Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: EYJ0hxZIZrLeiEQtT3Vox7I7rpji9qVkdxelan3hjUI=
Subject key identifier: 54:C4:17:E4:72:55:5A:F6:DB:76:2F:A4:58:62:4C:46:73:F4:CA:84
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019E1E6C5EBDDE4CECFF74A31F2C1E185159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0DA3
Signing time: Tue 12 May 2026 23:01:19 +0000
Manifest this update: Tue 12 May 2026 23:01:19 +0000
Manifest next update: Wed 13 May 2026 23:01:19 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: hllU3F3pqGG6QZbLs0NEBL3eBgnO3LN8fYyRlbQ1ePc=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:5e:bd:de:4c:ec:ff:74:a3:1f:2c:1e:18:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: May 12 23:01:19 2026 GMT
Not After : May 13 23:01:19 2026 GMT
Subject: CN=54c417e472555af6db762fa458624c4673f4ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:e1:a0:90:45:bf:3f:9d:f6:d1:4a:44:18:
f0:88:eb:52:23:91:87:8e:24:c9:55:9c:72:ec:d3:
c1:35:47:75:e6:27:dd:04:0e:e4:13:62:d0:be:17:
3b:f1:82:3d:7d:63:16:c3:03:4b:8c:9d:3c:0e:09:
87:bb:d3:9e:1b:52:e4:f2:1d:79:03:e0:74:cb:24:
72:3f:1b:ff:5a:bd:cb:ad:c2:3e:12:35:4b:79:29:
90:ec:75:14:b4:0a:5f:03:e3:b1:ea:62:9d:07:79:
6a:51:d8:1e:d4:66:1a:74:99:e0:2c:f8:8e:b7:bb:
c3:82:26:19:0f:39:b0:55:70:31:5d:14:fd:e2:49:
5c:5f:df:d6:b8:43:ca:67:95:88:20:b1:ad:10:30:
ff:66:a6:66:03:54:ae:c6:14:39:0a:4a:25:33:a2:
a4:37:13:f2:77:4d:b3:f3:2f:c6:40:87:69:1f:36:
fc:33:eb:98:cf:20:41:ef:2a:71:03:ef:b5:a0:37:
60:1a:26:38:b8:c2:57:e0:8a:2e:8e:3c:fe:39:89:
fa:21:68:25:cd:b0:5a:a8:0b:8e:32:18:86:27:03:
3b:d1:25:2c:5d:a2:85:ac:b9:c6:b7:a7:37:d3:f3:
9c:6e:ad:61:f6:6d:96:77:34:4a:c1:18:9d:eb:64:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:17:E4:72:55:5A:F6:DB:76:2F:A4:58:62:4C:46:73:F4:CA:84
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:ab:bf:69:68:6e:89:5f:85:b4:0c:a6:d9:3a:dc:69:d2:
8e:bb:cc:72:5f:d1:8b:eb:bc:5c:98:e6:16:dd:73:d5:94:81:
19:06:cb:21:8a:46:1d:54:4f:0f:ae:98:7e:f5:bb:cf:32:4c:
1e:c5:5b:0d:64:b2:71:e0:33:25:6f:3b:b0:8b:cb:05:d2:e6:
70:42:78:69:93:63:70:f2:67:71:5e:52:18:f1:c2:8a:19:7a:
17:7b:98:5a:25:62:2f:68:b0:c7:6e:a0:a1:b4:23:d4:07:de:
f8:c3:8f:04:99:df:83:11:04:99:03:ff:59:e5:f9:89:21:cd:
33:74:1e:3e:ad:d4:16:28:91:11:8c:dc:70:dd:d1:03:48:47:
78:21:bd:54:9f:0a:6d:c3:0b:e9:ac:71:e1:3d:96:cd:b8:22:
ce:fb:af:d1:ff:72:92:fd:6a:96:26:21:29:54:ad:40:cd:fe:
37:8b:2b:f9:86:81:09:74:5f:32:13:fb:e3:86:40:f1:40:c6:
9f:66:42:1c:ea:f0:dc:1d:9f:53:64:13:89:a6:46:4e:6e:ad:
2a:7b:ff:df:9b:04:bd:a2:0d:23:af:68:4b:70:4a:0f:81:a4:
12:f8:36:7f:34:c1:f9:be:1e:80:aa:b8:f1:98:9f:00:2b:c7:
92:27:9b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebF693kzs/3SjHyweGFFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3
ZjM3MzIwHhcNMjYwNTEyMjMwMTE5WhcNMjYwNTEzMjMwMTE5WjAzMTEwLwYDVQQD
Eyg1NGM0MTdlNDcyNTU1YWY2ZGI3NjJmYTQ1ODYyNGM0NjczZjRjYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VfhoJBFvz+d9tFKRBjwiOtSI5GH
jiTJVZxy7NPBNUd15ifdBA7kE2LQvhc78YI9fWMWwwNLjJ08DgmHu9OeG1Lk8h15
A+B0yyRyPxv/Wr3LrcI+EjVLeSmQ7HUUtApfA+Ox6mKdB3lqUdge1GYadJngLPiO
t7vDgiYZDzmwVXAxXRT94klcX9/WuEPKZ5WIILGtEDD/ZqZmA1SuxhQ5CkolM6Kk
NxPyd02z8y/GQIdpHzb8M+uYzyBB7ypxA++1oDdgGiY4uMJX4Ioujjz+OYn6IWgl
zbBaqAuOMhiGJwM70SUsXaKFrLnGt6c30/Ocbq1h9m2WdzRKwRid62QC4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTEF+RyVVr223YvpFhiTEZz9MqEMB8GA1UdIwQY
MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt
YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh
LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhGrv2lo
bolfhbQMptk63GnSjrvMcl/Ri+u8XJjmFt1z1ZSBGQbLIYpGHVRPD66YfvW7zzJM
HsVbDWSyceAzJW87sIvLBdLmcEJ4aZNjcPJncV5SGPHCihl6F3uYWiViL2iwx26g
obQj1Afe+MOPBJnfgxEEmQP/WeX5iSHNM3QePq3UFiiREYzccN3RA0hHeCG9VJ8K
bcML6axx4T2Wzbgizvuv0f9ykv1qliYhKVStQM3+N4sr+YaBCXRfMhP744ZA8UDG
n2ZCHOrw3B2fU2QTiaZGTm6tKnv/35sEvaINI69oS3BKD4GkEvg2fzTB+b4egKq4
8ZifACvHkiebxw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:16 2026 by rpki-client