Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: Vjn0bQA+6fM3zg+FmoKqch6DnuCqztIeVObhHXsLUaU=
Subject key identifier: 17:3B:71:49:AB:56:EB:DC:B3:DB:1F:F9:1D:C8:92:8A:12:12:6E:7F
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 019D99992BEB1584484D6466F9BB7977BD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0706
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: 2HYXpJsqwz9c5SIFmai0svx5rjEJj14ZDXRzN7nqmdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2b:eb:15:84:48:4d:64:66:f9:bb:79:77:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=173b7149ab56ebdcb3db1ff91dc8928a12126e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:34:3f:86:5e:98:df:6d:73:a3:16:3a:27:
90:a7:69:92:16:22:cb:7d:c3:d9:08:b2:27:ac:0d:
cc:62:d3:4f:ba:5d:6e:7d:bb:c2:e9:68:3f:6f:6e:
a2:fe:2e:ba:2c:f2:26:51:c8:04:b4:81:b2:76:75:
3c:9b:10:af:ba:b0:ac:1a:a8:e2:ac:09:73:2a:3d:
c7:c3:5c:e4:12:64:03:b9:a9:9d:41:a2:09:c2:4a:
cf:66:4e:d0:9d:61:db:8f:0d:62:05:fc:44:5b:00:
d0:09:02:dc:ee:b9:8b:ac:d3:4d:23:07:a4:39:d1:
6c:02:c5:a6:50:31:f5:a9:34:fc:d5:3a:fb:e1:6f:
d2:51:e2:c6:9b:da:b9:ad:d1:c2:d6:d0:16:c3:82:
20:c2:a6:2a:c4:bc:2f:e9:a3:3a:a8:7c:2d:34:3e:
1c:ff:9d:84:bd:9c:c4:2b:f6:6d:4a:72:11:ad:03:
38:09:bc:0f:ed:12:50:e2:b1:5e:45:1b:ed:f5:fc:
57:05:81:59:c2:0a:80:1d:a1:b0:16:35:57:c7:f4:
0b:20:0e:15:7e:c5:02:92:68:ed:84:9d:ab:b2:df:
62:d8:5b:37:97:e0:1d:8a:27:44:af:d0:35:37:24:
35:6d:0d:84:d9:82:03:9c:f5:57:32:17:9c:52:97:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:71:49:AB:56:EB:DC:B3:DB:1F:F9:1D:C8:92:8A:12:12:6E:7F
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:cb:6f:0b:6b:52:6a:95:52:b3:f3:2d:d4:0f:f9:37:b4:
b5:f2:02:3f:8d:58:fa:48:da:22:0a:82:18:ea:b2:f9:b0:30:
75:4b:cb:fa:f1:68:33:10:e0:45:60:57:5e:fe:21:52:91:21:
84:72:75:a8:09:41:7f:2a:c7:e6:83:11:aa:60:02:86:13:d0:
f2:b3:52:db:e3:bf:f4:d9:4b:9d:53:03:eb:82:b1:f8:9a:2a:
0c:86:4a:bb:10:97:95:3a:b7:19:24:95:ce:bf:d2:bf:17:8f:
34:67:13:ad:23:6c:9c:64:7a:f7:94:00:c8:73:b7:d4:90:f3:
84:c1:34:74:54:f9:b3:ad:9c:48:54:a5:21:f4:8f:bf:6f:bb:
df:c0:e9:5c:9f:66:bf:b7:ab:27:0a:33:9c:32:05:47:75:ac:
9d:da:b8:37:fb:18:8f:42:e9:2b:d2:d5:b0:81:79:d4:63:cc:
56:26:e0:26:e9:8c:bf:83:74:17:f1:fd:2d:b2:14:f5:1a:86:
45:93:13:9e:37:a9:2c:50:f5:40:4a:50:4f:52:d7:37:c0:7f:
26:96:57:da:b5:af:33:e1:44:66:f1:e9:12:25:16:cc:3f:ec:
8f:e9:6d:2e:06:10:40:1d:ae:b5:2e:76:74:83:55:ab:34:eb:
19:28:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:28 2026 by rpki-client