Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: qx/DaWhOubICNMAR26U3SdTWYgvnJEDIutftCRDHaOI=
Subject key identifier: 79:D1:03:6F:42:3D:DC:C5:1B:42:ED:AD:CD:0E:D8:17:AD:65:2B:E5
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 019E1F7EF1344A592A2076BF2AED7E54C90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1919
Signing time: Wed 13 May 2026 04:01:13 +0000
Manifest this update: Wed 13 May 2026 04:01:13 +0000
Manifest next update: Thu 14 May 2026 04:01:13 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: UrJmqanxXuem5bGO0BV3EPAG0/kUbnoZ/4ATQKC3i5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f1:34:4a:59:2a:20:76:bf:2a:ed:7e:54:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: May 13 04:01:13 2026 GMT
Not After : May 14 04:01:13 2026 GMT
Subject: CN=79d1036f423ddcc51b42edadcd0ed817ad652be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:9a:a2:a4:b6:8b:5d:e2:eb:b3:af:3a:00:
b5:43:99:92:7e:f1:f6:0c:a3:0a:3a:c3:8b:5a:78:
05:55:75:70:10:94:6a:26:92:6c:5c:cb:e0:f3:d1:
d4:58:b7:cf:f2:26:78:03:e6:00:73:d5:03:46:3c:
07:c7:b7:ec:ba:6c:c1:f4:04:f6:96:37:18:0e:38:
e4:02:ab:87:1e:b8:ae:d1:c2:59:29:d5:7f:48:3b:
a0:96:a7:9d:ff:a5:c1:83:0a:ac:96:53:00:9e:61:
f9:9a:19:e8:15:bd:b9:4a:2c:81:7f:90:47:c3:1a:
ef:ff:f0:86:cc:03:1e:d4:d0:8b:4c:74:90:3b:2c:
4e:67:9c:c4:fe:4f:00:41:ca:72:83:52:ad:e5:d1:
5f:38:b4:ed:52:04:3d:d9:f4:eb:d4:b2:a1:f6:59:
4b:51:a4:7f:1b:9f:2a:ab:ba:90:fe:7b:2a:e0:63:
50:a7:6b:01:30:7b:74:d9:6c:28:6e:5c:be:dc:05:
1e:ce:a8:36:d5:34:65:7b:fc:0d:46:7b:2d:f3:80:
cb:7d:1a:4c:c9:9a:10:ee:98:e4:8a:0e:15:19:d3:
ea:e5:52:df:e5:de:f9:01:13:2f:05:c1:bd:cf:bf:
10:68:d5:19:62:23:42:fa:5f:01:4d:e5:ba:0e:b8:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:03:6F:42:3D:DC:C5:1B:42:ED:AD:CD:0E:D8:17:AD:65:2B:E5
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:40:f1:98:b7:b6:ac:10:36:c5:d6:19:47:5c:74:49:4c:
6a:b8:3e:3e:c3:c8:76:fc:38:f4:79:f8:c0:b4:60:ce:63:70:
42:1c:be:40:94:96:15:a1:fc:73:a5:a1:ed:39:ca:50:a9:c7:
8f:37:95:4f:03:70:d5:97:7b:8c:34:38:cb:6e:86:91:31:ee:
42:3e:57:63:f3:14:b2:d4:74:fe:1c:ff:5a:e7:c7:71:96:7f:
ff:a1:02:97:e0:5f:d7:cb:9f:75:9e:ee:ce:80:4b:3b:9d:ea:
fc:62:4a:3c:2f:0c:c4:ce:0c:e9:66:dc:b1:51:71:95:fe:7d:
c8:0f:d4:66:24:a2:a4:92:8f:a2:0c:c5:42:9e:12:ae:f4:a8:
3e:e9:f3:db:f1:56:51:2f:97:33:b1:e5:ea:cb:39:ac:bf:75:
82:bd:78:de:3b:41:83:66:62:3f:6b:65:2c:7d:a1:5d:d5:0b:
ed:6a:15:a2:69:74:f4:46:cf:87:3c:59:19:fc:19:9e:5b:86:
52:17:39:07:60:51:9a:e2:06:9b:45:f1:e9:9a:85:07:6b:87:
e0:90:8d:aa:99:d8:32:0d:7f:0b:32:63:8f:ee:6b:6f:86:81:
b6:10:d4:bb:43:84:9d:38:44:4c:fa:fb:1d:eb:4a:9f:79:eb:
3e:62:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:58 2026 by rpki-client