Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: +gt+d9K4s8wVB1Cuwb34i3crEi762VuaD7LdPA8QnIA=
Subject key identifier: 61:3E:1A:5B:C7:35:2B:CF:E0:C4:DB:B1:DE:B7:3E:48:00:D1:07:BE
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019EFBDDFED770186271CF1F7364079EB0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: F5
Signing time: Wed 24 Jun 2026 23:01:30 +0000
Manifest this update: Wed 24 Jun 2026 23:01:30 +0000
Manifest next update: Thu 25 Jun 2026 23:01:30 +0000
Files and hashes: 1: 5pQ-bfi33kIelyHj5wfs5UdBIE0.asa (hash: 2h4GfTHJtEG4yFe2c9k9qyXukdri+wOp8aMCRZWUU+E=)
2: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: 5Tg2cVLhPTSlcITNcDazvJIuSkgWDjxSVH8SKELdkC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:dd:fe:d7:70:18:62:71:cf:1f:73:64:07:9e:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Jun 24 23:01:30 2026 GMT
Not After : Jun 25 23:01:30 2026 GMT
Subject: CN=613e1a5bc7352bcfe0c4dbb1deb73e4800d107be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:4a:55:97:40:0c:ff:91:76:4a:83:e6:d7:
4c:cc:96:50:18:99:53:72:5c:ee:12:da:a5:32:92:
a1:4f:21:92:3b:97:dc:ce:b8:7e:cf:66:08:8a:42:
9f:6c:4b:b1:13:b8:b6:ea:5f:98:44:b2:07:b0:bb:
41:e1:b9:ef:b5:3f:41:0c:53:42:50:17:b8:32:66:
8b:47:07:ef:fa:25:ef:57:0a:f1:ff:fb:85:73:94:
3a:ad:3c:17:d5:fb:39:86:24:58:d9:88:d4:c7:14:
d2:3f:83:8c:7b:10:56:50:e4:e7:b4:8a:86:26:14:
c9:a6:25:2e:89:0e:19:92:bb:40:ec:e7:b2:a0:b9:
48:0f:7e:51:d7:13:5c:8a:f9:0d:b4:8c:e9:ab:e9:
a6:88:bc:8c:0d:0e:24:7a:6e:d6:26:58:9b:93:dc:
4f:dc:60:99:de:d6:9d:70:d9:c1:c8:d9:b1:4a:41:
34:90:25:84:ae:cb:e0:a7:fa:d9:7a:2d:d7:c4:e8:
91:8b:f9:fb:84:15:e6:65:c9:72:f0:09:70:62:64:
e8:3e:93:82:72:a3:6c:82:db:60:9b:8d:8d:65:36:
4d:68:37:d7:08:ff:2d:2a:e3:e1:a9:76:67:1b:ac:
c5:ad:47:4e:d7:51:d7:94:c8:e6:15:75:27:b5:79:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3E:1A:5B:C7:35:2B:CF:E0:C4:DB:B1:DE:B7:3E:48:00:D1:07:BE
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:59:af:11:01:c5:13:b4:0a:12:ae:1f:d7:d4:6a:a1:e1:
44:26:5b:99:b8:e6:04:95:8b:2a:3d:f3:20:fc:94:53:a6:e1:
66:8f:11:e2:29:02:55:7e:d8:63:50:f7:3d:bf:22:d2:81:23:
a6:bb:60:8f:db:0b:10:65:72:18:71:04:f9:6b:c8:da:48:1e:
9d:b3:72:96:a9:51:8d:95:7a:4e:d8:cc:c7:37:f6:c9:ff:db:
43:36:35:40:34:69:55:13:1f:70:73:8b:d6:67:09:60:8f:34:
64:b4:8c:14:e7:05:73:5d:78:ad:4b:2b:c6:86:35:c5:80:04:
76:ed:23:36:4e:17:45:1a:5f:6c:c4:2a:ca:ac:1a:1b:5a:90:
1a:56:67:d8:da:4d:99:db:eb:f6:7c:bf:3e:ba:de:9c:23:7a:
e3:a7:08:ff:29:01:1c:3e:2b:b8:0a:7b:3f:3a:0b:79:11:24:
dc:5f:5e:ce:89:73:02:a8:c8:a8:f5:17:87:0c:9c:a4:aa:ec:
ba:1b:9a:68:79:7b:7f:33:0a:17:c9:88:60:ed:e9:b5:51:73:
82:94:63:8b:8b:ae:ba:41:b0:f1:e4:0e:fd:73:f8:65:c2:be:
3a:93:fd:83:13:b5:57:d7:03:62:8b:f4:92:fd:bc:e3:bc:15:
20:8a:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:18 2026 by rpki-client