Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: DgVuo1zsXMaMaP/fOy04eK4jH+6eJrLaWtZ7Lk7YNMw=
Subject key identifier: DF:E9:0C:0C:C4:8E:3A:53:B5:A8:98:B3:C1:E8:0B:68:9F:CE:C3:BC
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 01A154412235CE65FD02528060C7EF9E5A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1AC2
Signing time: Mon 19 Oct 2026 13:01:56 +0000
Manifest this update: Mon 19 Oct 2026 13:01:56 +0000
Manifest next update: Tue 20 Oct 2026 13:01:56 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: lGOIYR3kP+TZkuV369a3GdJILcmartHxPXbEACjIMfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:41:22:35:ce:65:fd:02:52:80:60:c7:ef:9e:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Oct 19 13:01:56 2026 GMT
Not After : Oct 20 13:01:56 2026 GMT
Subject: CN=dfe90c0cc48e3a53b5a898b3c1e80b689fcec3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:86:b8:de:f9:7c:03:fe:f2:04:bd:84:6f:
a8:f3:36:e3:3a:0d:12:cd:fb:80:0e:2b:9c:e4:a3:
87:ea:7e:f1:58:ec:1b:51:05:65:b2:5d:65:10:db:
37:30:50:04:39:04:db:ae:89:84:37:ff:f3:a4:85:
44:be:6b:20:d3:07:e3:ae:0d:29:81:09:bd:7b:b2:
14:77:98:d6:68:4c:9a:ca:d1:71:b5:e2:0d:95:af:
d8:71:a7:10:f7:f9:71:ed:c6:e9:74:21:2c:83:5e:
f6:24:58:e5:42:ed:cd:2f:b5:db:0c:3c:53:43:66:
5c:9f:9a:af:23:c2:55:2f:ce:5f:9e:dc:a3:31:49:
71:b5:ea:0f:d5:39:06:3d:c5:9a:bb:ce:26:f6:27:
04:6c:c4:9a:4e:0f:2a:84:e4:39:b3:62:07:d7:c8:
28:2a:88:e6:b6:a1:69:32:78:98:dc:fb:01:88:47:
6f:aa:82:a7:92:fc:79:e7:c5:64:20:0c:e1:c7:6d:
ef:17:71:74:c4:80:48:39:e1:f1:0b:d8:f9:f4:8b:
58:a4:8f:bb:d4:39:af:12:72:60:14:cd:99:90:d1:
04:9e:32:1b:36:c1:57:e1:db:63:eb:da:8e:bc:d2:
92:2c:bc:2b:21:9c:a9:97:73:b9:3f:73:94:d9:80:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:0C:0C:C4:8E:3A:53:B5:A8:98:B3:C1:E8:0B:68:9F:CE:C3:BC
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:d0:b3:9e:0b:48:18:11:ba:e6:ca:83:a8:2b:09:08:d6:
24:a1:5e:85:ab:af:51:dc:80:b7:c1:77:c8:0a:1e:e4:d0:07:
32:f8:ca:c0:11:59:2c:cb:0c:95:cb:63:ec:19:0f:dd:43:e9:
b0:97:9f:bd:9c:39:7b:3b:d4:ae:d2:68:fa:54:90:5c:ff:e2:
32:a1:fa:17:fd:cf:8d:e8:d9:20:98:3c:e7:19:77:56:39:8a:
06:9d:56:dc:7e:ae:b2:9f:8b:12:29:36:d7:2b:90:58:aa:7b:
83:4d:e8:3d:5b:f2:03:d9:39:b8:97:33:8f:10:c6:ea:84:51:
2f:c7:a0:49:fd:49:e2:9a:a7:48:b8:83:2e:2b:1d:eb:a6:96:
57:14:9b:dd:3c:48:42:8b:3e:fc:b8:d0:be:1e:38:55:3f:57:
2a:53:13:51:39:99:44:2c:81:79:ba:1c:46:22:e2:c8:6c:bf:
a3:c0:09:ca:ff:97:85:8f:09:71:9a:44:ee:87:21:4f:8d:9f:
cd:a0:51:7f:02:11:e6:41:59:a9:1e:16:13:5e:7e:92:7d:12:
3d:24:22:a6:a1:d7:46:78:f7:af:13:df:af:42:40:68:68:a3:
d2:db:bc:b1:39:43:25:fc:46:66:30:6a:53:61:8b:2d:9f:06:
5b:9a:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:28:10 2026 by rpki-client