Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: d18Y2v3XVqmakiOHivJCyGWrNBC06fvBx4pWjvhRrtg=
Subject key identifier: 5F:EB:E7:27:AA:C6:A9:75:90:E9:F1:4C:C6:14:D1:9F:2F:2B:3B:09
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019E1C0FFA010221CC5774068E4B77AF922D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 013D
Signing time: Tue 12 May 2026 12:01:09 +0000
Manifest this update: Tue 12 May 2026 12:01:09 +0000
Manifest next update: Wed 13 May 2026 12:01:09 +0000
Files and hashes: 1: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
2: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: HQPlnnjGsfmBOobAFSuHO+8Ulzonnia/aeiGBHKyh1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:fa:01:02:21:cc:57:74:06:8e:4b:77:af:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: May 12 12:01:09 2026 GMT
Not After : May 13 12:01:09 2026 GMT
Subject: CN=5febe727aac6a97590e9f14cc614d19f2f2b3b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:be:e7:03:bb:6f:f9:47:a3:01:b0:30:5f:
f4:a2:40:bd:22:1c:87:34:95:b4:ff:de:3d:a2:f7:
43:8d:3f:b7:eb:fc:4e:ce:cf:cc:02:5a:0b:9f:55:
10:22:20:6d:8f:d9:eb:15:fa:aa:1f:c9:c8:c0:b1:
66:7a:22:af:69:e4:1f:f5:d6:4f:9e:4a:8d:6d:ba:
39:00:0e:6b:a4:79:c1:ca:a0:19:3b:52:53:9f:1d:
c4:03:0b:9c:64:e7:bb:e7:92:00:ec:91:81:74:64:
98:7f:11:80:15:0b:fa:9c:07:ce:55:f6:e7:94:b0:
dc:54:6f:0c:60:51:d9:55:13:68:7c:66:24:44:2e:
72:0d:41:31:2d:9e:40:af:8c:a1:ad:55:93:fa:81:
c7:03:e2:59:09:d6:16:de:68:a6:77:7b:89:ca:9d:
48:42:27:bb:7b:2c:54:62:dd:f7:a6:6d:2c:fc:15:
f0:9c:66:ef:41:b4:9f:6f:a3:c5:03:bd:f8:07:f2:
ee:7c:98:e3:5b:81:1a:ab:f2:4f:a2:91:38:da:bb:
02:0f:3b:bb:1b:c0:91:ee:3b:60:9b:7f:28:b1:05:
c1:82:72:31:89:77:4a:8a:90:a9:d5:cf:5a:8d:f5:
d9:e0:2a:5e:de:29:29:57:0d:df:be:ed:5b:44:05:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EB:E7:27:AA:C6:A9:75:90:E9:F1:4C:C6:14:D1:9F:2F:2B:3B:09
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:05:c8:0f:e9:a6:18:3b:b9:3d:e0:19:8c:53:81:44:f0:47:
22:6c:95:3f:93:37:0a:ff:d9:dd:6a:24:ea:6e:62:37:2c:fa:
18:ae:c6:75:fb:0e:4f:50:b8:89:71:59:74:c4:3f:e1:e8:4b:
af:1d:bd:39:90:d3:d6:7f:e8:32:25:4b:4b:86:c7:4b:14:9d:
8b:76:ea:70:e9:89:ed:62:ef:51:1b:7e:4d:9a:b5:29:f8:5f:
60:e0:52:5a:2f:07:8b:66:41:83:f5:98:83:d3:3a:f1:5a:5e:
2f:a5:40:1c:d2:cf:58:ee:83:df:64:35:c0:55:6c:54:5a:b4:
0c:cf:52:c3:c9:d6:15:5a:9b:00:41:72:70:3c:fe:b0:e6:27:
ea:a6:1a:69:05:a2:41:dc:f0:fb:cc:04:3c:17:e2:58:0b:c9:
ea:f2:52:be:cb:a9:42:ba:f9:92:cd:d4:6c:05:21:14:35:8f:
b2:ba:23:8b:27:d3:51:3f:21:31:4c:32:8d:4b:5c:6b:af:21:
fb:5b:8a:e1:6d:be:e3:c9:da:27:fe:df:b1:7f:40:f2:1e:00:
56:7c:75:b8:17:11:ae:9a:1c:47:36:51:bb:ee:9d:3c:2d:a0:
0c:9d:1b:b4:50:30:7c:a7:a9:1f:b0:0f:5e:1e:ba:44:95:54:
60:3d:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:11 2026 by rpki-client