Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: YUl0PbN8RvHaX3dfeFqnzcNgCGvkUkm2lM5ZRyLKHQA=
Subject key identifier: 74:74:CD:91:50:16:25:82:0B:56:45:74:B2:64:BC:39:44:50:2F:10
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 019D284D9DCFAF81431C9FD5856FEE2ED9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: wIT2BKhubj3zPQttnJV8TWAapRrdM6TZ7Wwt+kPSmDs=)
2: x89rzjrs6Nt2XEc3vV8pZLa4I9c.roa (hash: ye+jK9rOukJBboMMHLahiU263X6F4SzisjCcXlAZk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9d:cf:af:81:43:1c:9f:d5:85:6f:ee:2e:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=7474cd91501625820b564574b264bc3944502f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:a9:6a:4a:37:63:e4:78:17:df:de:a9:94:
92:88:1b:5d:f3:48:53:d7:5f:c1:1e:12:0f:f5:f7:
71:69:a3:76:8a:bb:8d:8c:aa:7a:3d:b4:56:39:42:
92:71:54:55:bf:1a:e1:91:21:aa:a2:83:25:76:1a:
e1:a4:1f:67:cc:3a:64:b0:c1:ab:7d:3c:f6:75:27:
3d:83:32:81:a1:ed:0f:0a:2d:0b:d2:52:59:e5:11:
ba:21:4d:3c:d0:49:15:97:1e:64:a5:f9:64:ef:88:
62:54:4a:9b:2e:e3:ad:6f:11:41:c4:9f:51:aa:5f:
fc:b1:7e:bb:f6:fb:8e:74:32:35:09:c5:92:86:87:
d1:3e:49:e6:20:14:b4:30:90:c7:74:4d:22:7a:25:
7b:ad:32:8d:6b:a0:ff:27:d2:36:d1:96:d5:dc:08:
cf:a3:ed:eb:27:e2:56:e1:ea:1f:a3:dc:35:98:c5:
5a:2d:27:5c:0b:24:71:d6:8f:13:41:de:cd:34:06:
7b:d1:2e:1c:57:75:b6:c1:64:18:99:f6:3e:32:8b:
03:d4:8b:69:28:4c:e9:54:d8:c2:81:db:4e:e8:29:
51:ab:5b:5e:1f:a1:f0:31:ef:6c:91:2b:3f:b7:0a:
a7:93:89:93:c9:0f:aa:ae:67:f9:67:21:7c:f3:c5:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:CD:91:50:16:25:82:0B:56:45:74:B2:64:BC:39:44:50:2F:10
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:05:93:6b:de:c4:d0:8e:9c:dc:db:3f:61:ab:b9:d2:12:06:
f2:4f:54:b9:8a:7c:f8:4c:5b:df:03:19:05:9f:c8:df:c7:b8:
a5:d0:ac:6d:1c:a8:27:52:30:96:10:3e:15:6e:92:bb:8d:89:
e0:c6:2f:92:a0:d0:8c:44:11:4f:a8:21:af:f9:02:85:7d:9c:
25:5b:56:85:41:70:52:35:df:89:c6:49:54:87:fc:b8:3b:cb:
df:54:e4:91:e7:ff:31:48:70:a5:de:2b:5d:aa:9a:5d:c5:16:
60:7c:94:f9:7c:c7:5f:2a:ae:9e:24:9b:ea:5d:91:3a:a4:4f:
78:0b:8b:fe:bf:f3:c7:ae:be:72:ba:04:c3:98:ff:82:46:66:
e1:82:ed:34:95:83:17:4d:26:53:d9:d5:ad:0e:75:6c:fc:9f:
dc:93:d2:f8:73:ac:46:39:de:ec:68:4d:dd:18:3c:80:30:da:
73:5e:a2:75:4f:28:80:81:a7:b5:6f:6c:8c:a5:bb:b1:41:3f:
23:7d:d8:f7:18:8c:83:24:ec:60:66:6a:41:ad:e4:47:02:6e:
d6:68:89:26:7e:93:64:92:cf:b1:7f:4f:de:62:73:12:30:04:
cf:6a:67:c9:1b:8e:aa:be:9e:64:d4:40:11:6d:e6:1a:eb:bd:
f5:97:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:10 2026 by rpki-client