Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: 0U3bOzP4ME9pyY8XCytUzrG5ktjjspMm5Fd5JokqpMk=
Subject key identifier: B3:C7:3A:BE:06:10:63:08:F9:46:EE:9B:AA:5F:FF:CA:0F:BE:B7:E4
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019EC06DC2672BE48298711FCCAB5C05A092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 11CB
Signing time: Sat 13 Jun 2026 10:01:19 +0000
Manifest this update: Sat 13 Jun 2026 10:01:19 +0000
Manifest next update: Sun 14 Jun 2026 10:01:19 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: pxk2PmENAKQXWWeVC0WpNE/6r0hiTwdV7Qs6H8yAIjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:c2:67:2b:e4:82:98:71:1f:cc:ab:5c:05:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jun 13 10:01:19 2026 GMT
Not After : Jun 14 10:01:19 2026 GMT
Subject: CN=b3c73abe06106308f946ee9baa5fffca0fbeb7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:9f:f8:ea:85:c9:32:2a:71:ea:90:20:92:
85:a8:f8:98:5c:69:ff:ee:5b:23:09:09:cd:d0:f7:
d2:0e:39:28:30:a1:20:55:66:c0:e3:c3:fd:36:f9:
33:0a:38:5f:d5:8c:e9:8a:ec:ab:0e:6c:79:9f:eb:
0c:4a:8c:d0:df:4f:17:3c:22:a3:bd:d3:8b:77:4f:
ef:22:9c:72:60:f0:f4:bb:c4:e9:02:4b:a2:47:46:
91:9d:01:9f:1c:f2:8b:56:cb:97:ed:ed:7d:b3:c2:
28:e7:0e:5d:80:70:62:0b:27:cc:a5:15:53:e4:d8:
7c:c9:09:05:0e:46:86:6e:19:dc:71:9a:f9:66:43:
e2:5d:04:4c:6a:89:1e:63:1f:dd:0d:2f:40:74:22:
00:76:88:73:9e:bb:76:bf:4b:06:e2:9d:37:7c:fc:
b2:02:48:37:02:62:7e:e9:5f:a5:a0:b1:9d:0b:cf:
8c:ea:74:ac:7c:a2:1c:3e:66:c9:4e:f7:13:75:ad:
51:9a:e4:91:68:26:e2:bd:f4:58:70:77:5b:34:6a:
40:a4:6c:1c:67:c9:32:b7:26:47:e0:fb:2c:24:79:
b3:0e:8e:06:3e:fa:16:ac:41:7e:ab:be:d8:b4:0b:
91:42:a5:df:ea:a4:d1:ff:52:63:d8:1f:ac:fb:de:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:3A:BE:06:10:63:08:F9:46:EE:9B:AA:5F:FF:CA:0F:BE:B7:E4
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9d:02:18:85:01:3c:2d:07:19:ed:b6:84:72:f1:5b:06:6b:
68:4b:ed:ff:43:cd:c7:39:08:6c:09:2e:6d:4f:09:7b:63:cf:
ae:9f:be:35:44:ac:a4:da:74:3f:37:46:eb:2f:1b:2a:6f:51:
c6:3e:49:dd:cd:18:64:b0:28:03:fa:af:bf:88:18:1d:1f:66:
45:40:00:8c:9d:fe:30:c4:0d:52:47:89:5e:01:47:72:26:7a:
7c:cc:31:8d:97:0a:ea:b3:5c:67:1f:4f:4e:59:d0:db:98:ae:
53:8a:44:c4:b8:c3:bf:89:b2:5e:ec:b1:6f:0d:dc:ce:2f:7e:
26:f4:08:f3:b0:18:86:46:b1:c5:29:7c:85:4a:37:90:9b:39:
71:c6:ac:d2:4f:ae:40:cc:6b:4d:ce:f2:68:c9:11:ce:1e:35:
dd:dd:9d:d0:3d:ee:af:fc:9d:e9:74:1c:5d:23:88:d1:6b:18:
86:bc:f3:bb:29:40:60:bb:0a:48:73:8f:4b:da:d2:b9:dd:59:
27:6b:52:52:1e:c0:f0:47:fd:8f:43:ab:dd:fc:4a:02:c5:8f:
05:dd:8d:1f:9f:9e:dc:28:bf:f0:eb:f5:ed:fd:5b:57:dd:2f:
49:5f:8e:90:ae:b1:87:bf:61:02:40:ff:46:93:5f:f2:75:9d:
cd:8a:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:28 2026 by rpki-client