Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: E8N3Hl/USEc6itOp8+Mbvn6Tu0xQOsDWcMq0K2VhGvA=
Subject key identifier: 6C:BD:71:5B:3F:86:E3:4A:68:9F:41:CB:91:E9:55:D5:A0:E9:34:CD
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019F8F10CE9468430878D65AA83CC0245FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 10AF
Signing time: Thu 23 Jul 2026 13:01:11 +0000
Manifest this update: Thu 23 Jul 2026 13:01:11 +0000
Manifest next update: Fri 24 Jul 2026 13:01:11 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: 2ZEvZIXnRc0oGuNXHRhOUmPXtMhEYt2fW5k3KSAsr5U=)
2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:ce:94:68:43:08:78:d6:5a:a8:3c:c0:24:5f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Jul 23 13:01:11 2026 GMT
Not After : Jul 24 13:01:11 2026 GMT
Subject: CN=6cbd715b3f86e34a689f41cb91e955d5a0e934cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:ac:ac:45:dc:ca:ff:2b:38:c4:b9:a2:4c:
67:71:e1:03:b7:4f:c5:e2:82:df:a6:44:3d:66:47:
32:6c:cd:6d:23:c2:e9:a1:04:5a:08:b5:4e:ed:01:
6c:1b:60:a7:bd:78:f7:5a:52:ab:84:1d:bd:df:bd:
14:47:39:a0:95:7a:7f:08:1c:ff:c8:92:4a:a9:36:
44:49:71:c0:05:48:55:a3:27:00:47:6a:8d:b5:ac:
cb:36:95:94:38:5c:4a:45:70:25:bf:9d:45:55:48:
57:74:25:4e:91:bf:6b:03:b3:b5:64:30:c9:88:ef:
1f:b3:13:3c:28:3e:f1:82:af:d1:40:6b:30:a5:27:
51:df:51:c3:b1:52:2a:ad:c4:45:27:dc:f9:1b:ff:
93:42:9a:8b:a0:b5:46:52:44:d4:b9:8a:ee:5b:0c:
ee:37:bc:0d:a8:dc:0e:90:c9:ff:62:6a:e4:82:3f:
af:1f:51:4b:59:d1:13:d1:43:45:4d:6c:61:95:9f:
2b:c3:8f:3d:ba:61:78:62:21:56:ab:a4:be:bd:1f:
b0:26:70:09:e5:c4:89:d3:60:c8:86:37:03:fe:65:
76:c0:cf:fa:16:78:94:f0:6c:fd:e0:6f:9f:e1:1a:
d6:a5:0c:28:3a:91:d8:43:1e:52:63:d4:b5:77:68:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:71:5B:3F:86:E3:4A:68:9F:41:CB:91:E9:55:D5:A0:E9:34:CD
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:47:a8:89:24:d3:6f:a3:fa:81:b6:81:e6:72:86:0b:d8:a1:
4c:ad:7f:e8:d8:92:78:6b:b8:ee:8e:37:53:0c:25:46:a1:69:
6d:7a:0b:02:22:e1:23:dd:ab:70:29:0b:c1:b9:e7:78:22:3a:
69:ca:fe:1e:e1:58:00:f5:66:9c:10:f1:87:31:8e:3c:6a:04:
25:b3:07:46:29:09:39:92:43:87:5d:2b:90:7c:76:9b:74:24:
45:a1:95:dc:c2:bd:1f:50:8b:bf:17:c3:12:e8:81:fb:95:6b:
29:a3:0a:52:b0:ac:7f:82:5d:35:0e:9f:58:da:fc:52:bd:52:
97:26:7d:97:44:1d:ca:2b:bb:99:be:e8:e8:18:91:88:fa:ec:
bf:2e:ee:63:22:61:df:6e:5f:61:d8:de:1e:a4:0c:54:83:78:
4a:56:1d:a1:02:ea:ed:a3:2f:08:dc:42:32:62:f7:4e:81:98:
f4:b1:34:12:4f:fa:1c:b6:2e:43:bf:c7:36:e9:ae:53:6d:6f:
d5:a5:51:f8:7f:46:46:a7:a7:51:df:d5:ec:3e:34:1b:dc:dc:
04:73:28:93:b8:3f:26:99:b3:9c:19:b2:ca:bd:fb:9b:c6:34:
38:79:08:e4:f7:ed:74:69:a5:dd:65:b0:0d:e8:9f:e8:d7:1e:
dd:cc:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:44 2026 by rpki-client