Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: xC+0NMLljRDeviH+YSvvYBAuNHURHNxDKCeD3koq3Wk=
Subject key identifier: 93:A5:54:10:C7:D5:0F:44:B2:32:89:B4:4C:AC:8F:BA:1A:64:B7:49
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019D26288EBCB7ABC29A827818AB29CCA4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 110A
Signing time: Wed 25 Mar 2026 18:01:25 +0000
Manifest this update: Wed 25 Mar 2026 18:01:25 +0000
Manifest next update: Thu 26 Mar 2026 18:01:25 +0000
Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: qFebeiIb2sKPX5IBLqzAfOZDEdgMc10uGBfzT3IHuvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8e:bc:b7:ab:c2:9a:82:78:18:ab:29:cc:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Mar 25 18:01:25 2026 GMT
Not After : Mar 26 18:01:25 2026 GMT
Subject: CN=93a55410c7d50f44b23289b44cac8fba1a64b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:ff:ad:b8:06:41:e5:0e:5e:45:11:4e:e0:
3b:1a:41:1d:26:48:2e:79:6a:36:18:2d:b6:a4:5b:
11:f3:4c:f7:37:18:58:4b:35:f0:39:d2:78:32:2e:
85:b1:99:50:6e:6a:7e:1b:07:c7:61:86:be:98:b6:
28:50:fe:69:e2:c9:21:b6:bc:c3:e0:71:ef:47:25:
8a:f8:5d:88:ba:f1:ae:7c:74:38:36:73:25:a8:e2:
bf:85:ff:4f:99:24:a6:bd:83:61:b8:52:94:1d:f8:
81:f0:a6:e0:e3:b4:e1:6e:a0:f8:78:39:62:15:f3:
09:b0:fe:28:ce:30:a9:d6:19:e7:39:5d:a1:8c:63:
ec:a6:f8:f2:3e:fc:73:e6:95:31:fb:d9:fe:4d:cb:
4c:f2:17:e6:3e:76:a9:12:b2:22:b1:a9:5c:1a:61:
e3:6a:b6:ad:ad:2d:f8:63:cb:e9:0d:83:6e:56:a4:
24:08:71:e2:f1:f9:3b:83:08:11:a9:5d:16:c8:d7:
86:4d:0f:95:5f:f7:db:bd:22:38:9c:20:ba:75:69:
4a:b9:f2:f2:f1:b3:2f:1e:c3:fc:61:4e:61:a5:41:
51:7d:dd:8a:20:70:d2:e2:77:7a:8b:28:db:b4:3b:
0b:5a:4b:60:e7:09:0c:25:fe:8c:46:ad:4c:56:0a:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:54:10:C7:D5:0F:44:B2:32:89:B4:4C:AC:8F:BA:1A:64:B7:49
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:c0:32:97:6c:9c:06:1f:44:27:15:73:2a:49:e8:8b:5a:
eb:4d:b2:27:70:ef:9b:91:be:4e:81:3e:75:0a:b2:fb:01:1d:
7e:e5:74:33:21:eb:3b:50:62:59:2d:31:34:1f:e3:24:1b:9d:
ea:be:36:0d:ad:4e:20:48:b3:4c:65:b2:f0:8b:5f:da:3b:49:
d2:93:6d:d7:a9:9e:5b:66:d7:a1:41:c5:2b:97:81:a2:83:ff:
fc:d5:30:73:f0:fc:a4:d5:1f:6e:be:61:a2:4c:4e:be:b2:90:
bd:aa:64:77:55:6a:3e:f1:81:25:20:ce:8b:c9:ae:93:fd:81:
ae:d9:5d:98:93:a3:51:5d:65:41:ac:95:77:db:52:1f:c7:6c:
fd:dd:21:11:cf:9c:9a:99:08:f3:a6:98:7e:7f:e1:cd:33:b8:
d6:2a:f5:73:1e:19:41:73:f6:32:47:10:04:81:e6:41:d5:b0:
e7:45:29:be:72:34:8d:27:d0:2a:70:7b:ac:b8:80:52:aa:1a:
93:a0:74:07:62:83:74:c4:de:d1:2d:fb:42:b9:6f:3e:1a:0c:
61:c7:e1:3b:bd:a8:ab:c2:3e:ea:07:a5:5d:3f:0f:cb:bc:b9:
76:b6:1e:79:ea:c5:45:db:99:77:e1:a2:da:0e:4b:67:30:eb:
76:23:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:01 2026 by rpki-client