
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File: T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier: o6h68gfxrnq93Q6GxtUVMHyH/50dlR+5tm3IhXI0jkE=
Subject key identifier: AE:BC:12:49:19:C8:0F:3C:0F:0A:92:35:49:5F:7A:8E:64:46:98:3A
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 019D26CCA8C21A089A28A5FEFB76B3D60765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 21:00:39 +0000
Manifest this update: Wed 25 Mar 2026 21:00:39 +0000
Manifest next update: Thu 26 Mar 2026 21:00:39 +0000
Files and hashes: 1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: +kNM9IhahaXRVUzgv2dAM4h0pY1BU9L8PkSiDdpGyQg=)
4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a8:c2:1a:08:9a:28:a5:fe:fb:76:b3:d6:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Mar 25 21:00:39 2026 GMT
Not After : Mar 26 21:00:39 2026 GMT
Subject: CN=aebc124919c80f3c0f0a9235495f7a8e6446983a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:23:ad:ea:a8:36:2f:17:2a:02:0e:2c:86:
e8:92:cf:65:b7:35:99:c5:c3:e6:14:5f:db:5d:b2:
e2:4d:51:7b:50:43:60:d8:c0:63:1e:43:a6:79:7e:
60:9b:d1:ee:b5:68:a9:aa:bf:09:82:8e:67:06:ed:
27:c1:8c:b0:b7:0a:06:79:a1:15:01:b8:08:7c:8b:
42:c0:3f:74:fb:f6:83:d1:23:0a:44:86:88:3c:c8:
2c:64:87:fb:e2:0c:67:81:12:63:5b:ea:f1:b6:b8:
26:ec:76:bf:a7:70:b3:36:22:99:ac:10:f2:c5:b2:
87:ab:73:bd:80:ed:24:7d:81:66:cb:9d:67:ff:f5:
0d:d4:31:2a:96:3b:cf:32:8d:47:15:17:96:70:ec:
1e:da:01:a9:84:b1:a4:7f:8a:ed:28:fb:56:d1:4a:
96:d0:b0:6f:87:e5:9e:55:64:b4:9f:f6:13:4c:19:
1e:4d:3d:39:ae:04:f2:11:75:3c:f7:29:78:2f:17:
cb:f5:83:99:7f:dc:c2:66:a0:34:7c:eb:65:b1:4a:
84:45:38:93:04:1b:56:c7:f3:3b:96:9a:28:78:ae:
77:54:e5:b8:ff:c6:e5:63:20:db:16:2a:dd:38:fc:
81:fb:9b:d8:1d:8c:d3:ee:ad:88:78:40:e1:2e:39:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:12:49:19:C8:0F:3C:0F:0A:92:35:49:5F:7A:8E:64:46:98:3A
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:ba:b7:bd:bd:4c:10:2a:6e:69:25:b4:0d:37:b3:c7:42:
76:86:92:77:5c:f6:48:0f:02:19:05:9e:f0:e6:c0:1e:ae:98:
1a:9a:26:39:b3:cd:70:3d:fd:87:e4:db:42:ab:d7:6a:c2:a2:
7a:00:ee:ef:24:be:4e:c5:4c:73:7e:bf:0c:ef:94:bd:84:e4:
c7:45:00:ad:17:bd:0f:69:45:cd:37:59:4c:10:43:6a:18:14:
db:5a:66:34:a4:d8:67:12:95:bf:b9:43:9c:36:25:e6:67:58:
e3:d3:a1:a8:4f:c0:31:9a:f4:4d:fb:3c:9e:4f:0a:1a:58:cd:
7c:ac:c4:a1:64:b5:d5:bb:22:34:64:b8:95:57:b1:26:1c:38:
cf:48:8d:be:8d:61:b5:8a:45:18:90:c7:55:01:c2:cb:8d:d1:
aa:91:68:08:ab:9e:4a:35:3f:36:f8:cb:25:cc:19:bc:7d:9a:
41:7b:b9:ba:fc:da:84:40:b1:83:48:69:46:b6:74:4f:f0:9d:
52:0d:bf:a2:3c:c8:89:bc:09:71:35:4b:7b:35:a6:34:04:33:
5b:90:9e:a9:cb:c6:18:62:45:2b:4a:ef:68:f9:49:9a:3b:6a:
6a:d3:bd:d1:a2:3b:72:81:d1:e3:68:e1:d2:03:42:4d:49:ca:
9b:47:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:31 2026 by rpki-client