Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: 0R4nB29mlcRfxtS9kArTnovN/90dX/XAkYrGpMCfzkw=
Subject key identifier: 12:DE:7F:C1:7A:5B:AB:18:F6:C9:06:93:8A:92:9D:AA:AE:92:D2:95
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019D2704113373C0D6A8BB05254C02E41E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 11EA
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: KGPzNXUUF3CDqo2OCuQZcAdp56GYAXuVCTaJ0B4P9GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:11:33:73:c0:d6:a8:bb:05:25:4c:02:e4:1e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=12de7fc17a5bab18f6c906938a929daaae92d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:fa:30:bc:3a:e4:63:32:56:e6:a6:fd:0e:
c7:3e:fe:65:50:ef:53:c3:ac:a3:66:89:77:67:db:
fe:1b:d5:72:04:29:1d:13:89:84:eb:a9:74:83:8f:
9e:00:9c:41:f9:83:4a:10:b4:45:21:d8:6a:80:2c:
d3:da:a7:f7:5a:53:98:72:63:c9:16:8f:92:6b:56:
f2:2e:56:13:03:a6:fc:00:9c:a4:56:29:a3:23:6c:
5a:5b:8e:5c:20:8e:3e:3d:95:31:ef:11:33:8b:b7:
1b:57:4e:18:d4:de:71:17:79:3c:a7:05:45:97:cf:
2a:ce:86:23:f7:bc:2d:5a:a2:ca:4d:ef:ad:13:82:
b6:86:7f:6f:7a:b2:21:60:ea:ea:73:46:66:b5:a0:
76:09:13:8d:06:3a:3d:91:79:97:f3:80:a7:a3:0a:
1e:31:49:0a:64:e6:73:97:7d:c0:fe:6d:8c:92:85:
55:39:0c:21:4d:3c:14:55:61:5d:57:c0:78:75:b4:
7c:e2:2b:b2:cc:f1:f1:32:40:41:47:bd:27:9f:a2:
62:44:c9:ab:5f:ff:31:a1:7f:6e:47:60:5b:78:9b:
a4:49:08:c9:c5:75:43:5e:7f:5e:ca:8b:29:63:1c:
9f:93:7b:89:2b:54:8c:87:4e:ad:35:d6:85:7c:89:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:7F:C1:7A:5B:AB:18:F6:C9:06:93:8A:92:9D:AA:AE:92:D2:95
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:b1:17:f7:fe:c6:bb:1a:89:bd:65:af:0a:d3:f4:ef:8a:
b2:6e:ef:1e:1d:8d:23:39:d1:d3:53:4b:7f:b0:6a:86:73:e9:
d5:2e:0e:c7:52:40:72:bf:b1:f7:da:2f:0e:37:a8:18:c3:cd:
8d:3e:a7:60:3c:41:e2:ca:15:be:56:4a:f6:51:d8:2d:d6:20:
08:41:e3:3b:27:b7:b6:2f:ab:42:20:3a:cc:10:3d:67:13:39:
a5:bb:ef:e8:3b:8c:e8:22:b3:6c:aa:3b:4b:84:2f:c2:37:73:
f8:ec:30:8f:9a:50:0f:94:28:64:63:b8:c5:b0:fe:d4:c7:2f:
df:62:db:56:0c:73:c8:88:44:9e:df:5a:ca:ac:29:fe:3e:b6:
47:b8:59:dc:16:59:dc:b0:49:23:77:c8:26:fd:46:7c:10:0a:
b5:54:d3:9e:4d:ce:4d:9a:fa:53:34:9e:4b:b4:23:c7:aa:9f:
f8:4b:a0:90:bf:da:8f:7b:4a:ad:5a:88:ac:63:d3:7d:e0:ab:
20:37:d6:59:77:4b:91:8a:c4:0f:ae:b8:09:6f:dc:c4:8b:8d:
81:34:0b:0b:df:f2:ca:6d:ae:8f:d5:f3:17:21:6c:12:c1:cf:
d0:fd:87:50:06:18:d5:58:6e:ca:6f:9e:5e:9d:bf:24:42:d8:
32:b6:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:09 2026 by rpki-client