Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: kZdXmMgXFCi+pBH06BuU/QQipbnbgcO1ywEnRCnD5n4=
Subject key identifier: 8D:28:07:AC:DF:3E:EE:2C:E6:40:40:C3:A3:B9:E1:0A:EF:9D:91:89
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019F91360D703DEF32179E959C6E0096BBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0E63
Signing time: Thu 23 Jul 2026 23:01:06 +0000
Manifest this update: Thu 23 Jul 2026 23:01:06 +0000
Manifest next update: Fri 24 Jul 2026 23:01:06 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: jjmQyEdmY74+QDvNMIz5iRN1/Ce0HHiJqWdmBlwOcJs=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:0d:70:3d:ef:32:17:9e:95:9c:6e:00:96:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jul 23 23:01:06 2026 GMT
Not After : Jul 24 23:01:06 2026 GMT
Subject: CN=8d2807acdf3eee2ce64040c3a3b9e10aef9d9189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:03:32:87:9e:0b:e7:4e:c6:11:f8:d1:a5:
e1:b4:4b:aa:12:02:15:72:2f:d9:ef:66:9d:66:c3:
48:1b:f7:eb:60:78:ef:de:65:c6:48:34:b4:c5:80:
ec:69:ec:7d:25:46:f1:3e:36:95:d1:c4:52:17:fb:
d5:b4:14:12:ed:5c:9e:08:38:d6:e1:21:8f:3f:53:
10:a3:40:b4:eb:3e:2c:0e:63:23:0c:e7:2b:fa:b9:
45:56:e4:da:dc:4f:78:46:6e:1d:f0:c2:83:1c:a5:
29:79:77:db:3c:b4:1c:da:0c:7f:e6:2a:d5:70:e9:
cd:8c:a3:71:ef:94:d2:6e:33:f6:2a:5c:6b:94:6f:
df:15:c6:9d:03:25:90:ea:e4:bc:99:4e:38:3c:5a:
8b:02:29:54:b1:94:d9:7f:ec:b4:88:81:97:90:c5:
a9:ac:a9:fb:f8:51:f5:8c:d4:d0:cc:90:c2:65:63:
79:ea:24:aa:4a:83:c8:f0:39:e2:3e:83:71:6a:7d:
c0:d8:ba:af:21:e9:04:81:88:32:af:a2:24:4b:c0:
60:f8:a7:a4:86:57:78:5d:7c:17:f7:38:ec:d3:f6:
b0:d0:1b:a1:af:1e:1e:4d:72:ce:87:07:43:4e:be:
43:c9:65:64:b7:24:d9:79:52:0c:cf:f2:c4:ff:1c:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:07:AC:DF:3E:EE:2C:E6:40:40:C3:A3:B9:E1:0A:EF:9D:91:89
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:5c:84:1f:66:59:35:c5:f0:36:7e:0e:aa:95:36:30:c9:
c5:6c:89:b6:18:d0:ed:c9:c5:01:1e:90:81:19:f4:9f:a3:fb:
fe:38:4c:9b:60:3a:15:a4:5e:6f:18:47:08:ee:de:75:34:b2:
ab:c3:61:fa:99:ba:ca:e3:ae:17:ff:f7:b9:dc:99:4a:95:69:
4b:f4:1d:fd:92:e3:d8:7a:aa:0a:40:ab:05:4b:6d:37:17:a5:
b8:65:20:6b:2b:24:66:fd:ee:8a:b5:3c:92:f4:3e:df:08:01:
5d:31:eb:ee:f2:10:c4:92:25:88:d4:cd:f0:66:5c:d5:b0:55:
34:10:85:11:70:75:bc:e6:52:3b:66:d1:cb:2a:bc:73:1f:fd:
c7:da:27:4c:e2:ce:37:67:be:97:f3:c4:a8:fe:bc:ba:05:00:
45:06:06:1d:f7:18:24:29:f1:26:11:9d:d5:59:c0:9c:a4:2e:
1e:6a:bd:89:f5:d3:25:48:13:96:2a:04:fb:84:66:0a:67:d6:
46:b5:5b:a0:ba:c4:af:e4:18:cd:ba:b2:e4:3c:6c:c6:e9:73:
ce:b2:55:84:fb:a5:17:53:c1:50:cc:1f:e6:00:26:d0:73:77:
76:62:cd:55:1c:03:ea:c7:a2:cc:2e:2e:36:7c:09:b3:f4:50:
0f:98:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:14 2026 by rpki-client