Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: N1JmUOFAgJBDxQMnPp9z6MrJBi8ij7/wBblLcxBspkI=
Subject key identifier: 8A:42:EC:A1:10:9A:CA:D3:AA:D3:46:25:95:03:6F:45:61:39:CE:2C
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 019D2B8563822EB4314AA3EA6B37507950B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 0A9B
Signing time: Thu 26 Mar 2026 19:00:55 +0000
Manifest this update: Thu 26 Mar 2026 19:00:55 +0000
Manifest next update: Fri 27 Mar 2026 19:00:55 +0000
Files and hashes: 1: clFIubjbLQqxbnoigbE4pHEFWAU.roa (hash: 1t4DJkKFGPggpFIGiXnW0fwPm80oShJdtzZrjtLGtZQ=)
2: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: 93RO/qerYt9XfE2mTo4w9Cni1UAoTZJmaohQ6IjpeWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:63:82:2e:b4:31:4a:a3:ea:6b:37:50:79:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Mar 26 19:00:55 2026 GMT
Not After : Mar 27 19:00:55 2026 GMT
Subject: CN=8a42eca1109acad3aad3462595036f456139ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:50:52:77:b2:2f:ae:0e:6f:de:22:39:20:
75:dd:7f:88:1f:41:9f:63:5a:95:25:3d:93:da:79:
9f:71:b0:31:e3:7d:b2:ec:a3:48:29:9f:11:85:7d:
7d:a2:15:40:9e:a7:32:3a:8d:c8:8a:e3:f5:63:28:
0b:c0:4a:1e:3b:ad:40:5c:2a:cd:72:d7:5c:a9:25:
33:3f:59:d0:7a:21:fa:37:27:c0:b4:7e:94:6e:b5:
34:c8:f2:b3:54:35:c6:c0:ce:b2:ab:5f:a7:c3:68:
f2:27:a4:d3:f0:65:60:9f:d3:af:cc:de:6a:b4:65:
15:5d:22:e9:ca:6f:55:83:5b:b3:3c:75:a5:51:ae:
3f:ee:7c:b4:18:92:3f:6c:89:63:7e:62:c0:8c:d7:
6b:c0:d5:8f:a7:65:0f:02:e7:f5:4f:e0:00:23:18:
36:8d:38:ae:ae:94:52:52:f1:85:4f:2f:70:78:5b:
67:39:8f:1c:8e:c0:f3:df:c3:d8:b1:69:ea:e3:1f:
de:a6:43:98:0a:ac:00:26:f3:3d:c9:89:61:a4:90:
39:78:ab:07:54:44:35:70:ac:6b:58:7a:51:49:8e:
fc:d9:57:a9:f7:ed:9f:66:92:60:09:00:94:dd:d8:
38:ba:14:41:72:69:fe:5c:f1:b1:37:c1:ec:32:47:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:EC:A1:10:9A:CA:D3:AA:D3:46:25:95:03:6F:45:61:39:CE:2C
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:90:a0:b5:93:42:45:17:c1:c6:7d:3f:2e:35:8d:d8:df:
51:f3:c3:92:84:59:a9:df:ea:b3:17:6e:22:ff:53:80:ac:6c:
6a:d6:ac:d0:51:fb:5c:1e:b5:16:e8:b6:53:ec:5b:44:8f:ee:
0f:35:70:62:04:4d:b5:f1:84:c7:b2:5d:35:88:e9:8d:bb:3c:
0c:8f:04:f3:e5:9e:f9:af:3a:77:4d:2a:be:43:21:e2:4f:7b:
01:db:75:d1:1d:b3:ce:7e:22:a0:2d:d1:eb:9f:b2:4b:c7:79:
39:17:b7:f7:24:96:3a:db:ec:ac:69:c3:0a:33:b3:8d:64:0b:
c0:21:51:50:99:cd:85:4f:58:0a:aa:09:26:7e:60:5d:f4:80:
d4:f4:7a:78:e4:9c:7c:4b:bb:77:1e:c0:5f:20:ae:9b:a3:72:
35:5a:58:de:89:43:9c:5a:35:69:8c:f5:df:b8:76:13:21:c3:
95:75:7f:02:b3:1d:04:e6:bf:ad:f3:b9:fc:05:d9:ce:fa:9c:
ab:17:6a:aa:72:3a:37:d8:53:bd:67:71:34:34:99:19:24:56:
21:a2:b8:36:cf:64:71:eb:4d:bc:d4:92:72:f7:b5:bb:b7:cb:
ea:9e:68:08:53:01:d8:73:a4:9c:4c:c4:21:60:cc:ae:d1:eb:
1e:45:b5:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhWOCLrQxSqPqazdQeVC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWRlOTQ1OGQxOTBlNjM0MzI5ZjlkZjE1MDNiNTIyMmMx
NjI0ZWUwHhcNMjYwMzI2MTkwMDU1WhcNMjYwMzI3MTkwMDU1WjAzMTEwLwYDVQQD
Eyg4YTQyZWNhMTEwOWFjYWQzYWFkMzQ2MjU5NTAzNmY0NTYxMzljZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTJQUneyL64Ob94iOSB13X+IH0Gf
Y1qVJT2T2nmfcbAx432y7KNIKZ8RhX19ohVAnqcyOo3IiuP1YygLwEoeO61AXCrN
ctdcqSUzP1nQeiH6NyfAtH6UbrU0yPKzVDXGwM6yq1+nw2jyJ6TT8GVgn9OvzN5q
tGUVXSLpym9Vg1uzPHWlUa4/7ny0GJI/bIljfmLAjNdrwNWPp2UPAuf1T+AAIxg2
jTiurpRSUvGFTy9weFtnOY8cjsDz38PYsWnq4x/epkOYCqwAJvM9yYlhpJA5eKsH
VEQ1cKxrWHpRSY782Vep9+2fZpJgCQCU3dg4uhRBcmn+XPGxN8HsMkdw6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpC7KEQmsrTqtNGJZUDb0VhOc4sMB8GA1UdIwQY
MBaAFLed6UWNGQ5jQyn53xUDtSIsFiTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODkt
ZjFjZDlmYTI4Y2M1LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODktZjFjZDlmYTI4Y2M1
LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVyQoLWT
QkUXwcZ9Py41jdjfUfPDkoRZqd/qsxduIv9TgKxsatas0FH7XB61Fui2U+xbRI/u
DzVwYgRNtfGEx7JdNYjpjbs8DI8E8+We+a86d00qvkMh4k97Adt10R2zzn4ioC3R
65+yS8d5ORe39ySWOtvsrGnDCjOzjWQLwCFRUJnNhU9YCqoJJn5gXfSA1PR6eOSc
fEu7dx7AXyCum6NyNVpY3olDnFo1aYz137h2EyHDlXV/ArMdBOa/rfO5/AXZzvqc
qxdqqnI6N9hTvWdxNDSZGSRWIaK4Ns9kcetNvNSScve1u7fL6p5oCFMB2HOknEzE
IWDMrtHrHkW18Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:59:16 2026 by rpki-client