Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: 6f6eBH2FtDpXi+2CTGNHuyPeIIs6BLkjM5+pcQ3OWKk=
Subject key identifier: E2:E8:57:DC:82:D0:4A:9E:D0:4D:B4:0C:22:CC:E2:33:F7:78:D4:86
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019D26288DC455096E7D544FE19E74DCA35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0B27
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: 3pPlGefERPNNb3LZTRw8EyYwrK8.roa (hash: 9UINQk9n7UxmChzwqHzUGLHOlISFZwBCGhQ+P6Wni5M=)
2: _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (hash: 2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: yVb/W30JKg8JWY1HyWhLrGiT65XJP37E1sdtHRtuvcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8d:c4:55:09:6e:7d:54:4f:e1:9e:74:dc:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=e2e857dc82d04a9ed04db40c22cce233f778d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:da:9b:98:5a:6e:68:0b:09:6e:71:d5:bf:
bc:d9:86:9f:2b:05:46:ff:c2:8c:09:98:7a:6c:08:
2f:bd:63:a6:37:6d:a0:10:35:dc:d5:3e:43:55:f9:
c5:99:1c:71:d7:00:92:49:c1:b0:89:44:92:28:37:
7d:aa:d4:d6:42:f7:60:55:0b:9d:2d:0d:68:a6:98:
22:50:cd:52:04:bc:5a:cd:30:31:1f:2f:43:b1:c7:
0f:c8:2c:ba:be:65:b5:3b:79:0e:c6:cc:63:10:7f:
e5:23:bb:fd:82:f6:d3:0d:f0:ca:97:52:9f:98:e1:
14:69:88:60:cd:0b:5b:48:1f:a3:60:93:3a:a1:ab:
db:29:c7:ef:b1:b5:19:bb:0b:72:6f:7b:4f:5c:b7:
3e:4f:9f:d1:08:97:05:38:51:e9:c0:59:18:15:81:
93:95:42:c4:15:94:4a:40:e1:27:67:77:7c:b8:7c:
3f:d8:60:e5:2a:22:a7:98:91:8b:a6:6d:27:92:9c:
30:41:f1:b2:dd:ca:fa:ba:2f:48:4b:4d:3e:7f:59:
4a:f4:ce:b6:c3:dc:a4:ad:af:59:3e:71:64:56:14:
81:0c:b4:ef:cf:82:ef:58:53:54:cc:49:aa:0d:b9:
29:97:46:2d:d4:52:90:d4:bd:50:6d:84:3f:5f:dc:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:57:DC:82:D0:4A:9E:D0:4D:B4:0C:22:CC:E2:33:F7:78:D4:86
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:38:68:b8:67:63:19:24:dd:f8:54:1f:40:fd:19:5e:0a:6d:
33:d0:94:d4:d2:3f:cc:d7:34:9c:32:f7:65:43:db:2c:ba:f2:
62:1f:23:d9:39:45:9a:07:d7:6d:e2:d1:c9:bb:df:28:7e:0e:
e4:18:fc:d9:44:9c:5b:bf:2a:7a:c8:64:53:44:36:89:08:aa:
53:8a:02:fa:7b:44:15:74:8c:0c:74:9e:cd:59:36:b6:46:0c:
e9:ab:d0:c9:c1:25:2d:c2:c5:98:4c:24:82:5e:08:0f:85:d2:
a3:5a:21:1e:0b:1f:a2:b3:0c:34:b5:62:39:47:ad:a0:4e:f0:
95:24:4a:86:5d:b7:c4:b9:c4:d4:f7:3b:00:7d:14:78:5f:5d:
0a:86:56:3f:4d:15:60:b9:47:59:1a:f0:ea:19:81:4d:59:63:
ee:76:06:23:46:48:6d:cf:88:e3:d3:74:d3:4c:27:3f:d1:4c:
c9:4b:78:92:35:24:b3:4c:32:bf:6e:7a:85:13:64:ff:81:f3:
b5:6c:d7:45:20:2c:b0:97:a7:d5:35:d1:10:a6:72:b7:03:65:
a7:0b:d3:10:4a:3d:76:34:31:37:be:1a:95:ae:09:69:a6:04:
28:19:07:9a:e5:0a:c2:a4:9a:f0:cf:85:a7:99:70:0a:62:f3:
88:b0:7d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKI3EVQlufVRP4Z503KNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjYwMzI1MTgwMTI0WhcNMjYwMzI2MTgwMTI0WjAzMTEwLwYDVQQD
EyhlMmU4NTdkYzgyZDA0YTllZDA0ZGI0MGMyMmNjZTIzM2Y3NzhkNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Tam5habmgLCW5x1b+82YafKwVG
/8KMCZh6bAgvvWOmN22gEDXc1T5DVfnFmRxx1wCSScGwiUSSKDd9qtTWQvdgVQud
LQ1oppgiUM1SBLxazTAxHy9DsccPyCy6vmW1O3kOxsxjEH/lI7v9gvbTDfDKl1Kf
mOEUaYhgzQtbSB+jYJM6oavbKcfvsbUZuwtyb3tPXLc+T5/RCJcFOFHpwFkYFYGT
lULEFZRKQOEnZ3d8uHw/2GDlKiKnmJGLpm0nkpwwQfGy3cr6ui9IS00+f1lK9M62
w9ykra9ZPnFkVhSBDLTvz4LvWFNUzEmqDbkpl0Yt1FKQ1L1QbYQ/X9z3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLoV9yC0Eqe0E20DCLM4jP3eNSGMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzhouGdj
GSTd+FQfQP0ZXgptM9CU1NI/zNc0nDL3ZUPbLLryYh8j2TlFmgfXbeLRybvfKH4O
5Bj82UScW78qeshkU0Q2iQiqU4oC+ntEFXSMDHSezVk2tkYM6avQycElLcLFmEwk
gl4ID4XSo1ohHgsforMMNLViOUetoE7wlSRKhl23xLnE1Pc7AH0UeF9dCoZWP00V
YLlHWRrw6hmBTVlj7nYGI0ZIbc+I49N000wnP9FMyUt4kjUks0wyv256hRNk/4Hz
tWzXRSAssJen1TXREKZytwNlpwvTEEo9djQxN74ala4JaaYEKBkHmuUKwqSa8M+F
p5lwCmLziLB9JA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:42 2026 by rpki-client