Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: bePDc9/7rO9jxs1/WfETgCaZFJjsFrwpxTHTxGPwV3Q=
Subject key identifier: FD:0A:B8:3E:15:77:1E:F4:FC:14:CE:B7:28:52:08:1C:A0:5E:00:EB
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019F1189E607B1C8D8CE0AE1AA7C45E4942A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 11F5
Signing time: Mon 29 Jun 2026 04:01:17 +0000
Manifest this update: Mon 29 Jun 2026 04:01:17 +0000
Manifest next update: Tue 30 Jun 2026 04:01:17 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: 56zrDlni7Yv6MKy3JuLtE1+UNJGocvmKI6vtUPouFp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:e6:07:b1:c8:d8:ce:0a:e1:aa:7c:45:e4:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jun 29 04:01:17 2026 GMT
Not After : Jun 30 04:01:17 2026 GMT
Subject: CN=fd0ab83e15771ef4fc14ceb72852081ca05e00eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:fa:36:7b:86:8a:0f:40:52:47:ad:b8:5b:
b2:3b:4a:6f:7f:5a:29:9f:1d:4a:52:0a:ae:f4:40:
29:9a:69:f3:b8:c5:34:06:f0:09:b0:4e:f8:cc:27:
9a:d2:47:31:0a:2c:76:d1:08:a0:42:74:b1:23:8a:
3a:06:ad:e1:c8:c6:71:3b:6c:b0:54:68:dc:9b:29:
61:81:2b:34:1e:86:7a:9e:c4:cd:23:f1:8f:9d:52:
53:43:5f:84:a0:a9:a7:31:d3:99:c0:ad:49:39:2d:
05:26:6f:7a:9e:30:4f:54:73:b7:35:b8:7b:60:97:
e0:45:cb:88:64:c9:d1:91:dd:7f:21:e2:b4:10:4f:
ce:51:2c:4b:f1:5e:a7:95:cb:7f:6b:a7:99:ad:64:
5c:ef:db:3f:0c:f8:9a:19:10:d6:d1:b2:aa:ea:53:
45:e3:f2:e6:a0:44:bd:89:db:b5:b0:e9:d8:27:7c:
54:3f:1e:2b:37:b1:d5:84:46:99:e8:21:58:b4:46:
d9:ac:b5:69:7e:15:59:67:1f:ac:54:c0:f8:23:06:
da:02:d7:39:ec:b0:40:83:b3:eb:3c:b7:17:3e:61:
f2:53:8c:85:54:0a:a7:ba:cd:09:fc:64:1f:23:b5:
72:4b:07:d0:4c:53:3a:83:da:64:eb:ac:f5:ba:7e:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:B8:3E:15:77:1E:F4:FC:14:CE:B7:28:52:08:1C:A0:5E:00:EB
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d5:aa:da:e1:a4:e6:76:42:b6:9e:9d:f2:7a:2d:c3:f7:3d:
36:35:b9:8a:01:cf:64:0c:28:40:ac:2b:6a:8e:2b:b2:16:7c:
71:ec:58:bf:40:45:38:d9:d5:8c:e2:98:9a:5a:5d:fd:30:2e:
a3:50:ae:88:06:55:50:e4:16:d2:20:6d:2b:53:7a:35:21:c0:
97:ee:ca:21:28:e6:c9:ec:9b:1e:f7:b2:6e:1b:bc:17:c1:f9:
35:36:b8:75:2f:db:0a:33:99:4f:1d:1d:bb:e9:ff:65:af:ce:
af:34:51:90:91:77:20:10:ea:18:94:f0:f4:0e:c7:bf:95:c4:
ba:77:10:2e:42:f9:8b:45:a6:86:54:72:3c:c5:f8:07:39:6e:
b4:36:95:41:33:0f:47:3a:11:5f:8d:f0:56:a9:6c:ff:29:19:
d7:95:40:61:1d:cb:38:93:05:f2:94:f4:98:42:82:d7:44:49:
5c:95:1f:1e:3e:d1:f4:a0:ad:23:63:ee:ec:95:57:13:b8:9f:
56:98:e1:33:f7:07:d9:db:d9:3c:1c:c3:ac:89:a9:43:fc:77:
6a:03:82:4b:0e:ea:0f:ef:6c:c9:57:51:2a:70:df:d5:0d:ab:
f3:e2:0a:88:4d:13:40:60:9a:5b:e4:29:24:2b:99:0d:58:c5:
b6:bb:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:01 2026 by rpki-client