Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: Oe8Zx14c0q/EGn13LusuPt+2ozMcvf7Qxp8iRLaYhm4=
Subject key identifier: F3:E6:8E:FE:16:AE:4C:C7:AE:AB:86:41:E6:DE:7B:0D:78:FF:7D:35
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019E246ED8FDD533B5779E57AB62AE6209FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 120A
Signing time: Thu 14 May 2026 03:01:44 +0000
Manifest this update: Thu 14 May 2026 03:01:44 +0000
Manifest next update: Fri 15 May 2026 03:01:44 +0000
Files and hashes: 1: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (hash: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA=)
2: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (hash: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4=)
3: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: 1vGmMfrRsyvGRjfafdK+trRMW9me0TmU/d9omjd+HNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:6e:d8:fd:d5:33:b5:77:9e:57:ab:62:ae:62:09:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: May 14 03:01:44 2026 GMT
Not After : May 15 03:01:44 2026 GMT
Subject: CN=f3e68efe16ae4cc7aeab8641e6de7b0d78ff7d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:87:7e:9c:4c:0a:5e:2a:65:89:31:c0:6a:
aa:f7:1d:14:06:29:32:77:8a:54:70:d1:d8:89:63:
d2:d9:ef:89:95:3b:97:a1:5f:82:96:76:ae:a9:69:
80:b3:d4:b8:d8:6e:b5:75:ef:68:9a:4a:e0:8e:f7:
9f:10:b5:8e:62:d9:1c:29:72:2c:12:f5:f7:3c:45:
98:11:32:03:fa:3d:b5:69:b1:39:c0:57:bb:6f:e9:
77:c0:91:ac:3e:2a:be:6f:95:7d:29:d8:6a:3a:c3:
06:60:fc:73:c2:41:11:ed:5c:e0:97:c7:d8:ff:40:
50:fc:16:a3:fa:b4:2a:da:83:e6:01:13:c8:76:f7:
df:81:ec:ff:13:ff:53:40:4d:8d:f1:6f:8a:3f:3f:
f0:e9:97:15:ac:57:5e:cc:ed:64:ae:f0:64:74:56:
8a:9c:59:95:ae:5f:13:b4:52:e1:4c:89:c1:a8:8f:
06:d8:77:01:5a:70:8b:8e:72:a1:a3:03:44:db:ef:
d3:57:0d:f8:81:9b:48:0a:cb:7f:89:15:4c:af:d2:
8a:0c:b2:3a:1e:ea:0d:d1:14:3b:68:21:10:46:5c:
b3:e7:7f:6c:34:05:de:ca:bf:90:69:36:c0:1f:2f:
14:82:44:b7:35:14:85:e9:c4:69:3d:c9:27:93:92:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:8E:FE:16:AE:4C:C7:AE:AB:86:41:E6:DE:7B:0D:78:FF:7D:35
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c0:17:e2:73:d8:35:27:10:22:0a:66:69:62:42:90:75:a7:
44:d1:12:81:db:40:37:3b:b3:ef:40:a9:91:c0:be:c5:3a:50:
99:7e:f7:32:8d:b4:1d:3e:b9:b9:df:11:9f:d3:ac:b7:1d:6c:
8d:8a:be:52:bf:94:94:58:13:76:94:40:4a:50:77:e4:b0:14:
10:11:c1:d2:ca:b0:49:e3:39:56:98:35:76:8f:c2:6e:26:01:
d0:90:0f:c3:ab:ef:01:9b:9c:9d:5b:19:2e:33:e6:a5:20:f4:
02:e4:35:bf:06:1d:c6:52:b1:5c:10:50:16:9c:63:f9:a8:80:
22:3c:30:17:de:1e:bc:bc:5b:a7:78:41:e6:26:a0:a3:47:73:
54:d5:60:d8:2c:c1:3d:69:8d:ef:2b:ec:f9:90:34:ef:ad:11:
b7:ee:a3:53:ce:c3:6b:8d:fd:dd:09:8e:40:e9:c8:1f:32:eb:
4b:50:4c:2d:1b:d9:e6:83:50:8a:dc:b6:18:c5:c4:45:96:33:
09:a5:df:97:a1:b0:4b:da:3c:04:68:27:39:02:71:f0:c4:24:
8b:dd:dc:42:af:3e:77:19:c1:f1:47:a3:5c:ca:c6:59:45:53:
f7:e2:88:91:91:19:8c:be:4f:89:a9:d0:74:d0:73:ec:10:b6:
8d:d1:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:58:29 2026 by rpki-client