Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: wdDUAJCVrCIk6788Ar2hsYiCR3Pt1nyyzY24mSpXZMg=
Subject key identifier: 12:11:37:02:65:1F:5A:51:FE:E2:F4:F9:53:B2:78:7B:96:2E:3C:76
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019D24DE49F3466ECE451CC11E106484E985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: BD
Signing time: Wed 25 Mar 2026 12:00:40 +0000
Manifest this update: Wed 25 Mar 2026 12:00:40 +0000
Manifest next update: Thu 26 Mar 2026 12:00:40 +0000
Files and hashes: 1: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
2: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: HDmws8pyTTiizLyEXX48FCuA9YBOFksUivlnRL4QHmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:49:f3:46:6e:ce:45:1c:c1:1e:10:64:84:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Mar 25 12:00:40 2026 GMT
Not After : Mar 26 12:00:40 2026 GMT
Subject: CN=12113702651f5a51fee2f4f953b2787b962e3c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:58:2a:05:f6:c5:99:ec:1d:1e:34:ee:5e:
47:14:f3:20:12:8f:8a:f1:3a:c3:03:13:6d:c9:c1:
09:44:3f:d9:6a:2d:74:8a:2c:44:58:da:8c:07:c9:
e3:43:1e:ff:52:9c:b0:ef:ba:85:c2:32:84:69:3b:
b2:8c:98:49:4c:02:8c:b2:6f:33:9e:de:78:60:75:
16:56:ac:2d:ba:35:a9:10:ab:18:93:73:b6:33:a3:
8c:49:fc:82:8f:af:31:b7:c2:79:32:62:46:c1:69:
94:2b:cb:5f:ed:b7:86:f7:27:1b:bb:83:e4:4c:d8:
5d:37:8f:60:7f:5a:34:c4:3a:9a:3f:b1:a1:e4:cb:
3c:c4:a6:69:42:54:6b:f1:ff:d6:72:6b:94:3c:49:
dc:45:ed:9b:3c:64:c1:4a:01:e8:33:3d:38:fc:cf:
98:76:1f:72:b1:09:30:3a:bb:07:46:e5:89:81:03:
68:b0:a6:97:56:14:76:d3:94:cc:ef:45:7d:50:14:
10:83:ce:ce:79:c5:f0:8d:a4:5f:d6:7d:1f:f4:55:
92:2f:da:bd:be:4c:65:bb:02:dd:d4:e7:95:3a:68:
c6:4a:9c:f7:6c:21:72:7c:5c:e5:48:eb:90:9e:57:
0a:71:72:aa:95:f5:73:55:fd:31:d1:a7:a6:91:91:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:37:02:65:1F:5A:51:FE:E2:F4:F9:53:B2:78:7B:96:2E:3C:76
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:22:60:75:42:a7:29:dc:97:83:0b:6b:65:ef:33:95:88:
be:38:b9:8c:56:da:f9:b8:5a:d9:6e:31:4c:15:7c:cc:4b:29:
58:ee:e7:13:70:83:89:7b:36:a9:8e:cb:19:bb:b5:5b:42:7e:
05:65:b3:2f:63:a5:05:29:e1:49:26:7f:da:63:65:77:f5:47:
24:e4:14:50:fd:21:ef:6a:e2:5b:38:67:e6:22:77:b1:d9:f3:
99:2a:de:70:a4:2f:e4:6f:aa:b7:29:d1:33:44:05:7b:82:5d:
2c:5a:7f:21:64:f3:58:be:43:c7:ca:d7:54:c5:f4:a6:82:9c:
61:42:97:79:b9:e4:0c:50:de:8e:03:86:d7:33:b9:38:f4:65:
91:59:20:a9:4f:7b:1a:0a:b7:d3:9b:ca:b3:9e:c6:60:76:cd:
bf:d7:39:b4:d7:a2:35:68:d6:22:aa:96:ae:d2:76:75:80:16:
72:a3:01:70:91:5d:5d:c8:82:75:28:e8:52:12:47:3b:e0:1c:
17:c1:e8:82:dc:19:6a:4d:27:e3:b6:67:0a:68:c5:1a:ba:dd:
3e:0b:3f:b1:f4:75:ee:9c:35:55:30:fe:7c:85:0c:ca:39:4f:
63:6e:77:57:15:89:92:e7:1a:12:33:5f:5d:60:a4:21:7b:8e:
06:96:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:02 2026 by rpki-client