Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: jFrdiRFjZHTMWMTigpQiu+MYsPEhZFT8dS+NjmC36KI=
Subject key identifier: A5:39:41:AB:1B:28:94:3C:6F:E6:12:2B:8D:6E:2A:F4:BF:CC:0D:64
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 01A0D2012E161CF7D84188265914C2B1A55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 02A5
Signing time: Thu 24 Sep 2026 06:01:27 +0000
Manifest this update: Thu 24 Sep 2026 06:01:27 +0000
Manifest next update: Fri 25 Sep 2026 06:01:27 +0000
Files and hashes: 1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: KAeJYQ3s5SwQD8rrW95d3DGysJY/vP9ORLSZeAr4Z4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:2e:16:1c:f7:d8:41:88:26:59:14:c2:b1:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Sep 24 06:01:27 2026 GMT
Not After : Sep 25 06:01:27 2026 GMT
Subject: CN=a53941ab1b28943c6fe6122b8d6e2af4bfcc0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:bd:95:8b:00:19:7b:d6:e2:be:d0:3e:53:
18:59:14:16:a4:35:5f:31:12:78:0e:a0:61:5e:04:
37:3a:bc:3f:d6:9d:24:66:5f:55:19:8a:b3:29:a9:
28:4f:54:a2:28:69:c0:1d:da:81:ca:c1:a7:cd:04:
2e:75:8d:9e:2a:5f:92:9b:cd:25:05:be:73:5a:1e:
92:d5:b9:37:6e:a8:c6:9e:a5:5c:30:f9:1f:7d:76:
a6:6e:12:1f:de:c6:85:9f:bd:5c:b5:d9:e8:f6:5c:
46:44:c8:8b:62:0e:4b:a6:1b:d0:14:d8:a3:29:4a:
c0:8f:86:76:d1:bd:26:be:97:89:5c:f5:6a:18:98:
61:41:a3:b1:14:49:e0:dc:fd:6c:5f:28:b7:c8:8a:
02:53:dd:67:a2:1c:90:a6:c4:4c:9e:ae:f9:6a:11:
a3:ea:54:c4:25:d5:d4:d8:21:49:a8:48:aa:76:b9:
8b:16:eb:81:00:0a:a6:53:25:2c:0f:9c:b8:4b:ef:
2d:c0:f7:de:7c:64:7f:ca:5d:85:e9:e5:c6:68:bd:
4b:2a:35:29:a9:7b:80:c1:00:c1:ec:90:3b:fd:83:
26:d8:3b:ea:8c:ec:f5:f0:d8:58:5c:1b:1b:4f:31:
a1:6d:31:d7:6a:21:00:5a:5d:1f:87:f3:af:1b:d5:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:41:AB:1B:28:94:3C:6F:E6:12:2B:8D:6E:2A:F4:BF:CC:0D:64
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:b7:81:7c:b0:e1:f7:5a:ba:f3:7a:d5:2b:79:53:6c:d8:
d4:f0:cf:43:e7:ad:2d:95:a7:84:73:1b:fe:f2:76:20:51:61:
da:f9:83:9f:cb:f9:49:ab:44:9b:a7:40:e3:4f:c1:76:1d:7b:
d8:bc:fe:bf:ce:e5:ee:39:37:e7:1b:56:51:f0:39:e0:00:25:
f1:20:52:7d:45:8e:8c:0c:68:52:22:c1:c0:00:b2:08:f0:41:
13:87:2b:2c:27:85:71:42:42:85:23:ec:e2:c3:01:c6:50:95:
03:85:b8:bb:59:40:01:20:c6:ee:e1:c5:a4:e2:ff:d1:27:e0:
64:73:0e:5b:89:27:4c:12:27:4f:12:5f:60:9a:a3:25:c4:08:
3c:8a:ba:55:a7:9a:02:a5:4b:99:3b:a8:54:eb:cc:98:f9:d0:
e2:25:20:c7:de:c9:e1:5e:0f:68:75:e7:72:0d:75:3d:61:b9:
b3:96:3c:ea:16:4d:64:3b:22:d0:c3:f6:4c:8f:ba:a3:2f:3f:
71:45:2b:e4:58:5c:34:ac:41:04:9d:61:35:0a:ba:74:69:c8:
75:16:3d:67:10:42:9f:7a:96:8e:6e:c0:45:4c:fb:91:b8:7b:
c4:04:fc:37:e3:2a:97:f8:24:dd:50:57:e1:3e:90:7f:6e:96:
2d:73:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:00:21 2026 by rpki-client