Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: cH1l/H8ml+MyK0RpLvlxE+S7JF7Q9/HzxaLq+X6lLpc=
Subject key identifier: D5:E0:74:D7:83:C0:40:86:48:46:09:E5:5C:36:CC:28:17:4D:BD:30
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019D25BA4C91C77F6E4AC16FA7A81D92B527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0396
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: smQ3GbSZqXH7V1kktfCXZqmUOTWepmwkRQuZ/6Lh+24=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4c:91:c7:7f:6e:4a:c1:6f:a7:a8:1d:92:b5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=d5e074d783c04086484609e55c36cc28174dbd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:14:02:2e:4d:87:39:b3:d1:d2:67:e0:9d:
14:e5:58:61:56:bc:c2:14:30:60:9d:85:6f:78:97:
52:e0:4a:96:60:86:0c:e7:ef:9e:38:94:40:c8:cf:
5d:61:05:1a:da:59:00:90:ec:f2:4c:df:0f:86:8f:
89:f8:94:13:66:0b:ea:f9:6b:76:02:b2:b6:97:3a:
aa:ce:1d:6a:1d:8b:95:fe:4a:fc:b0:50:84:bd:e6:
95:a5:0f:be:bb:bd:8c:42:7e:29:1e:e7:29:f4:d0:
ea:6d:7f:6a:4e:e0:c1:12:66:c8:2a:2c:8b:4c:ae:
c3:dc:05:00:91:f0:dd:f4:49:e7:f6:e2:5d:e0:80:
4d:a1:1d:72:8b:7c:91:00:0d:2d:6f:b3:71:38:20:
cc:75:d7:8b:5d:4a:5e:21:5b:5a:ac:42:13:eb:8b:
12:fe:5b:da:e6:2c:30:26:18:01:31:e1:4d:42:d3:
97:bf:fd:41:29:9d:9b:34:46:c3:18:b5:17:1c:54:
38:f9:8b:ac:b1:76:3a:8f:0f:b8:67:6e:9a:0f:35:
6d:73:23:74:c2:14:34:0e:26:2d:d1:d3:13:12:40:
83:cc:87:19:73:d2:46:47:07:fa:0d:81:09:ff:2a:
c4:8e:b9:ce:dd:1c:db:32:60:25:4a:78:ce:7e:00:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:74:D7:83:C0:40:86:48:46:09:E5:5C:36:CC:28:17:4D:BD:30
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:44:21:7a:8c:cb:9e:f4:0b:fa:e7:d8:a8:9a:5b:8c:92:
43:61:55:0f:03:dd:05:fa:9b:6c:be:ad:b4:dc:be:db:0e:90:
68:06:f9:1c:d0:c6:25:ea:36:ee:20:2c:8c:94:25:00:49:7b:
43:a5:36:c5:18:65:7b:7e:4f:e3:d4:9b:82:af:d9:2d:8d:fd:
19:69:4a:37:7c:cc:6e:f3:38:fb:4d:1f:e4:12:7b:86:cc:b4:
49:2b:d2:e3:ee:17:9b:71:ff:91:2f:5d:8e:bf:ed:f9:29:c8:
c2:c7:12:46:5c:7c:f5:19:0a:66:3b:64:79:e9:ae:d6:20:ce:
bd:26:17:02:f6:b8:1c:00:c2:59:2c:db:a0:a6:08:6f:f5:55:
20:63:cb:34:1b:1f:d5:2d:af:36:e2:9c:6c:4d:b4:e9:90:ec:
6c:7b:b3:93:38:fc:ac:bd:eb:e6:c0:fd:bf:04:ec:b7:b9:7f:
4d:7f:e5:d3:ef:13:1d:1c:d9:05:d6:d4:70:88:d7:fb:61:6e:
a6:14:f2:ed:48:3e:2f:98:ca:6f:18:35:6c:7a:dc:5e:61:e6:
46:a3:8e:3f:45:bb:cc:b8:25:15:9c:28:6d:96:23:1c:b2:38:
35:5a:ef:36:64:9d:5b:a2:06:53:79:99:d7:74:5f:a9:85:84:
c9:ee:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:45 2026 by rpki-client