Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: dJD/CXJdpp3SAX6meQfteb58gKoUafu7PARZXH045Cw=
Subject key identifier: 50:04:DC:44:3B:E6:EF:2E:58:44:FF:A0:6E:F9:B9:0C:14:6D:89:A0
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019D258419EBE2EDAFFFA4AE01BC1ADD4445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 1186
Signing time: Wed 25 Mar 2026 15:01:47 +0000
Manifest this update: Wed 25 Mar 2026 15:01:47 +0000
Manifest next update: Thu 26 Mar 2026 15:01:47 +0000
Files and hashes: 1: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (hash: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA=)
2: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (hash: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4=)
3: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: Fn8KA+vyB1XL3uollkoh8iyjCRhoouZ78bT1/qpkKU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:19:eb:e2:ed:af:ff:a4:ae:01:bc:1a:dd:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Mar 25 15:01:47 2026 GMT
Not After : Mar 26 15:01:47 2026 GMT
Subject: CN=5004dc443be6ef2e5844ffa06ef9b90c146d89a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:3d:5b:a6:1f:bd:4e:d2:ec:89:bf:85:f4:
27:43:6c:3a:b7:30:1d:5a:9e:b2:fe:02:b5:38:18:
4d:97:54:7c:3a:11:cf:6c:db:82:e2:62:3b:d1:5a:
70:f1:24:09:f9:07:bc:b5:6e:ed:52:b7:91:5a:fb:
39:34:c7:a3:95:4f:4a:5b:fc:2e:72:7b:5d:a1:6e:
90:4e:3b:85:93:e3:c2:0d:5d:3d:0b:47:db:88:b5:
11:8c:6e:84:5a:66:6b:5d:d1:46:78:bf:03:e3:a9:
19:8f:d9:3f:30:61:a4:c4:d8:63:fb:43:ac:18:dd:
be:62:5f:37:a2:82:27:fc:e6:6c:e7:5e:ff:bd:2b:
a2:67:d1:b2:b5:06:ca:8d:bf:26:40:76:d3:1a:24:
48:c6:74:62:57:80:ba:68:b5:79:6f:60:0f:69:8b:
d1:92:b6:7c:33:f7:21:03:3b:31:2d:c2:91:73:ed:
f5:79:9b:11:41:e6:85:99:89:15:62:ba:2f:62:80:
b2:ac:3c:22:c7:a8:ee:84:27:1c:7c:8f:ff:ba:2f:
e3:fe:c0:0f:68:c8:c8:d8:95:35:96:1d:ff:11:51:
26:71:fb:20:a2:f0:a8:4d:ba:71:68:a2:43:3d:b7:
37:17:38:fe:7f:68:62:08:d9:35:67:1a:45:dc:e7:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:DC:44:3B:E6:EF:2E:58:44:FF:A0:6E:F9:B9:0C:14:6D:89:A0
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:37:7e:a6:98:ba:ae:d4:3a:b7:7b:bf:01:e2:da:ea:9f:b8:
78:d5:08:47:15:7f:b3:34:f5:75:34:c2:40:ae:bc:32:8b:d2:
20:63:52:0e:ed:d7:7d:14:51:25:c4:4b:10:7a:06:14:d4:a9:
4e:d3:4e:0f:a3:4b:df:1d:d0:44:e3:65:37:9a:3f:5f:6d:77:
d4:20:29:d6:0a:6f:72:5d:f8:17:4b:56:0d:e7:55:7e:2e:91:
c5:14:f7:84:f0:40:b7:77:87:0d:8e:44:e9:b3:b4:39:be:ca:
c8:6d:0c:19:4c:e1:6f:4a:f1:3d:9f:5b:93:02:74:82:36:3a:
ac:cc:23:0a:86:8b:2a:7c:4f:34:10:ee:4b:74:9d:09:fe:64:
7f:74:70:5f:98:d2:22:58:08:69:0a:67:df:d9:ce:c8:9b:4a:
27:e7:1e:1a:7e:a1:e6:9c:4d:e1:7f:9c:4c:c9:1b:4a:ec:f9:
95:93:ee:db:cf:53:49:ab:5d:33:af:48:16:c6:2e:9f:e6:34:
db:d0:6b:aa:7c:33:4e:4a:4b:3c:26:52:c5:51:61:fb:8b:ae:
0b:ab:64:2c:23:ef:a6:7a:6f:93:6e:da:7b:ee:1d:fc:d4:29:
d9:79:37:5b:45:b9:f0:b8:71:ed:52:f0:7f:b6:01:3e:44:6f:
5f:9d:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client