Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
File: t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft (raw, json)
Hash identifier: L5UDCxrP3mWL+3i/ynfsjT89Ug6IpGYu9oGZWax83fI=
Subject key identifier: B3:CF:DA:97:BB:D8:69:AA:9C:6D:41:EC:DC:3A:7B:9A:BD:A7:35:78
Authority key identifier: B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
Certificate issuer: /CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Certificate serial: 01A0E92E295D15132A2561BF3C9AE8BB5B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
Manifest number: 92
Signing time: Mon 28 Sep 2026 18:01:51 +0000
Manifest this update: Mon 28 Sep 2026 18:01:51 +0000
Manifest next update: Tue 29 Sep 2026 18:01:51 +0000
Files and hashes: 1: 40Yv3FJarP6L9fctYDOp2f3FVUM.asa (hash: jpERvaDO1bnIeXcly3KkynVSBYXXgKkGP8cwdmaFv9U=)
2: t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl (hash: nVBqt1k/kcu8+n8JAvHBBzH+fgPwlwSkZ+9cSlstMzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:29:5d:15:13:2a:25:61:bf:3c:9a:e8:bb:5b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Validity
Not Before: Sep 28 18:01:51 2026 GMT
Not After : Sep 29 18:01:51 2026 GMT
Subject: CN=b3cfda97bbd869aa9c6d41ecdc3a7b9abda73578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:c5:9d:c0:b5:7a:f8:68:80:9b:25:57:b7:
3e:f1:5d:90:90:ff:9c:06:a7:e5:43:b6:17:9c:a3:
56:8e:14:df:63:41:2d:3d:d8:1e:8c:95:62:28:39:
fa:15:09:49:02:45:5a:f5:5f:d2:e8:58:b2:cb:71:
9e:16:12:b1:3b:81:54:26:d1:41:79:c6:41:74:8c:
b0:a2:82:5c:cf:2f:e1:49:d6:a7:db:12:fb:ae:41:
ad:71:41:f5:28:45:3a:6f:24:26:ca:f4:4c:c3:ec:
e8:06:59:2a:c2:dc:29:d3:c6:a2:51:35:59:78:5c:
1b:a2:86:43:35:40:5b:66:85:7e:32:4b:43:8a:9d:
b0:92:36:64:8d:36:f5:1a:d1:9e:60:3f:7c:bf:05:
d0:5f:72:d3:89:37:75:52:d2:4b:9d:43:fd:5f:53:
9c:29:1b:db:f4:fb:1e:c6:3b:8f:0f:dc:99:79:e2:
11:6d:77:fc:06:d8:e4:ef:38:7f:bd:96:e5:ec:ac:
01:89:72:98:aa:6c:fb:04:bc:13:b9:b0:32:72:a9:
e0:97:2c:e6:09:b8:58:d6:c1:19:73:06:e4:30:da:
ee:3a:e3:49:79:46:99:4f:75:3d:2d:09:1a:3a:f5:
ad:32:5f:de:f6:29:60:a5:9b:52:34:23:f6:06:74:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:DA:97:BB:D8:69:AA:9C:6D:41:EC:DC:3A:7B:9A:BD:A7:35:78
X509v3 Authority Key Identifier:
keyid:B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:20:11:7d:20:aa:f7:52:98:0c:5d:24:92:a9:e0:65:c3:93:
d1:9a:44:12:fc:66:0f:e3:5e:8f:c3:00:5b:11:cb:8c:97:f0:
a0:c6:b6:ff:6a:1e:bd:06:e3:3c:6d:22:6a:6f:9e:71:6b:1e:
df:17:fe:8b:94:d3:e2:84:52:d0:41:cc:0d:95:1a:97:af:cb:
1d:cb:34:12:05:98:9b:68:1d:cb:6b:50:a0:46:c3:3a:96:30:
21:59:70:17:a0:42:60:66:4a:ba:38:d3:8c:2e:8c:06:74:5e:
15:be:55:00:78:1b:22:3d:0e:b3:89:88:be:dc:f2:e0:95:99:
fe:b0:9b:c0:dc:e7:b1:17:ba:84:4f:b8:16:74:96:c7:36:cb:
6a:78:ce:86:6d:d0:c7:6d:aa:04:44:dc:90:c6:41:c4:b6:7a:
dd:a2:ca:e5:e7:a0:08:52:1f:7c:48:03:01:fe:dc:dc:2b:fe:
01:92:94:88:d6:76:d7:71:02:51:c1:86:44:51:a3:94:81:3d:
e8:dd:80:d4:2b:3b:e7:9e:ef:7c:ec:07:ae:e8:17:b7:f4:41:
9d:37:40:0d:3f:f7:0d:2e:31:3c:4c:46:cf:51:5c:e8:b2:b1:
e4:f4:85:7c:bd:6a:c1:8b:ec:d1:1d:af:da:cb:5a:47:37:9e:
ce:da:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:00:05 2026 by rpki-client