Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: K/OgHo2GbSeaAwvPJAxZC/N2YQVMjKEnYsr5iSA9jPI=
Subject key identifier: E8:39:CD:9E:FF:EF:A8:95:13:48:03:88:13:42:25:03:42:12:45:A7
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01A0E13D0BB24ADC2C9E3FAC311310EA3467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0F11
Signing time: Sun 27 Sep 2026 05:01:09 +0000
Manifest this update: Sun 27 Sep 2026 05:01:09 +0000
Manifest next update: Mon 28 Sep 2026 05:01:09 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: 91KpRJ1EtKZDl3EEj8rshEHMXKkgbkUFd9jM/71sARE=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:0b:b2:4a:dc:2c:9e:3f:ac:31:13:10:ea:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Sep 27 05:01:09 2026 GMT
Not After : Sep 28 05:01:09 2026 GMT
Subject: CN=e839cd9effefa8951348038813422503421245a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:62:4b:57:7b:64:6c:2b:ad:c8:2e:b3:90:
60:cc:62:29:d3:e3:01:02:99:db:bb:9e:66:2f:93:
b8:9f:d2:6c:c4:ec:8d:ca:3d:03:cb:33:c9:50:98:
c6:57:5b:64:73:20:82:9c:5e:3d:0d:fa:61:b7:91:
31:ce:68:75:a5:c9:fd:e0:c9:c0:47:d1:8a:9c:43:
5e:ef:3e:3e:08:65:c4:36:1d:ad:7e:20:ff:57:ae:
7e:b0:7b:43:b3:f4:fd:1e:c2:3a:6c:2a:a7:45:10:
8e:f4:c8:91:b7:68:2a:73:2d:64:1a:ba:15:7c:00:
4b:9b:7f:67:0c:84:0d:35:50:32:79:42:5b:47:e7:
2b:4a:38:51:7b:43:de:ee:b6:4f:72:b0:f2:09:cd:
5b:10:17:53:45:26:d7:a5:1f:11:49:0c:70:6c:94:
70:f2:28:e0:e4:4f:6e:7b:19:03:18:29:79:43:f5:
b1:23:ad:5d:8f:11:25:3c:24:c4:d2:31:20:00:d9:
3a:37:ba:cd:25:90:43:18:df:c5:54:c3:12:09:88:
cf:ff:45:1d:13:f9:5f:20:86:f5:cf:6d:6c:d8:bf:
cb:c6:c7:dc:56:33:f3:fa:72:f0:fd:d6:30:83:f0:
7c:49:9d:8f:f5:e2:cf:64:c6:f2:78:b6:9a:d4:24:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:CD:9E:FF:EF:A8:95:13:48:03:88:13:42:25:03:42:12:45:A7
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:88:3c:15:a7:2c:59:5b:c5:07:f2:0a:6f:94:5b:2e:0b:
ad:9d:f5:8d:78:50:8a:57:92:19:29:23:21:dd:32:e2:6f:91:
56:b5:95:a4:8c:43:46:56:52:0f:44:e6:12:bb:c7:9a:1b:05:
df:ed:52:9c:f8:1b:f9:db:e3:46:13:9e:5d:8b:db:b6:e6:15:
ea:d2:be:09:3b:22:52:a0:c7:f4:b9:3c:5d:f5:8e:d0:39:81:
b4:d7:5f:6c:ad:05:f2:87:b7:84:f1:be:bd:0f:92:78:2c:dd:
09:7d:24:b4:0d:4a:26:56:9f:ae:b2:48:68:87:b0:d8:61:0c:
9f:6d:a4:d7:32:f3:b2:e6:ea:be:29:a3:cc:2e:3d:34:0f:31:
91:db:58:7c:a3:a9:94:ff:8f:10:ff:9e:dd:b0:8e:41:6a:61:
10:89:8c:b2:86:19:72:ea:8e:c0:3d:4f:62:da:c9:ba:be:5c:
53:5a:37:eb:e1:65:c1:74:eb:80:2f:41:45:bd:de:ec:d3:4f:
a6:f4:3c:3f:43:ad:c0:12:4c:56:8f:3c:f5:99:48:af:ad:4b:
36:cb:f7:6f:cc:44:2a:e9:fe:ea:01:21:b1:ac:9f:15:b6:ba:
c6:22:e1:64:71:0e:bb:97:e9:d4:63:3c:b8:83:97:2c:ad:df:
af:3b:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:57 2026 by rpki-client