Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: V5PxInyzzVOcgMdgFHTj+CxKb1/boKpRsoQqbfXjOH8=
Subject key identifier: 2F:8B:CF:3B:9F:81:05:9A:7C:FF:C6:38:54:C1:EE:DC:CF:D9:97:7A
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019D284D51D71A178670661A74D46671A768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: G+yMag1vYspeFMlRV18dVHytQLwjh00cMrpFmb1ZYVo=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:51:d7:1a:17:86:70:66:1a:74:d4:66:71:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=2f8bcf3b9f81059a7cffc63854c1eedccfd9977a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:2c:4e:d0:f7:54:b2:4f:b3:f3:9a:72:8b:
c7:e2:58:47:e7:9d:43:f2:6d:7c:93:35:01:6e:2d:
1b:64:9d:d2:9d:bc:14:cb:d9:02:ea:11:ca:d9:e0:
63:dc:9f:32:d4:4a:e5:40:99:57:e8:39:b0:d1:45:
87:cd:9b:19:c8:f1:55:ad:c5:00:5b:67:0d:f7:c7:
25:ff:8c:fd:1e:66:c8:24:a4:14:31:7f:f8:ae:67:
49:da:cd:44:53:ca:65:dc:00:ea:42:81:90:09:aa:
e4:6e:79:c1:4d:05:35:8c:53:a6:fb:9c:ce:22:82:
4a:c2:0a:49:bb:f6:da:35:57:9b:ef:d5:94:28:16:
7a:e1:ca:1a:ff:18:dc:c2:5f:eb:70:ce:cc:9f:6c:
17:85:0b:5e:9e:3c:59:9a:1d:59:f8:3d:f7:35:c6:
cf:94:d0:e5:b4:e7:4c:2e:12:04:77:af:fb:d6:42:
42:35:7f:67:52:b6:3b:8d:98:be:5f:19:74:00:c4:
ff:36:05:bb:d5:32:32:5d:3b:8f:df:da:d8:13:76:
c6:0e:1f:37:31:9f:28:dc:56:92:77:38:0a:64:8d:
fa:14:82:70:99:89:18:dd:a8:14:1c:fe:dd:22:eb:
53:c8:55:1b:d8:70:03:17:55:b6:65:59:7e:85:72:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:CF:3B:9F:81:05:9A:7C:FF:C6:38:54:C1:EE:DC:CF:D9:97:7A
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:06:12:54:a3:91:41:4c:1a:64:7e:52:65:42:f8:3b:ce:
c7:ed:54:6d:3d:1f:8f:90:eb:8c:fc:61:14:72:65:45:b2:4d:
78:10:1b:d6:eb:73:36:2f:74:d1:a7:96:ce:f9:cc:2e:7d:ac:
4b:04:fb:62:07:7f:11:b6:13:85:5e:32:90:66:db:41:0a:f0:
32:59:2a:ce:ab:f7:66:90:a6:df:1b:9c:24:f4:9b:6f:92:30:
d8:96:18:94:0f:43:05:ca:2b:e3:33:62:10:9d:2d:4b:2d:02:
14:b3:81:ba:b6:8a:4c:58:01:b4:3f:0a:c9:94:87:ac:c9:78:
02:40:6c:37:ec:39:b0:a9:95:e2:da:b4:a0:6f:8e:43:cc:79:
f8:9d:71:2d:83:36:54:b6:05:32:98:28:ff:cc:e7:f0:c4:9b:
58:c8:b0:d7:50:ec:3a:56:62:5e:4d:4e:8d:3e:5d:b1:a2:46:
4a:6a:ca:77:5f:b4:cb:06:1d:91:45:c8:95:06:ed:c8:c4:84:
e3:42:63:16:f1:94:13:04:b9:12:72:2c:ff:45:b0:46:4d:f5:
61:1f:08:66:42:07:d8:58:2e:0e:9f:3a:45:1e:d0:6c:07:bf:
76:11:de:03:79:a9:12:50:cd:e8:ed:ab:f3:01:8b:7a:3f:58:
c3:8e:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:10 2026 by rpki-client