Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: mhRIVxKG6wuc+4rCiK3j/OKOkksNBsmPelGD7BBZBj0=
Subject key identifier: D9:B0:1D:B9:E9:09:E6:82:EB:32:7F:41:AE:A1:FF:AF:27:E3:04:0A
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 01A0D0EDCECF2035678D564C5BB907F43598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 12DD
Signing time: Thu 24 Sep 2026 01:00:40 +0000
Manifest this update: Thu 24 Sep 2026 01:00:40 +0000
Manifest next update: Fri 25 Sep 2026 01:00:40 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: j7NmpvfIQU6FDEix-u8x70QzGB4.asa (hash: njgslEMetrKTmwnGYjM4U3y9QobxeUtCJrq8bFvuhc4=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: cHpA9PAfCCaLS3o6i6Slt76REKwUk1eRqCTrYYp+Nvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:ce:cf:20:35:67:8d:56:4c:5b:b9:07:f4:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Sep 24 01:00:40 2026 GMT
Not After : Sep 25 01:00:40 2026 GMT
Subject: CN=d9b01db9e909e682eb327f41aea1ffaf27e3040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:b5:47:e3:ff:92:0a:df:41:14:12:3a:4a:
bf:9b:2c:93:6a:43:51:90:20:82:50:aa:5f:ef:f1:
c3:ef:ad:1f:7a:78:1c:5c:bd:5e:3e:09:29:0b:34:
65:0d:e3:18:45:21:cd:de:ab:ec:8b:6f:fe:dd:46:
8d:ca:d6:40:aa:61:dc:0a:46:4f:60:af:ef:2f:6b:
ba:8b:76:b3:25:19:43:4b:61:b8:63:b9:ff:cb:24:
39:c2:4d:61:e7:34:49:9b:de:31:da:4e:b4:6d:60:
4f:fa:dd:74:33:45:48:91:f7:80:88:8c:12:4e:d8:
f4:cf:b7:e0:42:50:e5:c5:16:80:a2:d3:61:d4:c1:
a0:ba:ba:42:5e:22:92:6f:35:3d:7e:3c:bd:d0:aa:
84:9f:cd:50:52:50:f2:ef:e9:8e:ec:4c:d9:7d:a1:
94:1a:5e:da:f7:d5:96:3e:8d:f2:16:a1:91:07:4f:
d4:08:d1:49:44:37:b8:51:22:0f:10:55:bc:38:f5:
0b:c2:32:5c:c5:8c:0b:dd:48:e4:e5:48:eb:dc:3b:
8f:3c:3c:b7:a2:d9:ab:c2:f1:a6:6f:44:a2:c0:92:
28:34:11:1f:bc:c1:c5:44:35:66:a6:a0:9e:86:ef:
01:70:e1:10:32:27:84:6c:0b:3b:36:ce:b6:bb:f2:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:1D:B9:E9:09:E6:82:EB:32:7F:41:AE:A1:FF:AF:27:E3:04:0A
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:2c:47:c7:10:c4:1b:c5:f8:2c:f5:cd:22:76:41:d6:17:
90:a4:81:04:89:f9:b4:2e:7d:7d:e8:52:1a:8c:a1:a4:0f:37:
0e:83:d3:ab:4c:c7:7c:11:ff:64:d5:5a:66:72:2e:ee:53:f2:
ad:77:1e:72:ec:84:f9:f0:93:3e:8d:d0:42:5f:64:09:ea:96:
66:79:35:4d:27:09:79:e8:cd:0d:67:e7:66:6f:7f:52:74:06:
aa:64:54:0c:6a:a5:1d:9f:09:85:0f:02:21:ea:58:c7:86:09:
79:73:82:3c:7f:00:1d:f3:0b:53:e3:da:86:8f:9c:f3:b8:f4:
f1:dc:02:b2:4b:f1:c2:42:55:59:c2:1f:fb:05:3f:91:c3:5b:
d3:63:94:7d:aa:f8:37:b1:d6:0c:c2:dd:f2:3e:a0:f7:64:53:
c7:6e:70:08:f5:e1:ce:db:39:b9:5f:b1:da:e5:af:77:33:70:
a6:1a:e2:e8:94:9e:62:7c:80:ac:d7:1e:a5:cd:44:eb:4c:8d:
90:7b:1a:d9:37:54:88:f1:e4:24:c9:73:fe:70:85:82:91:10:
58:8c:39:d9:de:89:e5:df:6b:b5:7e:50:d4:6f:68:7b:52:16:
db:32:46:32:15:3d:90:ee:a5:d3:da:5e:34:65:ba:96:c9:57:
a5:24:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:30:13 2026 by rpki-client