
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: Wm33C98R+q3mbM9G+7Ny25SXXLOFM2EzYGFXRTwpw7w=
Subject key identifier: 26:C9:54:EE:4E:02:73:3B:65:89:3E:AA:3D:84:BE:72:85:53:87:D3
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 01A0E17499A9CAB3E602912C8694A0701529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 135F
Signing time: Sun 27 Sep 2026 06:01:50 +0000
Manifest this update: Sun 27 Sep 2026 06:01:50 +0000
Manifest next update: Mon 28 Sep 2026 06:01:50 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: OMm4qNmQlBaDzQdbhQy05ThjT7Ltf5yxtBSpFOG2McI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:99:a9:ca:b3:e6:02:91:2c:86:94:a0:70:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Sep 27 06:01:50 2026 GMT
Not After : Sep 28 06:01:50 2026 GMT
Subject: CN=26c954ee4e02733b65893eaa3d84be72855387d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:a2:af:51:28:4e:8c:5c:6c:fd:ac:2e:ae:
36:6d:df:a8:f7:fe:31:56:8a:56:5a:91:6a:a1:ae:
f7:4b:68:91:35:29:40:26:0a:0c:d9:96:d8:fa:e0:
56:fb:c8:a7:55:ec:1e:31:8b:52:e7:3c:ba:4f:63:
33:b9:82:54:19:dd:97:d1:c2:f2:e9:56:eb:8a:51:
e9:38:18:35:dd:0b:51:20:6f:30:00:4f:b9:f8:66:
ef:05:b3:e0:f7:ba:66:32:b1:6e:be:c8:55:10:8b:
18:17:26:db:6f:42:f9:c2:ea:75:b1:28:aa:7c:4e:
64:ae:23:55:55:b8:54:e7:14:75:e5:89:b4:70:eb:
4e:e7:bb:ac:be:4b:b2:2b:14:be:09:51:c6:f8:30:
33:a3:07:ee:b4:3d:65:d1:17:fb:b8:c7:17:eb:86:
c0:7e:8a:f2:00:2e:ee:f1:86:54:5f:3c:3e:bc:2b:
e4:d4:95:f5:89:e0:2c:b0:95:47:b9:f0:c7:99:55:
59:b7:cb:ea:24:eb:53:ac:8a:26:0d:20:79:ea:f9:
2e:50:1f:0d:01:ef:41:88:7b:f4:f6:7c:c8:f7:85:
6b:dd:9f:14:ad:87:39:5a:e4:f4:31:8e:52:b1:d3:
72:bd:45:e5:97:c0:2f:a7:61:c7:d1:5f:45:1b:d4:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:54:EE:4E:02:73:3B:65:89:3E:AA:3D:84:BE:72:85:53:87:D3
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:32:42:5d:02:9a:cb:be:05:cb:47:6a:44:b3:17:af:61:
a2:11:ca:b5:9f:9f:d0:eb:b5:c5:3d:89:1d:ab:f3:7e:59:f8:
64:d9:62:82:f3:7c:34:b1:01:f3:91:25:99:27:06:6d:cb:74:
70:99:29:78:e0:6a:3f:8f:79:9f:27:4f:7a:af:e8:15:67:4a:
5c:10:3d:bc:59:d9:b3:7f:b7:87:a2:31:c6:8a:e2:60:fd:32:
b1:5e:54:dd:42:c3:3f:3c:2b:bd:0b:2f:af:fe:d8:b4:9d:13:
91:07:f5:af:4a:47:43:b4:c8:72:2a:eb:a0:6b:1b:c6:97:36:
be:fc:2f:b0:4c:0b:1b:c7:38:d8:1e:13:4a:da:e5:b3:4e:8f:
ab:26:1e:37:b4:60:d4:b0:6e:05:4e:d7:6b:89:fd:b5:7c:71:
6b:67:da:b7:b4:66:39:b4:9d:4f:58:14:c4:85:df:1d:50:17:
14:af:5b:a7:6e:f0:97:2c:a8:9a:80:b8:bb:da:7f:48:e8:40:
78:f0:fc:33:1c:c6:74:e1:a0:27:d1:8f:0b:b1:f8:5a:e5:c3:
a6:49:b5:c8:33:2a:11:60:ee:23:86:3a:bd:af:c7:6f:71:7e:
9b:dc:56:0b:bf:a6:0c:97:97:b6:06:47:97:1c:bb:af:b1:72:
54:42:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:45 2026 by rpki-client