Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: d135PrDylhprZDwHMgPHrwH7X9eyYvE4LHWV376lvPc=
Subject key identifier: 67:70:17:31:6A:D1:24:4C:5C:68:8E:17:D1:E6:37:30:65:53:01:AF
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 01A0F2D62C280DFE008C4CBF983EF913C3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 137E
Signing time: Wed 30 Sep 2026 15:01:57 +0000
Manifest this update: Wed 30 Sep 2026 15:01:57 +0000
Manifest next update: Thu 01 Oct 2026 15:01:57 +0000
Files and hashes: 1: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (hash: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA=)
2: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (hash: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4=)
3: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: T1IO5Zgb8XE+v5VUYpDzTuH9fnDpnDns3shIvDPy640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:2c:28:0d:fe:00:8c:4c:bf:98:3e:f9:13:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Sep 30 15:01:57 2026 GMT
Not After : Oct 1 15:01:57 2026 GMT
Subject: CN=677017316ad1244c5c688e17d1e63730655301af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:f2:8d:f5:83:8c:43:27:c4:2d:94:1b:4c:
a9:7d:f3:bb:6b:59:b8:f4:06:87:05:0f:60:5c:04:
9b:10:f4:79:f2:25:6a:a7:a3:c7:7f:cf:08:1e:d3:
06:e3:bb:32:4b:3c:74:0c:d6:01:c1:47:c4:0c:06:
b0:31:30:ab:9e:ca:65:f6:c3:a9:d9:a6:4d:95:3d:
79:1a:47:ba:06:a2:4a:46:a3:85:44:06:f5:50:a2:
9a:4e:d8:de:2b:fe:ca:8c:91:00:f7:21:20:7a:88:
d6:ab:11:5f:37:5a:ee:b8:95:75:d5:37:12:b4:7d:
62:b7:28:22:c4:0e:6a:18:3f:62:e4:f1:9b:36:97:
60:8a:15:db:81:f6:0e:94:3a:b5:90:9f:3f:d8:0e:
55:2f:28:46:6a:6a:09:0c:94:54:d1:cb:16:ea:d5:
a6:12:92:21:5c:f0:b9:40:3c:ad:9b:3f:c8:af:d5:
bc:45:d9:5e:83:46:55:5f:b8:de:e3:d6:02:cd:0a:
0a:3a:44:15:bb:4c:2b:a1:fd:40:7a:bb:ee:80:b6:
ef:b9:f9:5a:27:22:a8:8a:6f:c1:47:dd:b9:a4:2f:
54:4e:53:1b:76:28:db:0f:d8:a6:51:02:49:fb:a6:
a7:4d:d3:70:82:68:a3:69:1e:83:72:2a:6c:ac:3e:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:17:31:6A:D1:24:4C:5C:68:8E:17:D1:E6:37:30:65:53:01:AF
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e0:ef:2a:1a:06:22:70:10:3b:62:ae:62:f3:cc:af:95:85:
fc:96:8f:ea:80:1b:f5:4a:73:d1:f2:39:ea:c6:43:3f:aa:9b:
12:da:0a:a2:16:b7:b4:64:89:59:3e:35:51:6a:1b:8e:ba:e0:
1f:ab:ef:a0:0e:ac:74:b0:17:ef:39:d8:d2:6c:0f:df:5e:ba:
5f:dc:2a:72:65:d9:ac:d9:50:b9:24:01:bc:7d:6b:57:c8:6d:
f4:ba:4b:71:9b:bf:20:29:f7:72:8f:3d:51:3d:c4:a1:c8:38:
78:2c:52:f0:22:1f:86:7d:b4:e7:99:08:ef:85:5b:eb:f5:98:
43:5b:99:28:45:20:df:e2:91:9b:64:ea:b5:5a:6c:f2:61:61:
ec:ed:2f:88:a3:67:f2:08:78:c9:27:f5:d7:c2:24:9b:9e:b4:
65:64:d0:db:f9:7e:c6:c4:59:62:3a:59:68:b2:09:91:7e:1a:
a7:ea:6a:76:9a:b6:b4:f3:de:7f:d8:43:a4:97:02:72:04:c5:
67:6c:44:55:60:a6:7b:d8:73:22:a8:10:1a:52:46:74:a2:c3:
b7:c8:30:ef:87:4e:7e:e1:c0:7d:64:23:6f:d8:2e:7b:92:a8:
a0:93:94:e7:79:ea:93:e7:80:54:f4:07:f1:ca:17:fb:ed:5d:
67:ad:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:00:56 2026 by rpki-client