Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: yLLFn7elxmJF5DOJWS0HpC8jveNJvzprZ1MK3YJxS7M=
Subject key identifier: 47:C1:0F:A1:47:A3:E9:9C:C2:1E:F4:43:05:44:3B:03:55:0C:80:D0
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019F90FE95B72133DB2DBA0BB195E21FDB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1237
Signing time: Thu 23 Jul 2026 22:00:31 +0000
Manifest this update: Thu 23 Jul 2026 22:00:31 +0000
Manifest next update: Fri 24 Jul 2026 22:00:31 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: W3dMnfqea28jva+zbVk4+7JmP/H425mrKxnQ7KB/r/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:95:b7:21:33:db:2d:ba:0b:b1:95:e2:1f:db:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jul 23 22:00:31 2026 GMT
Not After : Jul 24 22:00:31 2026 GMT
Subject: CN=47c10fa147a3e99cc21ef44305443b03550c80d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:9b:45:0a:cf:53:60:a4:22:14:59:d0:ed:
a0:d2:5c:11:ea:28:2d:27:aa:c1:1c:61:e0:89:53:
c6:27:55:21:e8:c4:ca:77:48:cc:55:f1:15:8f:e0:
ab:f9:ae:57:f7:cc:ce:21:85:41:0f:19:21:6c:3a:
fa:22:f9:df:3f:be:e7:5c:fe:00:e3:8d:d9:31:e3:
2e:81:3b:bf:58:36:72:43:01:0a:cd:e6:c2:7e:ca:
4a:ec:38:f3:ac:b4:22:ac:95:59:ef:9a:af:1b:e8:
32:fb:0b:46:2f:93:7f:16:76:c6:f0:ee:ea:19:60:
5f:df:4c:16:a4:5a:3c:1a:a0:7e:e1:c4:9e:a1:54:
81:07:14:a3:e8:89:60:9d:75:3d:2b:6d:80:c8:a9:
49:e6:68:d3:45:c8:28:df:8b:70:1a:33:c0:88:34:
f0:ba:d2:1e:1a:28:8f:6d:71:07:34:36:92:d2:e4:
91:d4:ca:bf:83:eb:3a:bc:07:4b:be:ff:e2:d3:17:
af:eb:31:17:e9:61:b2:25:80:45:5f:e4:f7:f4:f7:
3c:e8:97:9d:12:2f:69:6f:f6:5d:7c:38:78:86:5b:
f7:57:0c:a1:1c:99:66:56:af:b9:2b:db:fa:ab:0d:
45:33:76:94:54:28:d3:44:8c:f7:87:c5:13:59:5b:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:0F:A1:47:A3:E9:9C:C2:1E:F4:43:05:44:3B:03:55:0C:80:D0
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:47:e8:e7:e8:ef:fb:df:09:5b:8a:9a:a2:32:8a:1b:aa:
1e:b7:c0:0e:e4:83:82:11:65:67:90:90:14:e2:9f:6c:0e:30:
19:1b:ee:6f:1b:66:69:70:67:fe:1c:56:97:d4:47:fa:4e:79:
ab:e6:12:3a:33:bc:ac:20:0d:a9:31:9c:69:f5:92:2b:72:06:
2d:a4:06:8b:3d:f7:07:e1:66:75:9b:2f:11:25:92:b2:bb:ff:
05:ad:5f:36:44:44:5d:8b:b5:1e:17:f2:b8:9a:b4:fb:71:26:
ea:6a:70:95:c9:92:8f:c6:72:36:11:f1:5f:2a:ed:52:09:9a:
20:70:1b:e8:68:ff:e4:3d:ec:e8:8d:94:a1:78:d5:ef:05:91:
ba:6c:53:00:36:9d:a5:1c:a6:29:98:2b:a5:7e:a5:88:8b:30:
bc:8d:0f:70:61:69:d5:8a:e8:57:dd:22:b2:54:a9:4c:4b:24:
be:08:e2:53:d7:30:67:84:79:9a:54:a4:05:3d:01:02:e1:d4:
95:14:b6:b7:d4:37:a1:cc:82:48:cc:d9:1b:20:d5:b2:88:b0:
16:45:c3:d5:91:25:33:d0:90:d8:01:2f:33:29:d0:14:f9:a9:
1a:ca:8a:ce:84:c2:c1:d8:95:09:85:a1:46:e9:cb:26:0b:08:
7b:3a:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:30 2026 by rpki-client