Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: z0a/9PsgpX0yuOOKJ6ICDofctiNNB/YzpdBtrdQd8tI=
Subject key identifier: 06:C2:67:1B:2A:02:84:A7:90:90:3C:47:4E:B4:B5:F3:DB:F3:31:64
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019E1C0FEF9A5F8C7BBFDB4ABCB262CA3C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0E5A
Signing time: Tue 12 May 2026 12:01:06 +0000
Manifest this update: Tue 12 May 2026 12:01:06 +0000
Manifest next update: Wed 13 May 2026 12:01:06 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: +lfO0y+rWHgXa+pjJoZWIsHjs5sNjCDRo0wXaf+418s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ef:9a:5f:8c:7b:bf:db:4a:bc:b2:62:ca:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: May 12 12:01:06 2026 GMT
Not After : May 13 12:01:06 2026 GMT
Subject: CN=06c2671b2a0284a790903c474eb4b5f3dbf33164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:02:85:5b:08:1f:1d:88:49:8f:44:a5:89:
e6:dc:ad:27:8e:0f:7a:b1:c9:e3:04:93:1d:07:b3:
a1:70:56:3a:aa:28:de:3a:87:bc:4e:c9:59:bd:5c:
9f:ab:b6:96:e9:b1:22:34:e9:ba:9c:37:67:b1:8a:
e0:9f:f9:6b:5e:bc:50:d1:be:4c:a8:f1:1d:98:e7:
ab:70:40:77:23:21:f9:ad:4c:81:f0:a3:7c:eb:fe:
6e:d3:cb:93:e4:41:7c:64:44:33:68:5e:ed:d4:9d:
44:19:4a:17:7a:94:c7:ba:15:77:71:db:bc:e9:6f:
6c:be:0c:45:8d:81:a1:89:c9:b6:cb:73:dd:3f:9b:
bb:6e:1c:87:54:2b:3f:0f:38:55:88:fc:25:d6:45:
6f:38:2f:27:2d:a1:67:ca:a2:25:92:c5:3e:46:d9:
d4:21:13:09:1e:c7:be:92:81:a7:44:f6:aa:e6:95:
de:34:44:aa:cf:ca:74:85:30:d1:9a:5e:9a:ad:09:
6e:26:ca:71:9c:d1:c1:1b:aa:a0:98:e9:5b:8d:ac:
ad:94:eb:92:67:1c:e5:26:55:bc:3c:08:ba:91:0e:
f8:b4:7a:f8:f6:84:b9:c3:32:0f:d7:09:d5:2a:a5:
f4:a0:1a:6e:a9:47:68:ad:e0:62:41:e2:0a:59:7f:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:67:1B:2A:02:84:A7:90:90:3C:47:4E:B4:B5:F3:DB:F3:31:64
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:82:f1:72:bb:81:4a:88:be:07:dd:3d:16:53:68:e4:e3:
13:c6:1f:14:fd:e8:8c:4e:d4:09:36:74:06:05:ed:ac:a9:ce:
ae:e7:13:bc:8e:fe:a9:6f:c5:ee:90:69:e9:16:64:72:50:f4:
2a:67:fd:fb:dd:e9:4e:94:9e:74:b6:23:02:1f:d5:99:23:10:
e7:88:f9:dd:70:73:a5:fc:8d:9e:15:0e:9a:f3:85:fd:72:8a:
f3:76:03:3f:0a:04:a5:ed:64:3d:b1:be:0d:8b:d9:4c:bc:b2:
03:81:97:af:bf:ea:42:09:52:2d:9e:c8:e0:4a:47:8f:91:5a:
0b:a1:9a:8e:f8:b3:f3:00:45:16:a6:fb:19:80:8e:7b:00:b9:
52:33:0c:69:33:d6:66:91:e8:30:3b:19:73:15:3f:98:23:4c:
51:0f:79:c6:cb:51:2b:4b:7d:6b:f7:6e:b2:1f:47:29:a0:10:
49:d7:f0:66:17:21:4f:8a:c6:62:23:51:43:7f:af:2d:db:d6:
c3:56:4b:9f:82:5c:42:e0:3b:6e:b4:58:35:d9:d3:2b:4e:fe:
44:f5:2d:e0:12:fc:87:52:26:36:5f:a8:15:8f:a6:74:97:23:
b6:8f:1c:fd:06:8a:8d:76:8b:47:a9:60:b9:23:b3:8f:70:b4:
91:f8:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:44:33 2026 by rpki-client