
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: x67XXOZIkeKYYq2xwV9Q5OJX8DP1f00Yv124fdU93JU=
Subject key identifier: 10:30:AB:5D:57:BB:4D:EF:65:2C:CD:8C:D7:28:3E:1C:69:6D:67:B0
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019FAA19F5C6EE9A4ABEEE1218A17400F1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 1244
Signing time: Tue 28 Jul 2026 19:00:55 +0000
Manifest this update: Tue 28 Jul 2026 19:00:55 +0000
Manifest next update: Wed 29 Jul 2026 19:00:55 +0000
Files and hashes: 1: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (hash: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM=)
2: iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (hash: sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=)
3: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: AS2bGR05Lc7i5d3Eixo6aeC0JZ1IMyKCEqU3nSgXdw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:f5:c6:ee:9a:4a:be:ee:12:18:a1:74:00:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jul 28 19:00:55 2026 GMT
Not After : Jul 29 19:00:55 2026 GMT
Subject: CN=1030ab5d57bb4def652ccd8cd7283e1c696d67b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:5f:fb:21:54:c2:43:13:94:08:94:dc:66:
b9:06:e4:a9:0e:cd:96:8a:28:46:b9:4f:57:6b:52:
5a:b3:86:00:ab:07:fc:13:ce:9a:a1:96:9b:bb:30:
b8:ff:09:d8:c2:7c:d9:a1:4c:a3:7f:41:70:fc:c8:
27:84:a7:1f:94:02:16:56:87:33:aa:65:58:3e:8a:
e0:bc:78:8e:72:fe:50:00:5e:97:4d:5d:fa:35:26:
c6:b1:e1:d6:48:71:a1:be:08:90:f5:5a:fb:15:1a:
f7:5a:17:bb:48:3a:74:d7:bb:b9:34:63:67:93:63:
1d:b1:6f:6d:ee:3b:56:93:33:16:fd:19:98:b3:9f:
af:3c:d4:33:c8:1e:38:4e:7c:5a:39:a6:43:59:a5:
44:45:9c:7c:2a:1b:cc:85:b2:d8:17:4d:07:34:75:
c9:4a:90:e1:18:ac:95:20:1b:ba:cf:81:14:a6:cc:
fd:8f:58:bb:1b:68:b8:a8:44:09:5e:93:2c:d6:e9:
d7:28:5c:ad:f4:f9:40:a1:6d:53:66:50:90:9f:7a:
86:0a:6e:ff:96:ac:2f:92:e1:f0:93:81:f7:5d:1b:
3d:cf:80:02:11:d0:9e:07:b1:37:96:67:5d:82:70:
44:05:e4:25:4c:a6:08:32:0f:5c:c6:c1:51:26:3b:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:AB:5D:57:BB:4D:EF:65:2C:CD:8C:D7:28:3E:1C:69:6D:67:B0
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:86:d9:c0:4f:78:88:76:09:52:ea:7f:2d:57:de:22:54:
54:1c:ba:d0:2f:bf:5c:db:ad:20:4c:92:6a:28:e4:51:2a:42:
07:1a:ce:c6:7e:34:9e:aa:92:d2:08:91:7a:4e:d4:6a:1b:0c:
fa:c4:5e:e0:a0:b1:c2:7a:29:eb:a4:50:34:03:98:d2:e5:b8:
14:d3:a5:36:55:aa:e8:56:c5:82:c4:f4:dd:8c:dd:ff:c7:a1:
ac:fe:ef:0f:3b:35:2f:b3:36:9f:ae:1d:21:60:f5:67:c6:ac:
94:82:25:34:16:fc:9e:8f:5d:ef:31:f6:0b:50:0b:f0:b8:7a:
78:65:1e:af:57:14:e8:05:1d:33:b0:48:43:85:73:cd:35:74:
9b:bc:a2:22:67:5f:12:06:54:6c:00:df:c8:01:60:95:a5:19:
c5:c0:43:87:e6:ac:3d:91:16:1d:95:4f:fa:a4:94:b2:59:a3:
81:f4:ea:e3:88:41:e0:b2:49:6e:bd:10:70:a6:ab:21:02:18:
5b:c8:3d:01:aa:97:0e:8b:59:eb:8e:c1:69:3f:87:6e:b3:61:
b1:69:56:0f:ef:71:84:a8:2b:9b:68:25:7b:57:27:94:d0:7b:
7b:20:b1:c0:32:38:51:5f:a1:06:7c:91:5a:70:c7:37:2c:30:
c0:e9:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:09 2026 by rpki-client