Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: AXlo46HT5O/74mKwZwvK5OpA7A7YjsDo2mB5AF1w/3g=
Subject key identifier: DF:D3:57:F7:F7:F8:5F:39:A5:69:D6:16:3D:23:E4:FF:7D:11:41:B2
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 019D9E1B80B6E0BC325D574E53214D5C8A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 18D6
Signing time: Sat 18 Apr 2026 01:01:35 +0000
Manifest this update: Sat 18 Apr 2026 01:01:35 +0000
Manifest next update: Sun 19 Apr 2026 01:01:35 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: 44D03l1ZFd3ZqitX+ApeREEJ8jcZlSv9oEX2dsYawFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:80:b6:e0:bc:32:5d:57:4e:53:21:4d:5c:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Apr 18 01:01:35 2026 GMT
Not After : Apr 19 01:01:35 2026 GMT
Subject: CN=dfd357f7f7f85f39a569d6163d23e4ff7d1141b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:ad:b8:7e:4d:1f:62:89:59:3a:4e:05:8a:
3a:b6:d2:a6:c3:8e:ab:42:3c:5d:ad:b0:b3:93:1f:
42:ec:7f:77:e7:e9:ef:87:94:9a:45:3d:03:09:e9:
54:60:15:40:c9:aa:a8:89:a8:21:c3:61:c1:a7:3a:
ae:3e:c6:10:68:45:97:f2:24:2a:24:bf:77:db:f5:
c5:7b:8c:39:37:90:72:79:87:a4:08:22:cf:66:eb:
52:62:e6:b3:36:a7:99:3f:c4:df:d2:d2:43:af:71:
ab:3d:95:b4:a3:1e:3a:38:11:61:f2:e1:ef:a8:e5:
6f:0f:96:75:22:07:8c:d8:cf:25:7d:83:b1:2c:d7:
dc:e9:5e:55:cf:5b:4b:5c:54:20:a0:1a:f9:3d:2c:
fe:83:63:2b:38:14:43:87:de:9c:e0:1a:1a:ad:f7:
04:e8:6f:5e:53:6e:c4:9c:6c:79:e8:85:f0:45:31:
7d:29:6f:5e:01:a0:e6:dc:0f:76:e8:74:cd:23:79:
4f:f8:cf:50:a8:75:80:fc:f4:1d:bb:fb:50:28:e7:
a0:51:5c:c5:bd:86:e6:a8:c9:cd:ed:eb:14:fe:df:
c5:07:71:fc:ec:1f:f6:41:f3:20:cc:7e:73:d0:3b:
ce:3b:a6:f3:af:56:bb:16:f7:2a:a5:79:ef:9e:f1:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:57:F7:F7:F8:5F:39:A5:69:D6:16:3D:23:E4:FF:7D:11:41:B2
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:7c:bb:b4:66:f3:7c:a7:30:91:ea:34:22:10:3d:8e:86:
e3:1f:61:ff:dc:3b:1d:fe:51:1e:e1:dd:d3:f6:d3:54:77:2f:
62:1a:27:30:f7:68:91:88:31:5c:60:98:d2:a3:e6:89:74:b6:
58:bb:59:43:e4:a1:32:dc:26:2d:af:f8:bf:bb:8c:d9:92:d9:
81:d7:d5:8f:2a:c2:61:a5:e0:24:2b:38:e9:f9:84:1e:de:8e:
b7:d0:80:8e:5c:f0:6a:b1:b3:6d:86:a4:97:1b:b9:1f:18:a4:
08:e1:00:a3:2b:5f:d6:d1:e1:2b:86:db:52:7f:61:9f:81:94:
34:6e:9d:87:33:a7:56:3f:ee:91:1b:c5:0d:79:49:d4:5d:00:
ea:f5:89:03:8a:ea:29:f3:07:22:b6:01:47:ef:fc:43:2f:43:
26:35:b4:1d:1d:15:8e:01:60:cf:67:9b:0c:78:66:96:46:8b:
b4:bf:06:b2:01:ed:17:bb:ac:9e:51:e3:de:0e:61:bb:60:4b:
84:32:70:64:f3:1e:ba:69:17:58:ff:70:5e:02:da:ab:77:bb:
db:49:5a:8d:8a:03:1b:1e:28:3f:47:4a:62:fc:1f:90:dc:30:
9c:39:7c:02:2d:e4:00:39:04:08:7f:88:3e:45:3e:2a:1a:fb:
55:40:93:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:17:52 2026 by rpki-client