Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
File: t117sKuToIYWkQen4ubKOCYZ5_Q.mft (raw, json)
Hash identifier: L8hc3YhtPUHNXF18uFeLu+8CcQ60/PaiJMPYLkhuTno=
Subject key identifier: 90:8F:19:F6:6F:85:5C:B7:B6:ED:BE:67:D6:0B:04:0C:2E:57:0D:59
Authority key identifier: B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
Certificate issuer: /CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Certificate serial: 01A104A51416E4282BC3C1F246FD5A41C35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
Manifest number: D6
Signing time: Sun 04 Oct 2026 02:01:29 +0000
Manifest this update: Sun 04 Oct 2026 02:01:29 +0000
Manifest next update: Mon 05 Oct 2026 02:01:29 +0000
Files and hashes: 1: t117sKuToIYWkQen4ubKOCYZ5_Q.crl (hash: T4kyAw3nj67eRlCAILL15kwqnc+noIj6fDbPZBqD3Qw=)
2: ySPvKfV_aWMJHJvsDTSVOAVpx9Y.roa (hash: yQfb3ZLV9S1QRrvHBaPCBs3YoUagPeU3hc7wS3zLy1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:14:16:e4:28:2b:c3:c1:f2:46:fd:5a:41:c3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Validity
Not Before: Oct 4 02:01:29 2026 GMT
Not After : Oct 5 02:01:29 2026 GMT
Subject: CN=908f19f66f855cb7b6edbe67d60b040c2e570d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:17:3b:9f:2e:e5:d8:e3:89:b2:7c:a0:59:
7a:5e:a6:5a:ae:f1:2d:e2:50:9d:da:72:3e:a2:3d:
32:f3:30:e5:c5:9d:92:0f:07:29:cd:5a:ef:12:77:
4e:ab:cd:28:13:90:14:0d:9c:9d:7f:c3:7c:5e:b3:
bb:f3:58:dd:ab:30:aa:85:54:42:ac:f8:a8:68:62:
47:dc:fa:a3:c5:08:1f:fc:bc:b1:34:bd:3a:a1:53:
94:49:f1:63:e2:75:00:8e:a6:46:3d:c6:36:4d:5f:
69:a4:6b:72:cc:67:1c:bb:80:e4:82:aa:51:79:7b:
1a:b0:f4:9c:9a:6a:71:2a:44:71:b6:7e:ee:ee:bf:
76:02:53:fe:01:a6:e0:29:df:b8:d9:82:1c:10:10:
1d:31:ea:64:c2:47:8f:bc:69:e1:7c:96:64:15:74:
13:db:3e:09:ef:6d:77:b0:57:2e:b3:3c:f3:9e:f4:
73:17:44:3d:4e:5a:be:b1:4b:51:e0:fc:00:0c:62:
e3:8a:0f:3a:87:46:c6:4b:a3:ea:0d:e7:01:0b:a5:
40:34:c8:94:67:2f:7e:45:cc:32:0c:67:64:a4:51:
30:8c:26:02:bb:e4:a2:2b:e6:84:42:73:78:16:f9:
85:18:d5:86:4b:7c:11:01:24:49:33:8a:29:78:78:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:19:F6:6F:85:5C:B7:B6:ED:BE:67:D6:0B:04:0C:2E:57:0D:59
X509v3 Authority Key Identifier:
keyid:B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:b9:21:e4:e0:4b:95:e4:9e:66:54:18:d4:69:4b:4d:21:
1e:5d:17:7e:ba:e9:35:55:28:93:89:97:4c:e5:9c:5c:78:a3:
70:c1:73:f0:ca:2c:7b:03:2b:f4:87:7c:ff:75:96:00:ca:db:
15:84:47:04:dd:d1:c9:ed:4b:2a:21:4d:46:4a:06:48:64:b6:
dd:bc:4d:97:a4:6a:72:55:9e:f5:26:cb:74:ae:11:a2:88:c0:
fc:0e:c0:7e:77:71:d0:e8:66:5c:f1:d0:9b:ae:19:f3:d1:47:
4c:1b:dc:a9:c5:e3:d3:06:bf:d6:44:37:be:19:d0:4f:fe:b7:
16:9d:97:c9:99:a1:2c:e3:88:ae:f0:25:9f:69:bc:4d:65:9b:
63:1d:f4:2e:db:aa:49:c2:28:87:8a:4a:ed:fa:85:74:a1:f3:
77:df:94:fe:dd:3b:74:8f:9c:e5:17:03:88:d7:74:9b:0a:27:
61:a7:24:ce:26:25:82:04:53:13:33:a8:c9:23:ab:00:79:8a:
4a:58:25:a3:e5:45:54:33:4b:6c:c4:0a:48:c2:55:e3:08:8a:
a5:45:97:5b:dc:ec:f7:10:24:41:e5:92:8a:75:30:be:d5:79:
02:40:d4:ee:0a:9a:e9:80:35:8a:4e:61:f8:77:a0:5e:88:4b:
53:5d:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:58 2026 by rpki-client