Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: BM2ffwr3YdvUKxtL9tb5DAmS/vT5rTV608iQVnIm9qU=
Subject key identifier: 62:AE:B3:81:26:5A:DC:E7:C9:23:4D:D7:8D:45:EB:56:80:75:20:A9
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019D3865756955E92A3AEB993ECD43CEF7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1100
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: EjTNu5FiJ3rQq2CNPZengu3duZIG6V3Ljw1AaQ7EFW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:75:69:55:e9:2a:3a:eb:99:3e:cd:43:ce:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=62aeb381265adce7c9234dd78d45eb56807520a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:0f:5e:9b:99:c6:96:86:9f:87:dc:2f:0a:
ae:3b:ea:86:c2:62:d2:a8:bd:29:c3:0d:04:cc:57:
db:05:a4:13:86:9f:57:f9:fa:04:e3:51:1d:a7:eb:
c6:8a:55:e9:99:7b:f2:d9:2c:43:46:b1:99:75:ea:
c4:03:a1:f6:d0:9b:41:3a:e8:9e:a9:1a:b4:6a:84:
10:f4:a3:be:b1:7e:0d:ec:b2:97:01:25:e4:2d:3b:
62:a4:81:d4:6d:e0:c9:7b:58:4c:0a:28:a3:af:16:
b4:c1:27:4d:4d:7d:e2:0f:38:7f:5d:fc:96:3d:25:
e4:1a:a1:f3:65:4c:0d:c8:80:80:da:c5:c2:69:84:
2d:c5:91:ad:b4:de:ed:6a:4d:5b:9f:1b:0f:e0:03:
4c:5a:27:e5:b4:d9:28:c6:e2:e9:17:42:70:43:11:
77:63:88:dd:db:9c:9b:61:01:71:37:40:c0:08:e5:
79:2a:d5:42:e8:f4:77:70:c2:d6:0d:ed:ca:98:be:
44:97:7f:4d:ce:d7:a2:80:71:28:8c:ff:3c:60:b4:
10:3f:4b:dd:49:0c:82:1b:b7:05:ee:b1:ef:d1:5e:
86:99:83:46:2b:1d:fa:5b:46:2b:94:77:6a:f4:d2:
8b:13:90:fd:e7:a0:75:7f:39:97:78:73:f3:95:4f:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:B3:81:26:5A:DC:E7:C9:23:4D:D7:8D:45:EB:56:80:75:20:A9
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:79:df:e3:3d:27:8a:cd:f0:df:08:7e:83:5d:5b:75:53:2a:
61:f1:3e:a9:c2:a8:8a:a6:e1:8a:81:fc:1c:b6:eb:02:18:d5:
b0:17:74:72:dc:dd:88:a8:ab:8b:aa:da:d8:3b:55:b0:44:d3:
3a:6b:03:a9:a1:55:a4:a8:80:d3:83:8f:1d:c4:4e:f9:ba:90:
53:b2:bb:ea:3a:0f:1d:ff:68:9d:fe:f1:84:c4:c9:68:d5:8d:
8c:e9:80:f8:15:3a:2a:66:27:87:2a:4e:8a:bd:1b:3c:5d:dd:
04:27:6c:40:69:e8:e0:d7:ff:f4:32:2a:23:7e:3d:ed:d4:ed:
3a:63:0b:90:fd:81:e7:11:ed:d5:41:e9:ea:c8:3a:94:15:d8:
81:b4:e2:b9:d3:ca:e4:22:01:e6:82:6a:5b:d7:45:83:d7:47:
bb:00:fa:2e:f0:21:5d:3d:bc:8d:5a:8b:71:45:59:c5:73:cb:
8a:af:5f:76:4d:b5:f9:3d:61:b2:e5:51:9a:32:c1:fc:0b:1f:
8d:a1:fa:16:68:ac:e6:51:40:7a:22:c7:28:0a:85:9d:2c:22:
78:78:9f:86:df:ec:36:8d:ed:7d:b9:ee:8f:d8:25:96:fa:4c:
e0:67:28:b1:53:c8:3d:60:a7:60:d0:1a:0b:99:75:ac:fe:8e:
7f:e3:3b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXVpVekqOuuZPs1DzvfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjYwMzI5MDcwMTA2WhcNMjYwMzMwMDcwMTA2WjAzMTEwLwYDVQQD
Eyg2MmFlYjM4MTI2NWFkY2U3YzkyMzRkZDc4ZDQ1ZWI1NjgwNzUyMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPYPXpuZxpaGn4fcLwquO+qGwmLS
qL0pww0EzFfbBaQThp9X+foE41Edp+vGilXpmXvy2SxDRrGZderEA6H20JtBOuie
qRq0aoQQ9KO+sX4N7LKXASXkLTtipIHUbeDJe1hMCiijrxa0wSdNTX3iDzh/XfyW
PSXkGqHzZUwNyICA2sXCaYQtxZGttN7tak1bnxsP4ANMWifltNkoxuLpF0JwQxF3
Y4jd25ybYQFxN0DACOV5KtVC6PR3cMLWDe3KmL5El39NzteigHEojP88YLQQP0vd
SQyCG7cF7rHv0V6GmYNGKx36W0YrlHdq9NKLE5D956B1fzmXeHPzlU/5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKus4EmWtznySNN141F61aAdSCpMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHnf4z0n
is3w3wh+g11bdVMqYfE+qcKoiqbhioH8HLbrAhjVsBd0ctzdiKiri6ra2DtVsETT
OmsDqaFVpKiA04OPHcRO+bqQU7K76joPHf9onf7xhMTJaNWNjOmA+BU6KmYnhypO
ir0bPF3dBCdsQGno4Nf/9DIqI3497dTtOmMLkP2B5xHt1UHp6sg6lBXYgbTiudPK
5CIB5oJqW9dFg9dHuwD6LvAhXT28jVqLcUVZxXPLiq9fdk21+T1hsuVRmjLB/Asf
jaH6Fmis5lFAeiLHKAqFnSwieHifht/sNo3tfbnuj9gllvpM4GcosVPIPWCnYNAa
C5l1rP6Of+M7Rg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:49 2026 by rpki-client