Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: ha+9KcrKLmS1bqf6PAsKXxFpr7I77wgIy5AgH7ReeQs=
Subject key identifier: 53:D9:E6:CF:57:14:82:72:B4:BD:C1:7E:70:A2:BB:39:17:80:D9:31
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019CAB6B269C1DE7771E407D50DA2BAC116B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 10B7
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: UfkaVJ5DzXY+xEGdimxfTo2lfSW3jyGOt+m3KCTTi9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:26:9c:1d:e7:77:1e:40:7d:50:da:2b:ac:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=53d9e6cf57148272b4bdc17e70a2bb391780d931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:6f:b1:bb:6f:54:e9:2e:92:b0:5e:f2:d4:
a8:43:57:62:c0:0c:32:90:3b:b6:c7:11:89:f8:f2:
72:e2:17:d0:37:f5:f4:a9:2a:e1:49:a5:b0:70:bf:
18:ff:de:be:84:3f:ed:b4:a5:8d:ce:86:fd:ee:26:
26:ce:24:06:2b:51:93:7a:7f:f8:e4:ba:53:5d:b2:
24:dc:11:6f:53:0e:03:f9:9f:b5:82:88:7b:dd:15:
56:de:ea:34:06:d4:ff:96:95:4c:52:54:dc:c6:10:
2f:c3:06:39:9c:59:19:5b:ab:28:40:e1:55:25:d9:
af:29:ec:bb:7c:e8:e6:31:a5:ad:c2:73:df:d9:70:
74:d6:5f:49:97:ab:e9:e0:28:8d:0b:71:56:35:18:
4b:37:46:2f:82:52:86:4f:62:ca:43:19:cd:1e:c8:
8a:93:2d:84:c9:f8:b7:5b:4b:f5:9c:f5:cb:e5:0e:
03:0e:82:e9:ac:a0:3d:cb:c1:38:4b:b2:b5:08:57:
c9:5c:a4:f7:fc:86:e9:50:eb:85:fd:5f:91:eb:57:
53:13:2d:fe:0c:2f:d3:ee:79:fe:a5:da:26:7e:b6:
69:8c:32:9e:80:d8:24:e9:8d:9f:67:91:a1:d0:73:
83:cb:94:a2:e5:6f:c7:0a:ce:e8:ce:b9:65:53:0c:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:E6:CF:57:14:82:72:B4:BD:C1:7E:70:A2:BB:39:17:80:D9:31
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:f8:d6:62:5f:fa:a7:20:96:dc:e2:d2:a2:59:4b:f1:da:
0c:a8:6b:c5:54:3f:72:aa:e2:40:ed:05:5d:ce:b8:06:97:28:
b8:8e:17:02:98:4e:32:ff:7c:2a:2b:3e:d6:61:b0:99:1a:f2:
8c:ee:91:75:c8:06:d6:a9:26:32:2d:cf:d3:89:a9:e8:f2:46:
02:87:2a:fd:f1:3f:74:c0:36:f6:14:2d:f0:fa:e7:a9:0c:a9:
11:47:4a:4f:a1:8c:95:2a:1a:16:c7:d8:d1:40:c9:c0:5c:57:
e3:fc:65:48:e9:ae:9f:f2:31:8a:0c:c5:8e:65:d8:d1:36:65:
c2:37:5e:1b:f7:89:b0:f9:2c:6c:5d:89:8c:3d:42:af:5e:01:
57:0f:ef:66:1b:05:9d:18:95:20:87:67:79:c5:c9:e4:55:e8:
73:51:e2:d1:74:fa:b7:c0:69:4a:a9:71:e7:77:d5:03:66:89:
cf:6c:3f:bc:bc:8c:bc:c9:8f:cc:f9:ea:44:c2:14:71:e3:56:
1f:7a:d3:a5:7d:97:88:6d:e6:ff:60:68:bf:98:2b:60:63:0a:
ce:c6:67:10:5e:5d:7e:3e:99:aa:cc:07:ea:11:af:4b:ce:0c:
c1:ca:5e:09:33:aa:42:7d:df:a9:2f:27:fb:85:48:11:e8:db:
7f:dd:00:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrayacHed3HkB9UNorrBFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjYwMzAxMjIwMDUxWhcNMjYwMzAyMjIwMDUxWjAzMTEwLwYDVQQD
Eyg1M2Q5ZTZjZjU3MTQ4MjcyYjRiZGMxN2U3MGEyYmIzOTE3ODBkOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IFvsbtvVOkukrBe8tSoQ1diwAwy
kDu2xxGJ+PJy4hfQN/X0qSrhSaWwcL8Y/96+hD/ttKWNzob97iYmziQGK1GTen/4
5LpTXbIk3BFvUw4D+Z+1goh73RVW3uo0BtT/lpVMUlTcxhAvwwY5nFkZW6soQOFV
JdmvKey7fOjmMaWtwnPf2XB01l9Jl6vp4CiNC3FWNRhLN0YvglKGT2LKQxnNHsiK
ky2Eyfi3W0v1nPXL5Q4DDoLprKA9y8E4S7K1CFfJXKT3/IbpUOuF/V+R61dTEy3+
DC/T7nn+pdomfrZpjDKegNgk6Y2fZ5Gh0HODy5Si5W/HCs7ozrllUwwWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPZ5s9XFIJytL3BfnCiuzkXgNkxMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFT41mJf
+qcgltzi0qJZS/HaDKhrxVQ/cqriQO0FXc64BpcouI4XAphOMv98Kis+1mGwmRry
jO6RdcgG1qkmMi3P04mp6PJGAocq/fE/dMA29hQt8PrnqQypEUdKT6GMlSoaFsfY
0UDJwFxX4/xlSOmun/IxigzFjmXY0TZlwjdeG/eJsPksbF2JjD1Cr14BVw/vZhsF
nRiVIIdnecXJ5FXoc1Hi0XT6t8BpSqlx53fVA2aJz2w/vLyMvMmPzPnqRMIUceNW
H3rTpX2XiG3m/2Bov5grYGMKzsZnEF5dfj6ZqswH6hGvS84MwcpeCTOqQn3fqS8n
+4VIEejbf90Acg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:38 2026 by rpki-client