Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: e5NUlDYA+PXabYPRZH6m6xel3sN6+UONGEEPrGGyb4c=
Subject key identifier: 9D:C1:A8:37:F1:8B:6D:17:F0:5D:05:7C:ED:EF:88:2E:46:CE:1E:8F
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019D2704A0F59F7378A9936F50ADE3C4AAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 10F7
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: L1/It76pL6stDDZ4nfK2jvs4xMySwiJ7L/ie7HmCP5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a0:f5:9f:73:78:a9:93:6f:50:ad:e3:c4:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=9dc1a837f18b6d17f05d057cedef882e46ce1e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:80:2c:07:2b:a3:6f:ed:bf:d0:2b:e2:9d:
5f:cd:00:01:ed:d9:45:6c:01:61:3c:86:6a:0e:53:
de:96:38:4d:d1:d3:a1:6c:32:4f:26:4b:40:0d:6d:
3e:5f:a7:23:b0:7d:e5:c4:86:11:6b:ca:eb:17:65:
33:fa:bc:5e:0d:b1:7c:df:22:34:d3:72:41:73:27:
7a:bd:4b:59:7e:28:6c:dc:ab:d2:dd:b5:a2:70:60:
4f:03:7d:e3:bf:eb:09:4c:57:36:f7:c3:0b:a4:9b:
81:14:dd:be:89:d3:97:d7:78:6f:de:24:27:bc:91:
f0:97:24:01:c6:ea:e4:1f:82:cd:4e:f6:6d:5e:27:
ca:ff:80:dd:36:8b:72:7f:f7:36:69:d4:4e:c1:85:
e9:4a:48:d0:00:07:14:87:f8:10:a9:11:52:93:39:
14:ad:15:6a:28:ce:c5:17:70:30:df:f8:f7:46:8a:
2d:fc:25:41:d3:e9:d7:7b:0b:4d:9c:8d:17:74:36:
18:b2:54:3c:df:d2:1e:bd:c2:d4:30:1e:9d:20:23:
b5:cf:8c:86:90:44:92:2e:5b:75:df:5d:8e:b5:44:
6f:3c:97:f0:c3:d0:4c:eb:51:2d:a0:ef:35:31:0f:
73:da:f6:5e:7a:30:21:0f:f8:de:f3:8c:71:68:f2:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:A8:37:F1:8B:6D:17:F0:5D:05:7C:ED:EF:88:2E:46:CE:1E:8F
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:0e:25:ad:84:54:e7:38:86:f9:1e:54:b9:f5:a1:2d:bc:
45:bc:7e:a3:56:70:f3:9e:23:42:dd:a3:94:cf:e4:09:fc:fe:
74:e1:13:88:52:a7:e3:b8:47:ea:48:a7:0e:20:6b:ae:84:d5:
07:6b:e0:25:a9:b5:19:58:12:47:5f:af:25:c4:46:55:32:2c:
4d:9b:15:4e:47:60:6c:ed:ac:05:ce:5f:e4:51:1b:6c:77:fc:
e7:be:84:b3:0f:e5:cb:4c:c9:82:4e:ef:86:2b:10:4c:b4:50:
f3:6c:80:82:76:00:27:2c:0b:a4:37:82:54:7f:ce:8d:71:88:
21:12:43:4f:33:97:08:13:7c:2b:fa:4d:5b:22:99:67:72:54:
a9:0e:5c:6c:1a:cd:d5:55:f6:b1:4f:11:ef:9f:50:6b:6c:88:
27:ef:7f:13:d4:80:87:03:97:78:e7:57:ff:bb:e6:ac:6a:9d:
46:33:70:93:ef:81:c2:2f:63:0d:33:8e:5c:ec:00:32:80:cb:
af:a1:3e:b8:d5:72:7f:dd:f9:be:3d:7c:35:7f:3b:60:eb:6d:
02:ef:71:47:44:9d:7d:11:5b:48:91:63:a5:61:7c:83:84:54:
57:d8:aa:2a:ad:13:e5:cd:3c:34:34:8d:a1:46:d3:73:ea:ff:
4f:10:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:22 2026 by rpki-client