Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: l76RjcbhNyMrWp41JWEa/dYEJFscx/v1Pzr9qN4xy9k=
Subject key identifier: 9A:D6:4F:B5:C7:B6:9E:14:BC:3E:3E:1F:53:C9:2E:B1:B8:DD:6C:A1
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 01A023C4529534AC03656F58DC822DD36D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1283
Signing time: Fri 21 Aug 2026 10:01:03 +0000
Manifest this update: Fri 21 Aug 2026 10:01:03 +0000
Manifest next update: Sat 22 Aug 2026 10:01:03 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: MeMov0QJG8/QGsKm/zT1RQeh6nIKjI+9YA1VpTl9tlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:c4:52:95:34:ac:03:65:6f:58:dc:82:2d:d3:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Aug 21 10:01:03 2026 GMT
Not After : Aug 22 10:01:03 2026 GMT
Subject: CN=9ad64fb5c7b69e14bc3e3e1f53c92eb1b8dd6ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:bc:f0:8e:d1:74:2a:5c:18:7b:cd:69:a7:
4d:9e:1a:32:2d:4e:58:a4:45:f7:df:71:42:7a:8d:
83:06:aa:9a:2b:ed:8a:15:9a:e2:2d:d3:e4:f2:40:
a6:87:75:0a:54:07:86:2e:a3:8d:bd:ba:9c:8d:2c:
bf:93:89:b3:4d:d4:a6:05:92:92:c6:26:c8:fb:c4:
1c:57:79:8c:6b:98:0c:c1:53:bc:ae:ce:6a:d2:25:
e9:f8:3e:a1:bc:24:1c:8e:10:d8:87:f0:51:87:94:
78:98:d0:41:f9:6a:4c:79:aa:bb:3a:00:26:82:e2:
6d:ac:be:bc:68:e1:da:87:ca:9d:ec:dd:d9:ec:24:
71:56:a2:1a:4d:d8:16:ca:79:0d:14:f6:f1:d2:d8:
35:b7:05:26:b9:5c:4b:9b:e6:24:f2:33:06:08:68:
f8:2b:a8:cb:5b:da:66:5b:f5:d5:85:b8:5a:87:c7:
44:7d:0d:9c:b7:f2:3b:dd:8c:79:37:41:ae:4a:9a:
32:c2:7b:76:aa:ff:d9:c4:7a:14:8a:4d:87:f2:83:
f7:d0:68:e3:01:ec:c5:00:b7:84:9e:21:57:e1:52:
21:a2:6d:f4:7f:d7:c7:a9:09:68:93:b6:37:08:42:
0f:81:fd:5f:a5:95:5c:9b:6e:ff:6d:e8:6f:89:20:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:4F:B5:C7:B6:9E:14:BC:3E:3E:1F:53:C9:2E:B1:B8:DD:6C:A1
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:e0:aa:c9:90:9e:78:93:f6:b7:d6:f7:1c:47:e0:04:76:
be:07:8f:81:23:0b:ee:fa:47:a0:83:ef:16:ee:8e:06:22:1d:
91:f4:d0:2f:1b:c7:72:57:9e:bb:a2:61:b8:89:3d:5a:be:9e:
f6:c0:72:7d:15:e4:44:dc:f8:1a:6d:7e:4f:11:2f:f3:cf:59:
3b:1f:30:c0:0a:fa:3d:ae:48:2b:53:49:27:05:54:02:c0:c1:
95:e1:03:d6:b0:72:46:c8:d8:68:d5:63:ad:66:47:bf:da:21:
da:a4:81:7e:5a:a6:c4:53:17:21:b7:35:7a:c8:a6:e3:23:8d:
97:2b:9c:34:5c:85:fb:e4:cd:e1:38:4c:e1:fc:87:e4:46:fe:
e1:b8:79:ad:93:7b:32:3c:d0:cd:f6:6b:2d:c5:00:42:fc:56:
94:e7:f5:b5:7e:b6:32:f5:c1:ce:ec:5e:6e:29:9c:af:23:f7:
8b:cf:bc:87:5b:d6:2a:f3:17:cc:ca:d1:c2:f6:d8:93:c0:53:
88:56:70:a5:4f:3d:98:72:97:08:07:c2:45:48:31:d2:30:a2:
c9:63:20:c0:1f:2f:27:ce:8c:e5:07:a0:ee:eb:23:d8:5e:5f:
58:6f:27:1e:63:58:af:b0:0f:24:62:46:18:65:b4:3a:23:a0:
26:91:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:34:09 2026 by rpki-client