Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: PGpsBROrm32a/4DC0oIJ4EgYjvTX9RKxsgYKtrXoQZ8=
Subject key identifier: 6D:66:45:45:7F:30:C8:E7:22:EC:95:F4:4A:51:1D:A4:65:C3:83:4B
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019F19B114C6DC65D7C8FA5927DF1336A8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 10C3
Signing time: Tue 30 Jun 2026 18:01:03 +0000
Manifest this update: Tue 30 Jun 2026 18:01:03 +0000
Manifest next update: Wed 01 Jul 2026 18:01:03 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: GZWvhE6XmbpygdAikl01Jf6bhjc6B97aB54ltDy5H1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:14:c6:dc:65:d7:c8:fa:59:27:df:13:36:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Jun 30 18:01:03 2026 GMT
Not After : Jul 1 18:01:03 2026 GMT
Subject: CN=6d6645457f30c8e722ec95f44a511da465c3834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:e5:ee:dd:07:17:bd:68:eb:59:5d:8c:ab:
b0:ad:6c:9a:c7:9f:f8:da:78:47:c1:be:3f:f5:83:
06:b2:30:95:ff:72:a0:16:d8:84:f9:30:14:36:14:
be:1b:7b:22:14:39:09:ce:0b:a0:26:17:4a:2e:57:
d1:5e:3f:b0:09:b0:e4:6a:18:bd:e8:bb:10:7e:d8:
df:f8:81:fa:d9:3e:61:ce:f9:24:ad:fa:e4:a3:bb:
f3:39:cc:90:82:0e:30:27:4a:20:f1:1d:4c:4b:d2:
ce:5d:f1:65:f8:d0:2d:cb:8e:30:27:54:75:4c:e8:
0e:ab:30:88:be:b1:9f:b7:10:8e:4e:de:43:eb:a4:
bf:52:00:c7:90:c9:43:20:fd:f2:06:d3:9c:e1:4c:
b3:d3:a8:87:76:23:7e:ce:49:2e:d0:8a:fc:31:11:
18:1e:52:37:31:4e:27:73:4a:fc:28:d9:4d:b2:bf:
2c:8b:7b:c2:19:af:13:94:f4:a2:e7:ec:ec:27:1f:
8c:b7:ea:f9:d6:e9:05:ae:91:75:ce:84:ae:1f:be:
c5:97:fc:98:cf:0f:a1:0d:41:24:6a:ad:46:94:2d:
ca:b3:be:f3:18:2c:cf:01:e1:94:64:63:56:de:90:
a5:af:d7:02:36:06:1b:46:f5:c6:0b:2a:67:23:5e:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:45:45:7F:30:C8:E7:22:EC:95:F4:4A:51:1D:A4:65:C3:83:4B
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:5e:86:ba:8e:a4:cb:10:7c:18:f8:7d:50:13:16:ea:ba:
46:ba:2e:47:f6:05:fd:47:2b:dc:4d:5a:26:1e:7b:2a:c3:d9:
2d:6a:c9:d9:bd:de:c5:ee:e4:95:f1:b5:5e:72:a4:14:d1:ab:
73:01:d1:7b:e3:15:d5:ac:b9:7f:33:71:3c:75:01:f6:98:76:
78:a4:05:14:a6:cd:3a:16:82:b8:fd:24:49:fd:ef:92:4a:bd:
78:d8:c0:b7:60:1a:4a:a5:71:90:2e:57:22:a7:b8:7a:79:f3:
ba:25:c5:f5:d5:42:04:48:16:08:8f:a5:9f:dc:65:03:76:ab:
5f:a1:5e:6c:0d:f7:61:02:67:ff:09:cd:0d:5b:cb:39:a5:6e:
7c:df:f5:53:c8:24:92:2f:9e:84:ff:42:a6:e6:d4:4d:99:3e:
7f:f8:30:03:09:fc:d0:41:43:30:6f:b7:89:d8:6e:9a:54:b2:
84:43:81:b9:f6:bf:9b:c7:0a:de:19:59:d7:a1:d3:70:3e:d2:
aa:b3:2e:92:a2:b1:d7:a3:ad:e8:40:00:0e:e6:6f:54:50:63:
e9:fa:7a:ac:38:f5:53:ce:c0:3e:8d:04:66:a7:3f:00:82:23:
b4:92:7d:3a:c9:10:a8:c1:45:5b:8b:67:42:64:5d:a3:66:38:
35:a9:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:47 2026 by rpki-client