
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File: t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier: zs0kkcjZxmuBt+4d6GHnOKTOHsngOTHuLzc7dvRA1xI=
Subject key identifier: 0B:C8:4C:28:D8:0D:21:75:2D:D8:DF:2D:F9:F1:8A:56:E6:A0:E3:56
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer: /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial: 019D26CD1964347EC3FAE03747877215D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number: 12EA
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: An+6jXpYPXBgZXy4XAt0XqpkJ7DCP8OLpwHS76cvbMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:19:64:34:7e:c3:fa:e0:37:47:87:72:15:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=0bc84c28d80d21752dd8df2df9f18a56e6a0e356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:c5:ea:bb:5f:41:37:cd:7c:c3:50:78:a2:
15:af:44:11:dc:b2:43:5a:ff:48:71:aa:f2:a1:87:
a5:94:e4:bd:ed:cd:f1:43:11:17:89:a7:32:9e:f9:
63:61:2a:56:25:ce:75:cc:09:b2:df:78:cc:0a:e9:
94:72:24:cd:11:47:cf:48:9a:e2:e5:c6:67:9d:10:
c6:3f:59:74:96:4a:0c:28:05:29:39:72:56:6e:e2:
42:fc:8c:92:fd:10:bb:60:0b:50:e7:3d:2b:5a:8c:
bf:76:ff:34:c7:9b:f5:78:69:41:8d:8e:04:24:ca:
dc:5c:cf:62:59:60:07:86:36:8f:54:85:0b:4a:3a:
77:d8:f0:07:e4:0f:7b:c2:16:ab:ad:13:d9:86:92:
a3:72:e9:9c:9b:33:20:ee:7b:5d:b9:13:32:ea:c9:
79:d2:6b:cc:b5:75:5d:bb:35:ba:ea:be:b8:3d:12:
a8:56:9b:ec:61:c6:07:85:14:f5:12:d3:82:1d:ff:
80:be:7c:53:88:9b:e9:3e:22:46:64:ba:c6:5c:1e:
d6:85:a5:d5:39:9f:85:04:c9:c2:ad:d8:a9:11:d7:
1f:f2:c3:e3:e9:e4:d7:b4:be:a4:ab:19:a7:ee:36:
02:45:7c:ad:a9:fb:35:61:1d:0f:a5:09:73:1d:9a:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:4C:28:D8:0D:21:75:2D:D8:DF:2D:F9:F1:8A:56:E6:A0:E3:56
X509v3 Authority Key Identifier:
keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:25:2d:fc:bc:75:79:6d:d2:8a:d1:c2:dd:c6:09:d4:39:
1a:00:ac:39:40:73:49:a3:a5:a2:82:e3:3b:59:f9:6a:b8:d1:
46:50:a7:be:f4:2e:a5:b7:61:95:86:7a:e0:3a:58:90:08:70:
74:41:57:11:04:b8:fa:41:d8:5b:50:b8:91:91:ff:3e:9d:3f:
57:0d:f3:92:3f:f4:89:f1:e1:d9:ae:5e:d6:81:bd:4b:d0:eb:
d1:23:aa:26:51:7a:64:02:f3:d7:b1:a8:0d:c2:f0:54:20:bb:
49:99:e2:47:60:b1:4f:c9:1e:4a:05:be:22:da:99:f6:8c:df:
45:ea:32:16:35:b7:6b:a7:0b:57:d6:5d:9d:33:ad:41:92:03:
ef:e0:c3:8b:de:c7:ab:36:eb:45:ee:e9:f2:71:ad:ac:ba:c1:
55:ee:6b:a0:d2:7b:e4:25:20:9e:9b:6d:20:f3:05:3c:1d:be:
09:61:dc:8c:ed:bc:50:89:51:be:56:68:9e:cd:1f:31:6b:a8:
1a:c4:87:55:e7:e3:48:44:27:c5:82:c7:79:33:3c:b4:0e:93:
bb:2b:b2:21:6a:a9:93:17:cb:2e:56:77:74:f4:8b:49:2b:49:
37:08:50:f0:1a:40:0b:6f:ba:0e:49:48:f4:85:43:8c:1e:00:
d0:62:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:13 2026 by rpki-client