Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
File: mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json)
Hash identifier: 0LJxrZMZd2uFHoDpTFOhHLVxGQoucClHKrNcuL/VfpQ=
Subject key identifier: 12:11:D1:BE:D6:1A:E5:A4:69:69:67:38:EF:46:ED:B1:8E:D8:F6:F6
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial: 019F935C4DE53E2CB8EF54BB03F15F3A1717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
Manifest number: 025A
Signing time: Fri 24 Jul 2026 09:02:07 +0000
Manifest this update: Fri 24 Jul 2026 09:02:07 +0000
Manifest next update: Sat 25 Jul 2026 09:02:07 +0000
Files and hashes: 1: O9rqaflBtIrZMFU4yx_kg_9xPyU.roa (hash: 5bvfMOGO3bzYhXnBDQ9LEiKMN4Sn1bfX7T0pXHZoGE8=)
2: QigmVL9RdKBrOmb9TPbEmGlKGvI.roa (hash: aKzMVPifV/PQNyojx6n88SRwR1h+51YRrN3o4ao5DFk=)
3: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: nJ3CGOZrTPACiY8kVTV5rur8802D7v35b7sS6q2ImEc=)
4: nSTE3QopaGrpLJrHMCi5I8bZ5bw.roa (hash: baxR5slRLxHVOmtRsQKscXZczn9OJHENPHGtMrxxtQk=)
5: wzhvVBisYwpfDxdiNkmYJjywz5I.roa (hash: vkonNhWWhUvXolDJXrRgZMBJWgHtThs0/Uh8jZJo5Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:4d:e5:3e:2c:b8:ef:54:bb:03:f1:5f:3a:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
Validity
Not Before: Jul 24 09:02:07 2026 GMT
Not After : Jul 25 09:02:07 2026 GMT
Subject: CN=1211d1bed61ae5a469696738ef46edb18ed8f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:e1:25:ec:b8:cf:bf:41:9b:bc:11:ba:66:
10:41:a8:69:01:a2:18:b0:38:2a:58:5d:c3:b1:e0:
07:b4:d2:86:64:e3:ee:48:bd:73:8a:e4:60:83:14:
40:66:77:a9:00:b3:25:9c:9a:d2:39:fb:fe:36:a4:
87:35:94:c0:d6:3e:e0:21:50:89:8a:96:6f:bb:54:
9c:96:a9:4f:e6:42:71:f4:99:25:92:57:d6:f8:95:
6a:91:98:90:b8:9b:32:ae:2a:05:c5:84:bf:25:e1:
91:68:c7:6a:65:47:0f:af:0d:2c:0a:57:58:2e:63:
a7:bf:5f:fe:d5:cd:8d:2d:9f:05:4b:b2:ae:44:51:
ce:fc:0e:2f:5f:97:ee:52:93:a3:31:48:64:bf:d3:
35:8f:ae:d4:ae:27:d8:57:52:12:16:0b:78:a8:b2:
6b:fb:8e:57:f4:0f:32:42:f8:74:5b:08:ad:fe:97:
b6:4e:5c:22:76:52:11:93:dc:bf:65:b5:f8:76:61:
20:98:c1:0e:05:f2:24:d8:39:1b:85:60:fa:3f:b3:
f6:55:f2:02:e2:bd:b6:22:a5:d5:25:91:7e:bf:c8:
ef:ec:ef:2e:4c:72:b2:a0:e0:17:dd:c0:0d:c2:da:
d8:f2:da:ae:0d:a0:ad:19:b8:d8:af:37:5f:b4:8b:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:D1:BE:D6:1A:E5:A4:69:69:67:38:EF:46:ED:B1:8E:D8:F6:F6
X509v3 Authority Key Identifier:
keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:74:55:ba:91:dd:97:f2:dd:26:50:a9:66:28:70:08:c2:28:
a9:7f:7b:0c:9f:31:9c:a0:04:f3:5b:44:6a:3d:fa:a4:4a:0f:
3f:9b:14:73:32:be:3c:ae:d4:8f:7a:94:f4:1f:82:4e:dc:ea:
fd:22:c3:a3:33:ef:f4:6f:26:12:92:94:af:45:34:01:2d:cf:
8c:d6:14:ec:02:f1:f8:d8:4d:fb:d4:4d:8b:50:44:3e:87:05:
41:ee:a9:21:8d:c4:69:50:ae:66:b8:ab:26:25:58:e2:b0:ac:
4e:77:b9:02:32:1d:df:4f:6d:63:a0:af:4c:70:d9:38:2a:3d:
80:b2:25:73:97:eb:b9:33:eb:66:88:9a:5a:43:76:6b:3c:a3:
37:13:f7:87:76:8f:1b:d9:e7:5c:6e:45:39:57:3b:54:2d:db:
ad:c5:b1:27:a4:2b:4d:f4:40:93:34:30:3d:95:c0:78:22:9b:
5c:f9:d2:0f:8d:df:77:13:be:c1:09:5d:bc:77:da:b7:79:f0:
3c:35:b1:47:0f:76:72:60:34:e3:52:4d:75:97:0d:de:db:81:
37:f6:51:d5:06:81:e2:cc:1c:14:e3:17:8c:64:53:a3:73:d9:
9b:8b:57:6d:12:e2:d1:e3:78:2a:40:90:74:80:e7:ee:e8:d4:
4f:7d:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:29 2026 by rpki-client