Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: 4NGi0wpxtkTeLJgqaU9anQlVcmhHgfQOWX2kKvL8W2g=
Subject key identifier: 8C:9A:34:65:02:05:DB:6B:74:A1:C2:9E:56:21:51:91:44:B2:B8:1D
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019D9AE28BB87BC622BE079C9ADAD6ADD396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1133
Signing time: Fri 17 Apr 2026 10:00:31 +0000
Manifest this update: Fri 17 Apr 2026 10:00:31 +0000
Manifest next update: Sat 18 Apr 2026 10:00:31 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: z7GlJSuXP7A2yvu/IYVnVyXdo2Wt0XVyS+WAf5Pvzcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8b:b8:7b:c6:22:be:07:9c:9a:da:d6:ad:d3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Apr 17 10:00:31 2026 GMT
Not After : Apr 18 10:00:31 2026 GMT
Subject: CN=8c9a34650205db6b74a1c29e5621519144b2b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:9a:70:3c:b5:70:fb:d8:ce:83:07:b1:82:
43:3a:d4:65:08:56:54:23:e0:f1:8d:77:55:c7:29:
20:b6:52:29:b8:c1:fc:43:13:ec:a3:3e:3e:35:43:
4e:7f:f8:1f:0d:dc:42:39:e6:84:e6:ca:10:69:8e:
38:c8:35:87:31:32:bc:c9:9c:ad:b3:b8:09:a6:60:
4e:70:f2:68:12:77:11:af:8e:ba:c0:9d:61:c2:4b:
b8:ba:38:7f:3e:35:7d:11:d7:6d:88:a9:58:17:b9:
75:ae:cd:ed:87:db:d3:23:78:94:b0:29:a4:f0:50:
81:a4:f8:cf:8b:35:f8:86:58:45:da:71:0f:6d:66:
c0:63:2b:f2:b4:01:ac:96:91:1d:c8:dc:9a:12:de:
a3:92:43:28:8b:dd:e2:88:77:16:e8:88:21:09:ed:
2d:b6:96:0d:b1:dd:5c:ad:c9:1c:bd:c7:a4:29:44:
40:e7:fe:34:13:65:81:a7:8c:38:f4:43:5a:c7:41:
a2:1a:98:11:e3:87:44:9a:73:5c:16:81:2b:49:60:
8e:29:66:2c:9f:9a:5f:96:9e:2e:02:ae:65:af:be:
9f:13:79:30:d9:51:f8:4f:a3:e2:61:b7:1c:42:da:
36:60:c4:71:f6:67:01:af:71:09:9b:fb:fd:e3:f0:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:34:65:02:05:DB:6B:74:A1:C2:9E:56:21:51:91:44:B2:B8:1D
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:15:ed:34:ad:1a:a0:4e:33:13:95:21:14:ac:5a:e0:05:07:
bd:c5:84:4f:65:1c:5c:48:c6:af:f2:04:b0:61:6f:38:30:61:
f9:9d:8b:eb:20:c1:b9:50:9f:7d:d9:60:f8:91:64:f3:7c:c5:
63:a0:e8:52:c6:62:e6:7b:d3:07:b9:55:62:52:14:a9:c0:82:
07:ac:a1:17:93:1b:cb:8d:67:56:ad:a7:de:94:ac:60:bd:d3:
75:a2:e5:13:d0:39:7d:8d:02:46:55:24:90:e2:ac:65:8a:a5:
63:71:26:13:61:70:e5:35:e3:81:a6:25:86:ec:d7:57:51:dc:
bf:59:69:d9:23:30:40:e1:61:41:78:b0:c7:97:8f:bc:38:d4:
79:8b:0e:52:23:26:62:93:49:c6:00:8c:3b:15:a9:24:79:47:
77:3b:48:aa:e1:15:ac:69:86:8d:a4:74:e8:64:92:bf:12:7c:
22:ff:01:a2:5b:59:a8:b1:34:db:8d:e2:25:67:ad:c2:f5:29:
3e:6d:fa:eb:c7:6b:5d:09:fb:62:e3:f9:1f:0e:90:08:38:a6:
19:f1:4b:67:1f:76:4d:09:db:71:22:ff:d3:ee:86:1d:4e:33:
3b:dc:73:ab:d0:7a:9a:3e:25:01:ba:50:36:30:b2:a4:31:93:
0b:d1:dd:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4ou4e8YivgecmtrWrdOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjYwNDE3MTAwMDMxWhcNMjYwNDE4MTAwMDMxWjAzMTEwLwYDVQQD
Eyg4YzlhMzQ2NTAyMDVkYjZiNzRhMWMyOWU1NjIxNTE5MTQ0YjJiODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwceacDy1cPvYzoMHsYJDOtRlCFZU
I+DxjXdVxykgtlIpuMH8QxPsoz4+NUNOf/gfDdxCOeaE5soQaY44yDWHMTK8yZyt
s7gJpmBOcPJoEncRr466wJ1hwku4ujh/PjV9EddtiKlYF7l1rs3th9vTI3iUsCmk
8FCBpPjPizX4hlhF2nEPbWbAYyvytAGslpEdyNyaEt6jkkMoi93iiHcW6IghCe0t
tpYNsd1crckcvcekKURA5/40E2WBp4w49ENax0GiGpgR44dEmnNcFoErSWCOKWYs
n5pflp4uAq5lr76fE3kw2VH4T6PiYbccQto2YMRx9mcBr3EJm/v94/BTHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyaNGUCBdtrdKHCnlYhUZFEsrgdMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixXtNK0a
oE4zE5UhFKxa4AUHvcWET2UcXEjGr/IEsGFvODBh+Z2L6yDBuVCffdlg+JFk83zF
Y6DoUsZi5nvTB7lVYlIUqcCCB6yhF5Mby41nVq2n3pSsYL3TdaLlE9A5fY0CRlUk
kOKsZYqlY3EmE2Fw5TXjgaYlhuzXV1Hcv1lp2SMwQOFhQXiwx5ePvDjUeYsOUiMm
YpNJxgCMOxWpJHlHdztIquEVrGmGjaR06GSSvxJ8Iv8BoltZqLE0243iJWetwvUp
Pm3668drXQn7YuP5Hw6QCDimGfFLZx92TQnbcSL/0+6GHU4zO9xzq9B6mj4lAbpQ
NjCypDGTC9Hdng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:59 2026 by rpki-client