Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
File: t1ELZRv73wnISGqBNiAABb77SX0.mft (raw, json)
Hash identifier: DHhboxv2cVrzO76yfRRWl8j9iZ9qRLo47H+baJdhpK0=
Subject key identifier: 86:0E:41:F2:48:AD:19:3C:D0:9D:5F:34:68:42:B2:38:25:7C:B8:E0
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 019D27724D35760A5E1A0677E850C3A71779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
Manifest number: 0F06
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: eXDqAVaIQyjrBekMkhiLLXazNGo.roa (hash: mx0bQziTxDdXw4zJxmPWo837bOwGLkOKhTyelVbdF1g=)
2: t1ELZRv73wnISGqBNiAABb77SX0.crl (hash: HDvFbTm6ahQYgHxXE+xULO0iz6nk33HGx3sLgxBcdLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4d:35:76:0a:5e:1a:06:77:e8:50:c3:a7:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=860e41f248ad193cd09d5f346842b238257cb8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:9e:11:f2:42:84:4c:cc:90:48:6d:a1:24:
a8:70:e5:9f:ab:d5:e4:f6:89:f0:b5:61:3f:2a:45:
9c:9a:5a:99:34:01:79:a8:c4:fd:73:d9:fc:58:23:
64:f8:aa:3b:17:2b:c8:45:cd:72:c6:bb:79:e4:5c:
af:eb:be:7a:ac:39:4b:9e:84:54:5a:5d:16:10:db:
63:50:b3:63:17:b1:e5:5f:8e:10:a7:53:30:47:96:
7e:4a:6c:f9:a0:6a:0b:8e:1c:50:73:65:47:90:88:
ad:14:a1:e0:d6:c6:d1:82:23:ce:94:18:27:23:a9:
b6:9a:e0:3e:fa:87:63:7d:ca:11:4f:4b:4a:80:fb:
c0:dc:0f:f7:aa:9c:73:10:ea:c9:7a:ba:e9:0b:2c:
1f:b5:b9:ee:35:15:9d:f9:9e:71:71:5b:52:2e:94:
16:26:04:3e:c5:94:0f:b4:0b:d0:df:ad:cc:9c:6b:
26:1e:c8:e5:ac:8e:3f:00:ae:f0:df:da:04:37:25:
92:09:56:26:b4:f1:66:47:b4:65:19:de:51:ea:86:
aa:42:56:ad:f7:77:9c:d0:33:2c:25:84:0a:af:d7:
16:72:a9:9c:f5:c8:f1:07:f7:b9:c2:72:b5:5a:d6:
ab:68:fb:df:4d:c8:78:ee:56:3d:a4:9d:da:10:ad:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:41:F2:48:AD:19:3C:D0:9D:5F:34:68:42:B2:38:25:7C:B8:E0
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fa:63:0b:ba:31:10:fa:07:b9:7c:d4:49:5a:dd:c7:0e:45:
81:70:0b:4e:ea:98:3a:37:f2:55:25:b2:82:a4:d8:77:25:9d:
ef:87:e9:75:24:f0:39:92:2f:cc:f7:96:19:59:bb:59:5d:09:
64:bb:52:61:f6:90:f3:04:bb:a3:9e:e0:a9:8c:73:a7:4f:a1:
73:14:aa:0f:54:10:01:53:45:48:0a:30:93:23:b3:60:a5:b7:
2a:6f:b1:4a:77:db:5a:20:1a:29:0c:94:04:14:18:87:5a:92:
32:c7:47:9f:55:4d:c9:9e:14:9d:b7:32:c1:d9:68:79:d7:f7:
8c:21:a8:8c:ad:ae:ca:aa:da:e7:d2:cd:ff:dd:e6:d6:a4:77:
a4:8f:da:3e:88:6f:3e:6f:2e:23:e6:8f:75:7b:cb:87:6e:c2:
5e:99:a8:b5:ad:ad:7f:2c:7e:ad:0f:83:50:2f:0b:19:32:4c:
c0:6e:34:64:f2:f5:cf:c2:ff:11:ca:65:8a:cf:37:ed:31:3e:
02:a3:66:06:29:a4:43:92:2c:3c:8a:fb:98:7c:4c:c7:c9:a2:
5d:57:1d:bc:aa:df:66:10:47:7d:27:f2:56:10:fb:43:e5:e5:
8f:96:3c:05:39:d1:24:be:b5:d7:2f:6c:31:ce:63:33:f2:2e:
0e:68:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:39 2026 by rpki-client