Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: 4I2iOuX+BvlImgN8X9i72xooko+YrhuMtHHrA13m4nI=
Subject key identifier: 81:20:6B:F2:7C:B2:AC:04:DB:DB:DA:4A:79:1E:FA:E4:BB:80:62:C5
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019D3865C13EBEE90585BFC3152CB338093F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 11F3
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: TA+8w972MzyXtm/Tecu81nEE9c2gn4/nnntaDejf2jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c1:3e:be:e9:05:85:bf:c3:15:2c:b3:38:09:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=81206bf27cb2ac04dbdbda4a791efae4bb8062c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:2c:ca:02:ab:23:d0:8a:34:e3:0c:94:7d:
14:aa:07:a9:ce:b5:8f:72:d0:29:b8:67:15:f4:32:
bb:56:a4:6b:d1:5c:55:6d:e8:5e:3c:aa:c9:45:55:
75:23:5b:67:43:18:6a:12:ac:fb:86:9b:bd:ed:74:
18:9f:17:c0:33:76:84:cb:75:bb:f8:3d:e8:9b:64:
af:2b:4f:be:b1:a3:35:ac:e5:f2:12:a4:a4:29:04:
b8:6b:f1:69:77:ed:cb:ef:a7:e4:ac:7d:fd:b3:ec:
2f:1b:5f:3f:c9:e3:68:38:94:12:b6:60:d4:68:78:
9a:ba:8a:e8:52:09:c8:ed:9f:aa:7e:1d:70:0f:e0:
dc:b8:41:20:a3:82:41:8f:d0:ef:ef:8a:9f:c8:b7:
5b:b0:75:b8:fc:9d:af:8b:f5:88:8c:18:89:a7:18:
03:9b:74:af:94:3d:bb:fb:cf:7b:8f:b5:9d:70:5a:
31:2b:7c:b2:2f:da:90:68:16:56:1f:66:32:84:da:
f5:c7:5b:7f:61:cc:4f:cf:b0:b7:ee:9d:8c:c7:15:
d2:da:45:c6:28:55:2f:14:df:98:e8:f3:3e:59:9e:
a5:27:39:ef:01:df:73:3e:a3:91:8c:c0:9a:1c:71:
50:ee:9b:14:84:0a:23:b6:b9:23:3f:7b:2c:93:3c:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:6B:F2:7C:B2:AC:04:DB:DB:DA:4A:79:1E:FA:E4:BB:80:62:C5
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:48:7a:47:79:96:0b:09:47:d6:55:cc:48:2d:8e:ec:1d:
36:16:84:1a:5e:14:f4:75:43:e9:c0:bb:7a:86:f1:bd:87:c0:
d7:b4:a1:97:c9:ce:78:7d:35:75:ed:34:c8:c0:95:cf:55:46:
93:ce:5d:2c:cf:97:88:45:e6:77:8c:a2:4f:4a:6a:41:82:f2:
86:eb:48:4b:7f:0c:7a:ec:56:4b:cd:dc:0e:21:56:c1:0a:57:
33:9f:2f:0b:c0:c0:df:b9:de:bb:4f:b4:cd:9f:96:3a:96:a2:
7f:6b:9c:d2:aa:f4:e1:79:42:68:58:05:90:bc:b2:1b:f4:3b:
c0:1c:6a:1e:76:04:7b:88:a1:e5:26:d8:38:8b:ef:08:8c:43:
78:c3:7f:1d:7f:ab:ec:f3:6a:20:a1:f7:30:1b:a2:b6:af:46:
34:8d:f6:12:19:ff:69:d8:06:80:be:6c:c0:00:8e:9f:f1:9b:
c6:fe:b0:77:33:0c:68:f0:75:84:78:21:fa:46:97:d7:0c:f6:
ef:83:4e:04:59:25:43:f7:5d:3d:5e:1b:b6:0f:92:b2:a7:5d:
d8:9e:41:44:8a:6f:75:75:5c:f0:4d:84:29:72:10:3a:d5:19:
c7:73:df:be:27:c3:dd:61:4a:c3:f7:a7:fc:36:98:67:b9:f6:
f7:5f:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:59 2026 by rpki-client