Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: R2H1AWmawxc/WwAV33SLKiR+H2iJFJnt9uJqfeketwg=
Subject key identifier: FB:3A:36:C4:B5:BD:2B:29:E9:EF:2E:45:BE:E6:63:B6:1D:71:4F:57
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 01A139368396E1A74271233A05B0DC7B1FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1AB4
Signing time: Wed 14 Oct 2026 07:00:36 +0000
Manifest this update: Wed 14 Oct 2026 07:00:36 +0000
Manifest next update: Thu 15 Oct 2026 07:00:36 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: F6x/63nBi2/7jwJHhPSpYpfxM8SuNQxHrducFGtkrNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:83:96:e1:a7:42:71:23:3a:05:b0:dc:7b:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Oct 14 07:00:36 2026 GMT
Not After : Oct 15 07:00:36 2026 GMT
Subject: CN=fb3a36c4b5bd2b29e9ef2e45bee663b61d714f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:e3:70:fa:f7:d9:bf:8c:d6:ed:0c:3d:58:
8d:a3:0f:44:bd:e8:e7:f6:1e:3e:a4:96:3c:fd:a2:
2e:fe:0a:9f:dc:ec:1e:3c:04:c7:43:fc:4a:18:b5:
91:07:0c:b4:81:2c:3f:4e:c8:08:97:68:e4:19:12:
f6:28:7e:fe:ce:0d:99:aa:e1:35:b8:96:7e:48:d9:
6a:07:a9:87:5d:32:99:f3:ed:9f:ac:18:b8:ec:11:
e3:b4:07:e6:59:33:bc:64:20:e6:97:0d:3d:e6:6b:
d3:09:d4:33:c9:ec:75:3d:f7:c4:1d:95:6a:12:e8:
0d:46:02:63:b5:25:59:c3:74:cd:4e:a8:a0:0e:dd:
ca:f7:83:e4:cf:98:f5:4f:99:ba:a4:d2:20:3c:47:
05:e6:d8:c2:b1:0c:ce:9b:a0:ce:72:39:7c:ba:2a:
ff:62:e1:7a:2d:07:07:d9:fd:68:1f:7e:4b:18:ea:
1c:0e:ab:7a:1b:3b:84:b8:44:18:b7:b5:0a:a8:ba:
f4:f4:44:0d:87:e6:de:73:2a:3a:82:e6:d8:89:67:
63:e4:01:81:65:7b:cf:20:55:3f:87:0c:70:42:22:
be:77:ef:d0:82:34:2c:f4:02:d0:38:c2:66:7a:6d:
ee:4a:de:68:62:ae:f1:73:23:df:2e:4a:a2:4a:53:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:36:C4:B5:BD:2B:29:E9:EF:2E:45:BE:E6:63:B6:1D:71:4F:57
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3f:21:84:7e:23:34:28:ec:77:f2:74:8d:f2:16:89:ab:2c:
b8:4c:f4:81:6b:e3:e4:c1:09:91:f6:24:a0:b8:96:3c:10:d4:
11:93:50:8a:e2:f7:fd:fe:0a:b8:bc:a8:3c:16:30:f5:32:e9:
da:d1:7b:7d:29:db:fe:d1:42:1b:a7:4a:88:ef:41:5f:fe:17:
49:48:a3:64:69:86:4c:7c:49:58:0d:e3:e1:c6:b2:52:d4:8f:
67:32:2e:3b:6a:dc:49:75:89:0c:b7:a1:aa:ee:e5:6f:69:43:
d9:82:69:4c:d8:d5:83:53:1d:19:bb:54:4b:fc:14:b0:2e:7e:
f5:f8:5b:a5:65:11:ba:21:4b:db:bd:68:59:f1:a6:b9:c0:2b:
98:ba:b4:39:56:d9:1c:e8:1c:e8:40:b6:97:d5:8f:20:d2:26:
c9:4e:27:02:f8:96:a0:33:12:fd:fb:d3:f8:1a:54:de:5d:da:
d6:a0:42:e2:09:e4:39:a9:0c:77:51:77:04:17:3b:23:40:3a:
f4:ba:20:09:c1:4e:39:47:17:39:b4:ca:79:36:8b:5f:7d:c8:
51:27:d2:4a:d1:dc:ca:06:28:19:b8:1c:7c:62:a8:da:04:86:
45:a0:1d:5d:7f:a0:1d:c9:c5:3b:cb:73:79:a7:b5:34:11:a2:
70:19:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:14:40 2026 by rpki-client