Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: Tn9yyT+q6lbm4KonJqPUWqlBW6jNgcMg/nKsBka7Mcs=
Subject key identifier: 49:B3:DA:70:A6:B8:CE:66:F8:CC:AF:D7:D0:B4:90:42:9B:D3:7A:9D
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019E1E35FCB8FA2A85E18BCEF44BE04F3AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1177
Signing time: Tue 12 May 2026 22:01:54 +0000
Manifest this update: Tue 12 May 2026 22:01:54 +0000
Manifest next update: Wed 13 May 2026 22:01:54 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: D9/hUTkQknbWHMhIAtRma4HdhIF5ERz6gEb7FwOC/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:fc:b8:fa:2a:85:e1:8b:ce:f4:4b:e0:4f:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: May 12 22:01:54 2026 GMT
Not After : May 13 22:01:54 2026 GMT
Subject: CN=49b3da70a6b8ce66f8ccafd7d0b490429bd37a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:0b:ce:e0:8e:9a:46:cf:6d:9d:a9:27:3f:
83:c8:d6:3f:f2:32:a0:66:35:3c:e8:fa:c9:6e:2b:
e6:03:51:67:9d:1c:81:59:d6:18:a1:82:ff:22:af:
7c:1b:2f:47:e8:89:83:3c:6e:55:50:9c:66:6f:37:
91:5a:0e:bb:37:10:21:f4:1f:9f:7c:6e:f2:7a:8c:
81:d5:34:87:7c:36:8e:67:be:57:50:6e:6f:9e:01:
ed:e4:ce:66:15:dc:d6:4b:84:a3:c5:34:77:46:31:
12:07:24:5b:70:a3:c6:06:f7:a8:9a:09:3a:76:d5:
c5:c4:4d:70:82:c2:b7:3e:b2:2e:47:6c:f2:b7:97:
2e:f5:e7:77:47:e1:b1:60:27:ac:57:be:c5:b3:c5:
ee:02:7f:3e:33:cc:fe:ac:ea:bb:4e:af:6d:e2:47:
5e:ab:5a:53:27:55:b7:75:ac:31:00:e0:33:54:43:
71:ca:6f:78:ef:b3:2b:cf:37:77:1e:76:51:d3:ac:
fd:dc:fb:46:15:92:61:20:f9:aa:a4:b1:75:c7:57:
62:f0:fd:95:1c:a5:bc:78:8e:97:53:cb:64:6f:94:
9f:c8:af:61:3b:39:e7:73:d6:b5:55:20:6f:ee:04:
33:a3:d1:36:cc:53:6b:fe:9d:0f:96:70:e0:a5:74:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:DA:70:A6:B8:CE:66:F8:CC:AF:D7:D0:B4:90:42:9B:D3:7A:9D
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:7a:5d:35:b3:44:e6:ab:7c:3e:9b:52:5c:94:3b:46:c7:
48:bd:2a:d6:75:6a:c4:89:f5:05:2f:fc:32:35:f4:1b:0f:27:
33:9c:05:05:d9:42:f1:7d:80:bc:80:00:eb:60:1c:f0:2c:f8:
31:89:68:d0:f3:bb:c4:0b:85:11:73:ca:04:71:b1:fb:34:56:
c4:3a:7b:df:9e:84:0a:09:47:03:b6:e3:02:99:fc:77:f5:a1:
d6:d7:fa:2b:e0:c6:d6:3e:6f:ce:4e:cc:99:98:1d:71:33:02:
c7:5c:27:cf:7d:29:90:0d:73:e0:5e:8f:0e:93:bd:61:5c:60:
4c:a0:a7:37:cf:bd:0a:a5:23:35:02:c5:28:2b:1e:d1:7f:47:
a6:a9:39:6e:e5:95:d3:f3:ae:cd:8c:37:49:97:da:0f:3d:29:
2b:09:d5:e4:d5:da:e9:8e:bd:58:ae:8a:5e:42:d5:0e:a5:24:
03:37:27:86:e0:23:62:f4:f6:95:74:aa:e4:33:69:5b:89:ff:
43:26:b6:5b:09:22:10:11:76:53:8f:4c:c5:dc:14:06:eb:8a:
87:7b:b6:dc:87:77:f6:5a:4c:1c:cf:de:f5:e0:25:e4:7a:e1:
01:3f:b4:54:1e:56:1e:fd:aa:b6:fd:d7:0b:fa:22:a6:49:a6:
9f:43:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:13 2026 by rpki-client