:eb:92:ec:58:28:d1:14:2c:7f:88:60:
f1:12:0f:0f:fa:9a:5a:e5:38:06:02:ec:41:9f:4d:
58:34:82:e4:14:9c:7d:aa:4c:e6:48:0e:70:d4:93:
c9:6e:dc:3d:35:82:e9:24:9f:e1:b7:0f:f5:24:e6:
cb:07:5a:5d:a5:de:e9:8c:1a:3d:9e:14:64:f7:74:
2f:63:58:fc:3e:3c:0f:45:2e:2b:e7:91:e8:ae:e4:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:75:A0:F8:39:82:8C:4A:03:D5:8A:A5:3E:6D:5D:F1:32:D7:CC:EA
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:35:f0:07:07:c3:e3:30:77:7e:3d:74:f0:5a:49:fe:d0:
27:30:2e:df:19:0d:03:a3:a2:07:da:23:df:c8:c5:32:42:a8:
09:6a:9f:58:55:39:78:72:ac:56:1b:24:e8:db:15:33:19:8f:
4a:42:f9:0d:97:2e:87:6b:92:fd:29:58:34:1a:46:3b:1b:a6:
ce:02:ae:2c:13:f5:a7:18:86:45:62:27:7d:61:d8:98:9a:21:
ab:88:db:d8:b0:56:8d:73:15:07:93:d5:40:67:80:41:41:04:
4d:e0:7e:38:23:28:4b:bf:7e:f1:d8:8a:71:06:88:d3:51:81:
ea:b4:5d:67:31:e9:6a:64:f1:fc:ef:7f:60:f4:a0:f7:4d:9e:
86:49:b8:a7:05:ad:f0:d5:6f:17:d0:2b:e8:c5:04:e5:05:e1:
38:22:f7:ac:36:d3:b4:a7:75:60:f2:69:8b:7a:96:ca:f4:c6:
59:07:28:b3:63:a9:d3:cf:7d:7b:39:44:b0:6f:22:58:54:45:
40:08:0b:65:dc:fd:60:78:fc:1d:06:f8:d0:32:66:5f:b7:57:
59:27:cd:39:e4:d4:58:9a:b8:e5:9b:29:d4:5c:66:4e:76:8a:
c9:d5:e0:ad:07:07:8e:52:72:cb:6f:81:bd:3a:e6:00:f8:0c:
dc:eb:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:15:05 2026 by rpki-client