Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: A9oyivnUQn3YcjHNUFUyCHdnurbB5rLPrSEvA/AsApk=
Subject key identifier: F1:7E:41:32:5F:B3:D5:6E:49:75:CB:9D:43:C5:10:B5:C8:1C:95:02
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019D2A0503A3987AB9A825B4A25DAA2758B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:01:04 +0000
Manifest this update: Thu 26 Mar 2026 12:01:04 +0000
Manifest next update: Fri 27 Mar 2026 12:01:04 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: 7rNXwKL4Bjvr2vTTJXWuSMG3l0dBzUtmt4MPoukCI8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:03:a3:98:7a:b9:a8:25:b4:a2:5d:aa:27:58:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Mar 26 12:01:04 2026 GMT
Not After : Mar 27 12:01:04 2026 GMT
Subject: CN=f17e41325fb3d56e4975cb9d43c510b5c81c9502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:c1:84:95:7d:0e:45:3b:cc:50:f4:1a:59:
96:c5:a3:9a:3c:7e:76:5d:11:36:dd:42:93:77:58:
ca:98:81:d0:57:b9:6e:1f:bb:52:e9:c1:a3:30:86:
66:dd:e0:39:34:6e:a0:40:ea:49:85:bc:49:f6:1c:
24:5b:31:30:89:e6:e3:2f:bc:14:ea:a7:b3:8e:7d:
0b:0b:8c:92:ce:10:bc:c3:83:7d:ea:f9:b7:4a:ab:
5e:28:53:59:ce:9f:3d:bc:4f:3d:6f:20:2d:da:cc:
5e:85:b5:68:f2:b0:c6:69:a7:77:d1:43:b7:8d:eb:
40:39:cb:4c:80:10:df:4c:d8:48:aa:a7:ed:24:d4:
12:26:9d:df:08:e3:57:70:b7:ee:6f:7c:fb:51:a3:
8b:bb:9f:51:a1:70:9c:f2:ab:32:36:f3:c6:59:fc:
f4:56:96:d8:85:24:3a:4d:5d:2e:c5:a5:ab:09:58:
24:71:d8:1b:ea:e0:db:25:04:22:c4:13:a1:16:2f:
11:d8:4d:73:39:38:91:aa:04:ff:db:5e:aa:5f:fe:
1e:b1:47:7e:0c:5a:4b:f8:e0:68:fc:4b:5d:d3:2c:
66:81:a7:dd:de:d0:86:51:a9:5f:ff:2f:b4:64:71:
54:b2:65:67:48:6b:a0:9a:c8:cc:b7:6a:8f:a1:3e:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7E:41:32:5F:B3:D5:6E:49:75:CB:9D:43:C5:10:B5:C8:1C:95:02
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f5:de:a9:5e:35:9c:ef:55:5a:f9:8c:f5:e2:92:d8:b2:f1:
fc:7a:10:c3:4b:f1:54:98:75:56:67:e6:50:30:42:91:28:7a:
dc:f2:8c:56:7c:27:a4:0b:a9:f9:61:27:78:61:8b:7d:7d:c1:
0a:b2:c4:08:6e:32:50:58:19:2d:37:bc:0c:67:bf:63:e6:da:
00:ff:0a:0e:54:40:ba:3c:4b:1c:db:91:5b:45:2d:68:86:68:
41:c2:42:e9:61:51:b6:82:dd:b2:a3:2b:e4:79:72:f2:46:76:
16:48:7a:11:d8:47:5d:f3:87:d8:f8:e6:81:2c:4f:a7:21:df:
f1:07:e9:f6:32:13:97:44:69:2d:84:1b:0a:91:97:d9:ee:ea:
7b:8b:3a:f4:27:06:30:8c:88:c6:6d:a3:06:69:31:92:09:ca:
a0:4c:a3:d6:67:bf:16:19:fb:16:8d:31:26:a6:c9:1f:75:6d:
e5:71:25:b1:cc:24:19:de:5a:79:8f:30:0d:bb:e2:47:0d:0c:
82:64:53:f0:0c:a2:63:53:9f:d4:3e:67:bc:a4:f0:33:ca:5f:
c4:d5:d8:1d:d1:3d:78:2e:36:b7:b2:a0:cd:d7:e3:d9:3a:b4:
c2:c3:2c:15:59:f1:5a:35:45:81:f8:24:54:ce:9b:d2:0a:00:
53:ec:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:54 2026 by rpki-client