
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: qny4+kbFRY3nDbKv1cshXAgFJMM0iJBnDwCXpmsIEkQ=
Subject key identifier: 62:BB:CD:DA:9D:08:15:0C:1F:26:6D:DD:20:50:71:D1:82:1F:72:BB
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 01A13D138663EA41D7E914C7921B45E636B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1AB6
Signing time: Thu 15 Oct 2026 01:00:52 +0000
Manifest this update: Thu 15 Oct 2026 01:00:52 +0000
Manifest next update: Fri 16 Oct 2026 01:00:52 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: xMU5qZNMv5CWWeDbBaVA3vTnxcdspu4Jy4OYRePPfzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:86:63:ea:41:d7:e9:14:c7:92:1b:45:e6:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Oct 15 01:00:52 2026 GMT
Not After : Oct 16 01:00:52 2026 GMT
Subject: CN=62bbcdda9d08150c1f266ddd205071d1821f72bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:1c:6a:62:80:3c:2f:e4:53:ee:a6:81:f7:
3b:c0:97:48:ea:6d:81:bf:c3:09:ca:ac:c3:77:81:
4a:6b:ed:cb:25:79:3a:18:fb:69:37:ab:b8:f7:bb:
9f:04:c0:e5:f5:7c:53:3f:52:af:3a:c3:92:e1:47:
1e:9d:89:33:20:a2:c8:0d:ff:16:94:a7:c5:a9:35:
8f:98:64:24:7f:ca:6d:d0:fe:8b:d8:ec:bd:56:da:
9b:bb:34:f9:94:c7:03:c0:23:e6:89:81:96:ec:e6:
fe:3c:94:19:ca:ed:be:ab:3b:53:49:a4:e0:78:e0:
49:7b:2e:8e:06:3f:de:0f:75:f5:e4:cf:11:d2:89:
46:d8:a5:d9:db:d2:82:ab:f3:82:e7:33:8c:21:25:
96:62:a8:78:aa:a4:3e:f2:64:19:f7:57:24:99:8e:
45:ef:68:f5:66:f0:b9:01:5f:04:03:4f:58:03:58:
d3:dd:f4:e2:5b:74:b6:1a:a3:02:51:b0:66:28:e6:
36:13:e6:44:6c:7a:f6:ca:e9:56:a0:c4:e2:3b:56:
96:f5:81:6e:08:fe:2b:40:55:99:97:0a:a0:d7:ca:
c9:7f:3d:bc:3b:23:61:09:f7:20:90:6c:30:c3:df:
9c:c6:32:7d:8a:f4:b1:8c:f9:80:09:c0:65:af:19:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:CD:DA:9D:08:15:0C:1F:26:6D:DD:20:50:71:D1:82:1F:72:BB
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8f:0b:7a:08:6f:17:57:19:8f:9d:44:91:3e:cf:6e:ea:44:
05:f0:96:d7:24:f9:ec:54:6c:55:59:3a:f6:2b:76:5b:b5:c8:
a8:fd:f2:77:6f:18:f4:ae:5f:11:c5:ac:33:68:9f:13:66:7f:
8a:75:c8:62:50:be:5f:0a:e8:7c:b0:eb:bb:2b:21:34:43:53:
58:aa:8d:6c:a9:a0:5d:56:ba:02:4e:0f:92:f9:67:3f:b2:22:
52:a1:1b:6b:34:fa:d3:6b:c0:75:f2:1a:6a:6a:14:ae:ee:13:
41:89:41:c2:b4:42:28:e2:c9:57:62:7b:fb:b3:0a:eb:7b:8d:
ac:3b:f6:e8:ba:9c:2e:f0:2c:cd:e8:f1:c8:3b:29:ee:9e:2b:
12:71:5b:42:8f:7b:92:ed:1e:2a:14:fd:ee:5a:13:a9:41:28:
cd:42:ab:44:1a:3b:2e:20:04:4a:c2:bb:4a:af:d8:fb:5a:09:
eb:ce:19:74:07:fe:61:3e:16:dd:97:d7:1b:4d:06:43:85:81:
09:c2:30:ee:83:e9:ad:5d:34:cf:e1:6b:c6:9b:d7:f7:a1:e1:
c5:61:77:ef:62:b2:9e:31:d7:c5:93:44:25:a9:b7:82:ff:44:
11:10:7f:eb:7f:f2:d4:c7:e9:44:45:9f:73:b3:21:55:b4:19:
f7:52:f7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E4Zj6kHX6RTHkhtF5ja3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz
YzcxMWIwHhcNMjYxMDE1MDEwMDUyWhcNMjYxMDE2MDEwMDUyWjAzMTEwLwYDVQQD
Eyg2MmJiY2RkYTlkMDgxNTBjMWYyNjZkZGQyMDUwNzFkMTgyMWY3MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdocamKAPC/kU+6mgfc7wJdI6m2B
v8MJyqzDd4FKa+3LJXk6GPtpN6u497ufBMDl9XxTP1KvOsOS4UcenYkzIKLIDf8W
lKfFqTWPmGQkf8pt0P6L2Oy9VtqbuzT5lMcDwCPmiYGW7Ob+PJQZyu2+qztTSaTg
eOBJey6OBj/eD3X15M8R0olG2KXZ29KCq/OC5zOMISWWYqh4qqQ+8mQZ91ckmY5F
72j1ZvC5AV8EA09YA1jT3fTiW3S2GqMCUbBmKOY2E+ZEbHr2yulWoMTiO1aW9YFu
CP4rQFWZlwqg18rJfz28OyNhCfcgkGwww9+cxjJ9ivSxjPmACcBlrxkbBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK7zdqdCBUMHyZt3SBQcdGCH3K7MB8GA1UdIwQY
MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt
NTE4Y2QxNDcxM2ViLzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi
LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY8Leghv
F1cZj51EkT7PbupEBfCW1yT57FRsVVk69it2W7XIqP3yd28Y9K5fEcWsM2ifE2Z/
inXIYlC+XwrofLDruyshNENTWKqNbKmgXVa6Ak4PkvlnP7IiUqEbazT602vAdfIa
amoUru4TQYlBwrRCKOLJV2J7+7MK63uNrDv26LqcLvAszejxyDsp7p4rEnFbQo97
ku0eKhT97loTqUEozUKrRBo7LiAESsK7Sq/Y+1oJ684ZdAf+YT4W3ZfXG00GQ4WB
CcIw7oPprV00z+FrxpvX96HhxWF372KynjHXxZNEJam3gv9EERB/63/y1MfpREWf
c7MhVbQZ91L3AA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:58:54 2026 by rpki-client