Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: kYkodXf89uxEtyigectPlpLvsqjMd7GIAIdpJJrkmgU=
Subject key identifier: DA:A9:19:52:CF:3F:E5:C0:12:A8:DA:45:D3:27:D6:B2:42:78:95:B7
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019E1EDA5F14F43BF947D408984BE789CF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1230
Signing time: Wed 13 May 2026 01:01:28 +0000
Manifest this update: Wed 13 May 2026 01:01:28 +0000
Manifest next update: Thu 14 May 2026 01:01:28 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: Vs8KNl9o7s5B5ZNt/cPeaeYjYWEPjjedhaeX/mqusJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:5f:14:f4:3b:f9:47:d4:08:98:4b:e7:89:cf:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: May 13 01:01:28 2026 GMT
Not After : May 14 01:01:28 2026 GMT
Subject: CN=daa91952cf3fe5c012a8da45d327d6b2427895b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:35:44:cc:35:dd:b2:06:03:27:ad:ab:af:
0e:4a:41:7d:5c:4b:75:36:a5:95:50:60:05:6f:2f:
d0:30:22:05:7e:72:82:a1:f0:82:ec:08:34:a7:4a:
16:72:aa:5c:e7:e6:bd:af:7c:5b:aa:99:d2:3c:5c:
6c:65:f5:37:2a:bc:f8:38:d7:17:8b:f7:f9:e4:02:
a1:af:df:50:4a:25:9d:29:fe:0d:da:d8:0c:57:c5:
bb:a8:3c:eb:ee:fb:36:25:4f:65:85:9e:25:1a:eb:
80:0b:75:8a:eb:56:72:78:33:fe:ac:12:38:6f:e7:
52:01:03:a0:33:1a:31:2e:5d:a7:01:7e:cf:85:c2:
e1:0e:40:4c:1f:75:c0:9e:48:39:78:b4:20:40:56:
0d:31:e7:e3:74:9c:1e:e4:53:62:58:c7:d0:3e:a0:
6d:86:2d:36:ed:69:c4:17:f6:67:1a:82:f7:ad:de:
ab:47:40:d4:44:34:d5:5a:e9:a8:fa:25:cd:aa:aa:
3e:6d:25:19:c4:c8:cf:bd:51:5c:77:cf:c4:c8:9a:
21:27:49:49:9f:97:94:a9:61:ae:fb:ef:d4:2f:85:
ea:b9:a9:e5:26:47:d8:83:0c:eb:60:11:0f:57:9e:
89:bd:ef:6c:3b:62:81:af:4f:49:f7:5e:77:9e:a7:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:19:52:CF:3F:E5:C0:12:A8:DA:45:D3:27:D6:B2:42:78:95:B7
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:29:38:52:e1:d6:c0:b7:2e:ac:b1:4c:01:32:ae:38:7c:6e:
64:b1:57:a0:39:0a:e6:6c:33:b9:c7:45:15:8d:f9:36:ed:9f:
10:0d:44:ba:a4:b6:1b:e6:82:91:45:2e:ea:9c:a7:d0:52:a0:
51:aa:cb:eb:3b:ac:08:ef:b4:e6:53:de:50:ff:b5:f5:3b:a6:
69:aa:e7:97:18:84:d0:93:92:b7:ea:c6:65:ec:1f:de:d5:3a:
33:5b:d2:89:02:48:c5:96:67:c2:ef:b4:5f:f0:bd:5c:b6:11:
e4:75:cb:8a:86:84:72:29:be:30:3b:5e:94:30:64:22:51:f7:
49:fa:d0:be:6a:f8:c4:e8:67:df:a2:65:d1:fd:ac:01:26:6e:
43:f1:fe:4f:e5:94:c1:23:1d:66:e8:96:e0:fb:55:22:96:26:
50:94:af:57:de:00:29:3c:eb:4d:7a:ca:3e:b2:ab:d2:f1:de:
2f:8a:b1:d6:f6:e0:dd:b0:e6:f8:71:ae:4a:5b:0c:2e:dc:eb:
d6:8e:f6:9d:1e:18:d5:de:49:0d:08:a0:8b:87:60:bf:7f:a8:
4d:e9:b9:9e:b5:47:8f:ca:40:98:7a:ca:cb:3f:32:63:45:4a:
b0:85:94:e9:50:5b:46:b2:13:25:0c:65:cb:9c:e6:97:4d:b2:
1e:53:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:25 2026 by rpki-client