
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: b3+QTS5CexPxeU+Ycr+CknQm8kHIF4XdSe9WCnrXElc=
Subject key identifier: B9:1D:8E:E2:DA:F5:A5:0C:49:6A:32:D1:A6:6E:47:A2:DF:87:39:CF
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019EBE10E94D3F29D233CF2EDF1763A28E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: D5
Signing time: Fri 12 Jun 2026 23:00:39 +0000
Manifest this update: Fri 12 Jun 2026 23:00:39 +0000
Manifest next update: Sat 13 Jun 2026 23:00:39 +0000
Files and hashes: 1: 5pQ-bfi33kIelyHj5wfs5UdBIE0.asa (hash: 2h4GfTHJtEG4yFe2c9k9qyXukdri+wOp8aMCRZWUU+E=)
2: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: Tb8Hv4caoDwB1tOUUviidm5LcGZaJ6K1EU/SFCIeA20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:e9:4d:3f:29:d2:33:cf:2e:df:17:63:a2:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Jun 12 23:00:39 2026 GMT
Not After : Jun 13 23:00:39 2026 GMT
Subject: CN=b91d8ee2daf5a50c496a32d1a66e47a2df8739cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:27:52:e5:95:c6:f2:33:21:49:0b:67:21:
30:83:cf:68:e9:9e:70:5c:5f:5a:dd:8e:a8:6a:de:
c9:62:cf:af:6b:f2:2f:74:82:ec:d1:f3:2e:29:12:
fc:ca:d6:4f:2d:d3:83:3c:2e:22:33:fc:55:6f:66:
c1:76:73:a5:cb:0c:8e:b0:bb:10:43:85:75:32:f3:
6e:96:9d:b7:6d:f2:c1:07:0e:b0:e7:75:54:b4:38:
52:5c:4f:de:df:1b:11:2f:21:b9:e4:71:19:b4:dc:
dc:35:66:3d:ab:4f:5e:20:53:92:d1:d5:3f:8d:2b:
d9:89:45:08:70:1e:81:c2:7b:94:1c:dc:57:97:2b:
9b:df:48:f7:4e:41:f5:b3:93:5d:fa:20:68:99:b5:
15:28:d5:1e:79:9b:1a:b9:95:79:16:1c:35:dd:d8:
cf:30:7d:7a:82:dc:de:6b:6f:1b:50:a6:a6:9f:1b:
1f:82:6e:f8:b9:a0:1a:78:03:67:e1:a1:03:aa:f8:
fd:ce:00:45:74:0e:b2:b4:1a:00:f4:4f:8f:ce:ad:
53:75:03:78:ce:fe:1e:dc:ef:1b:8f:5b:dc:5b:2c:
ef:ec:92:46:75:e7:2b:2d:70:ab:57:ca:07:66:d1:
ea:35:73:c7:08:9e:00:11:c3:da:4c:4a:60:3f:dc:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:8E:E2:DA:F5:A5:0C:49:6A:32:D1:A6:6E:47:A2:DF:87:39:CF
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:00:dc:c8:51:76:6d:03:39:13:09:c4:03:b8:ba:00:ca:15:
19:93:25:0a:6c:2d:d6:0f:7a:9e:15:61:28:62:8d:54:56:6f:
01:57:28:9f:39:7a:2c:34:9b:e1:60:7f:dc:06:92:77:a6:e2:
ed:d2:2c:75:3b:2f:70:c7:6f:0f:73:a9:ee:a6:d6:80:b5:5c:
a8:d4:65:f6:b2:16:a2:15:57:89:1b:ab:95:30:40:0f:63:4f:
66:64:80:61:ca:1e:01:0a:80:6e:81:90:9b:82:58:6e:a5:d5:
ab:ad:44:3d:78:73:93:fb:e1:c3:29:93:c6:4b:a8:76:ea:cc:
f9:3a:04:6e:df:63:98:d5:4f:70:56:eb:3f:14:7e:36:9b:51:
b8:61:3b:5b:3d:ae:fc:d6:e4:ba:bd:d8:91:6e:3d:9f:e3:72:
85:e4:85:93:53:57:2c:ab:52:cd:69:8c:e6:38:bd:28:a8:89:
0f:02:f9:e3:16:54:c1:60:8f:83:4a:11:11:ba:1c:e5:38:9d:
e5:5b:53:99:82:af:03:37:3a:da:7e:1f:ac:54:fe:eb:80:bd:
45:52:ec:1d:b2:fc:90:36:49:f1:a6:e3:ef:7e:e1:17:8b:9c:
e4:ff:22:64:8f:85:e0:af:61:ee:84:0d:bb:38:95:b8:e0:61:
dc:ce:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:59 2026 by rpki-client