Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: wgPZHMfzLJC2Vmu9Y66Nzj1DS7x+1+5hzKxx8b93Q6I=
Subject key identifier: CF:39:20:1B:F3:89:0F:D1:0E:C2:49:AA:A4:56:97:AE:D8:43:7B:71
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 019D2AA928B0943DC1E33AD485E0759B6269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 1254
Signing time: Thu 26 Mar 2026 15:00:22 +0000
Manifest this update: Thu 26 Mar 2026 15:00:22 +0000
Manifest next update: Fri 27 Mar 2026 15:00:22 +0000
Files and hashes: 1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: I9aMU0w91EQPQiPm8/r/qLvy4xPwN/MDHBdmgApzC00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:28:b0:94:3d:c1:e3:3a:d4:85:e0:75:9b:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Mar 26 15:00:22 2026 GMT
Not After : Mar 27 15:00:22 2026 GMT
Subject: CN=cf39201bf3890fd10ec249aaa45697aed8437b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:62:6e:8a:c3:55:86:eb:08:d5:22:0f:a3:
3e:d9:89:a4:8a:fb:4f:75:a2:5e:d8:f4:7b:d8:ce:
4d:83:51:a4:0c:f4:83:fd:96:be:4f:1e:aa:78:47:
39:4a:5c:70:37:bd:c8:82:bc:b8:22:ec:1d:61:56:
28:c2:7b:91:7f:e1:1a:22:54:49:17:02:3a:76:d9:
d5:00:a9:61:db:e7:98:be:ed:3d:b5:e0:f0:15:c4:
ed:b8:e4:8b:08:45:1b:09:c1:c8:d3:18:a9:e9:49:
aa:fc:d2:cb:01:8e:0a:1d:97:f6:a8:36:c2:af:29:
58:a2:1c:54:62:81:58:ac:e6:66:4d:d7:1d:0b:bd:
2a:01:ec:3c:21:5a:75:59:c8:82:8c:b4:18:83:cb:
90:00:d9:4c:c3:6e:af:84:bb:54:46:11:69:da:e9:
3b:63:cd:26:86:28:e1:81:c8:95:0b:1d:dc:6d:11:
88:59:e3:69:94:69:aa:d3:29:e4:3b:16:92:6b:45:
5f:5d:c6:ca:2f:d5:70:7f:17:e1:8a:c6:16:91:a7:
31:65:10:06:32:5b:d1:c0:f5:b4:c5:c1:09:e7:03:
e0:0b:2f:34:d9:49:db:7f:5b:07:2b:74:a8:c5:83:
0e:1e:4e:27:b4:eb:cb:6e:8e:87:01:a0:ca:57:eb:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:20:1B:F3:89:0F:D1:0E:C2:49:AA:A4:56:97:AE:D8:43:7B:71
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:82:5c:b6:20:4b:7e:24:eb:95:80:0c:85:33:45:c9:14:66:
ff:6f:c5:8b:bd:a5:79:84:3d:b9:bc:ce:e7:2a:bc:fa:e9:79:
cc:ec:1c:25:07:dd:9f:57:42:b5:7d:43:64:33:82:fa:f3:d0:
dd:ef:05:90:97:de:6d:72:f4:ba:f2:39:39:1d:87:34:91:a2:
ea:a5:77:03:ae:12:9f:5c:03:f8:e9:f9:ad:93:3e:00:81:51:
ad:0f:17:29:14:8b:c2:c9:be:f8:6f:ad:a4:52:e0:a7:9e:37:
52:31:b9:ee:c4:9a:bd:18:69:e4:e0:16:95:a9:22:b0:cb:23:
a9:09:3a:21:ed:ca:f4:7e:17:b5:5b:00:21:7f:a1:6b:9b:b7:
44:c0:5f:18:a2:26:7f:d5:3e:29:26:72:ea:72:b2:ab:f3:a4:
fe:1f:37:63:6c:c4:0c:56:e6:b8:49:d0:6b:00:15:16:2f:6e:
87:27:51:1c:ea:a9:10:b4:23:b2:ea:72:ed:dd:1f:3a:ac:02:
2b:c9:21:d4:28:f6:d3:c0:1d:e2:ca:e3:0d:ec:3d:5d:24:e5:
44:fd:df:8f:c8:95:54:fd:4e:4a:26:45:ab:da:c5:62:a4:8e:
16:c4:6c:b9:71:87:43:45:95:41:d4:0f:73:03:33:1e:7b:d1:
c7:e1:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:25 2026 by rpki-client