Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: lLIZD6/MK1EyLuO0L6ZePMYmaK/tSVmmteD/qDQCyx4=
Subject key identifier: BC:97:4C:59:3E:9B:FB:3E:6C:64:D9:F7:2B:1A:3F:FC:9F:1A:C1:CC
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 019D2A3C14A9810F52C42CBD6AF7B0940B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 13:01:13 +0000
Manifest this update: Thu 26 Mar 2026 13:01:13 +0000
Manifest next update: Fri 27 Mar 2026 13:01:13 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: mD9zER1yrZcgtSsmaCsS5O99/DR9PRuX1L2d0EzLSco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:14:a9:81:0f:52:c4:2c:bd:6a:f7:b0:94:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: Mar 26 13:01:13 2026 GMT
Not After : Mar 27 13:01:13 2026 GMT
Subject: CN=bc974c593e9bfb3e6c64d9f72b1a3ffc9f1ac1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:79:97:3f:69:59:6e:b8:ff:b6:7d:ee:4c:
09:33:07:f8:a9:c2:a6:fb:89:e6:53:bc:72:d4:bf:
3b:5d:af:e6:f8:ab:cc:44:ad:7e:ee:2d:f9:11:82:
fd:41:45:ff:60:1a:1d:74:89:44:60:8f:9d:40:d0:
2d:33:ae:d3:22:87:b7:c8:4d:3b:c4:70:8d:d0:dc:
7c:66:b7:05:9b:56:48:a4:65:87:99:9d:4a:7b:c6:
9b:bb:7d:7f:3a:ca:18:37:39:62:f2:eb:e6:e2:1f:
e8:1a:16:4a:4a:a1:e0:3c:15:38:83:ac:7d:4f:c0:
5e:0a:9c:88:dc:7e:90:1e:14:45:2d:13:93:a9:28:
c1:30:0a:44:e4:51:01:da:c2:9f:2a:d4:5a:8c:65:
08:43:97:c7:a1:ff:a7:3e:6c:5e:da:e7:5a:be:17:
ca:ef:58:84:c4:ed:0d:25:48:ec:70:71:94:05:71:
11:99:2d:5b:4c:e0:ee:a0:e6:5c:db:76:4a:52:a0:
ed:88:9f:2f:0e:a4:8c:9c:65:4d:c3:79:b5:e8:a2:
c0:f5:4d:bd:ea:56:5d:6e:5c:ef:53:d6:93:db:89:
5d:15:1b:db:2b:20:e3:b5:f4:fa:3b:eb:ba:6e:1b:
a2:ef:d9:bf:c8:50:d2:44:40:c8:7f:e4:06:03:60:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:97:4C:59:3E:9B:FB:3E:6C:64:D9:F7:2B:1A:3F:FC:9F:1A:C1:CC
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:68:12:ae:e6:8c:2a:b5:f8:fd:05:5a:05:c9:57:c3:d0:d9:
1d:b1:79:8e:65:80:6a:be:d6:17:8e:ba:a8:09:4a:db:42:ff:
6a:94:d3:7f:ff:70:bd:e8:6a:aa:08:ae:f4:b2:ae:84:c8:f1:
7a:9e:51:d2:5b:73:43:b7:ea:1a:12:cc:f0:02:f8:67:34:0b:
9a:01:b6:9c:6e:21:73:78:01:0e:c7:09:58:81:e2:f5:d0:ab:
1c:ae:7c:1f:30:c7:d8:0a:4c:26:d6:ee:67:52:f2:96:a8:fd:
e9:69:47:b1:08:26:84:91:ef:a0:81:3f:62:23:32:24:ac:bc:
2d:7a:ec:5e:d9:82:3e:3f:73:db:28:90:59:6a:7a:1c:04:0d:
95:fa:74:85:36:4d:24:72:f6:d7:cf:06:fd:95:34:89:77:22:
79:26:84:56:03:b3:90:77:43:72:e7:29:06:ef:99:d7:1b:c2:
66:53:e4:7f:ba:65:3c:0c:ee:4e:d9:42:69:d2:71:42:00:9e:
04:f2:f6:b2:29:22:57:d6:1b:bc:7d:53:17:57:60:9a:72:09:
f2:6b:e2:ea:65:6a:fd:15:a0:d6:0c:50:b6:9d:d2:61:65:49:
4a:1f:4e:ba:10:e0:e3:9a:37:3f:30:eb:93:9c:3a:1d:f4:ae:
47:1c:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:51 2026 by rpki-client