Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: K9Q6hh+Zy+spHU2V074Bpv2TS1QUtOGY/2BDQJjHDPY=
Subject key identifier: 2C:02:41:35:E9:61:F7:76:22:0A:89:98:05:0B:76:04:F4:CE:1F:DB
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 01A0BD9DEB23A9028429813BF8768F709A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 12D3
Signing time: Sun 20 Sep 2026 07:00:38 +0000
Manifest this update: Sun 20 Sep 2026 07:00:38 +0000
Manifest next update: Mon 21 Sep 2026 07:00:38 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: j7NmpvfIQU6FDEix-u8x70QzGB4.asa (hash: njgslEMetrKTmwnGYjM4U3y9QobxeUtCJrq8bFvuhc4=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: NcMMHlK4cBZhl8+Y5oBMqvOKgOx4kW2brLqrzMCd3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:eb:23:a9:02:84:29:81:3b:f8:76:8f:70:9a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Sep 20 07:00:38 2026 GMT
Not After : Sep 21 07:00:38 2026 GMT
Subject: CN=2c024135e961f776220a8998050b7604f4ce1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:27:c0:60:9c:a8:62:50:68:17:d0:00:1d:
80:91:d4:17:ba:95:09:0f:0d:66:05:1c:fa:a4:fa:
67:fc:20:6c:fb:f0:ba:13:c2:a0:09:29:70:f6:00:
52:52:d9:e5:ee:f1:88:19:24:b7:31:e2:d8:ba:7e:
62:b2:84:c7:2c:d5:d1:04:83:d9:de:1c:a3:28:52:
f5:d9:59:13:10:26:bc:58:7b:b6:68:99:0c:8b:50:
47:6a:42:ad:c3:ff:b2:98:76:6d:26:e9:e4:6e:a5:
07:9f:ed:3e:99:be:e0:40:f8:28:cd:5e:01:92:ea:
f4:14:d1:e8:1f:3c:39:87:46:50:7a:05:23:68:5d:
e4:5f:0e:59:59:47:d7:21:a7:ec:ad:aa:2e:7b:40:
40:b1:00:58:f2:ea:4f:22:5a:f3:fb:f2:de:16:52:
89:49:70:41:39:9e:d3:e4:1f:70:f0:cd:1c:35:af:
30:33:57:20:43:57:44:7b:98:1e:7d:8a:7b:13:8b:
c4:d3:f5:12:c3:db:e5:13:a2:d6:08:aa:2b:75:ba:
a7:02:f0:91:c5:af:96:2f:54:29:2d:a8:c9:64:b3:
6d:7a:cb:f4:03:fc:50:a5:72:a7:77:af:eb:a4:bf:
6a:0d:17:23:b4:f5:cb:1f:c9:59:f9:c1:21:d3:65:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:41:35:E9:61:F7:76:22:0A:89:98:05:0B:76:04:F4:CE:1F:DB
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fa:2f:c7:8b:a1:4f:af:d6:94:6d:04:fb:91:3f:0f:bf:7e:
9f:1a:c1:13:7e:83:ba:1a:bc:e3:0a:eb:6e:c4:5c:c1:60:fe:
64:bc:6f:4c:5a:56:9c:68:c8:9d:86:5a:57:ae:6b:25:a2:25:
99:56:9d:1f:b6:ed:74:f5:62:19:6d:8e:8b:31:5e:70:71:8b:
d3:ce:a5:6e:f9:b5:7d:96:ba:14:5f:37:1b:29:c9:e3:bc:76:
8c:30:94:f6:4f:c9:86:af:90:b0:83:c8:20:98:3d:00:dd:4e:
64:a6:38:49:13:c7:ff:b8:61:ea:d0:2d:8b:fc:06:8f:e5:ab:
73:6d:12:aa:f4:85:ba:7c:d9:cb:7c:ae:6c:ad:26:86:c4:a6:
e4:5b:45:e7:f2:ad:e1:f3:70:82:29:fd:19:24:61:37:0d:98:
02:7b:f9:f3:2c:9d:93:f9:93:17:3f:16:09:52:39:5e:25:71:
b0:ae:5e:e3:22:5d:b1:ef:ee:ee:a4:4a:6e:18:57:da:27:d3:
82:a1:93:49:8e:69:fb:0d:c1:03:97:8f:f8:f3:ac:24:e7:99:
84:74:95:3e:bf:b0:c6:3d:89:c9:21:9c:13:30:b6:1f:de:f2:
04:b7:68:c4:13:3e:3c:5b:82:2a:7b:9d:73:71:cf:34:96:72:
3f:7a:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:53:32 2026 by rpki-client