Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: aUGiGDORrKgH7ABsyg+kujVsxS7GJOPlshiOi+MdjcU=
Subject key identifier: D7:89:35:AA:BF:F0:90:BA:BB:FE:11:96:EE:57:18:69:51:87:52:43
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019D258386E8E8BED981DE623A8ACE991DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 1170
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: 3bV/Di7cdLxHAGpFIB7VOsmFVaS4Sb+W2Q0JpwJwEEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:86:e8:e8:be:d9:81:de:62:3a:8a:ce:99:1d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=d78935aabff090babbfe1196ee57186951875243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:51:a8:22:78:24:f1:7c:b0:55:59:c5:89:
e7:37:41:21:39:23:b8:85:11:78:ce:ab:36:23:72:
a8:38:a8:da:30:5e:eb:09:29:91:2b:b0:52:80:09:
38:c3:82:90:11:4b:84:12:7a:e2:a7:92:1a:dd:43:
10:85:83:da:e8:a1:54:60:40:2c:e8:ef:76:25:a6:
d4:d4:48:6a:c5:f7:ce:a6:19:bc:70:2b:4a:3b:cc:
3e:b7:ee:97:87:34:4c:01:38:75:e1:32:40:ed:cf:
cc:97:dc:ad:65:41:d8:cc:b3:3b:8e:69:bc:a0:bb:
26:a7:89:c6:b8:39:08:1a:ee:02:e8:81:5d:32:6c:
08:22:cb:6b:95:47:a3:7b:a4:6b:8f:02:87:2e:d2:
be:db:0c:a3:a2:bb:62:e7:21:06:0b:cc:52:22:2c:
a7:ea:61:4b:48:32:77:db:b1:c6:a8:df:11:d4:c0:
6b:2f:cd:91:41:2f:fb:9c:4e:41:0b:c9:c4:60:be:
c3:f1:d7:da:71:5e:30:0a:f9:79:e4:fe:9b:14:7a:
c3:db:f0:0d:94:50:49:91:e6:ea:87:47:6c:4f:36:
4c:c0:fe:57:ce:0f:99:e0:29:c4:8b:6e:4d:25:1f:
c7:e1:cd:dd:eb:03:d4:b0:42:a3:02:3e:ea:d7:02:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:35:AA:BF:F0:90:BA:BB:FE:11:96:EE:57:18:69:51:87:52:43
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:82:90:3b:42:53:53:46:9b:f2:b7:37:ad:8b:9f:54:0f:98:
1d:76:da:01:4e:ab:17:92:2b:1c:57:fe:7f:96:f4:33:e9:03:
b0:f9:04:88:35:ca:e5:e6:13:fe:08:f9:99:d4:8c:c7:59:c8:
27:e0:ca:93:d6:b0:38:c1:4d:c2:60:0f:31:f9:d1:aa:6d:de:
6d:a9:6c:6b:bc:76:9f:53:06:66:6d:04:f8:16:94:66:4d:b3:
30:e1:ce:46:70:52:70:60:9b:3c:7d:27:d1:04:f6:94:db:cd:
c6:f7:29:fc:4e:53:f3:10:11:30:59:b5:61:28:fc:65:e5:02:
cd:df:f0:83:4d:59:86:15:c8:b0:4e:d7:ce:7e:22:47:7d:48:
5a:93:37:9e:d1:34:84:a8:2a:2e:6d:d0:ec:09:d6:00:13:37:
d6:e3:9e:08:3d:60:b6:bc:d6:c9:95:62:69:23:6a:46:c6:53:
27:7c:28:ed:83:e6:22:8b:63:8e:02:b3:bb:83:54:f7:0f:6b:
18:8b:56:7b:64:78:f4:69:a7:ac:46:7b:cf:8c:49:ac:f8:e3:
08:de:1f:28:5e:8e:9a:de:2d:04:1a:c9:c2:0b:d5:cc:83:c5:
a4:ed:f4:56:92:01:42:60:ae:a4:f8:51:8a:99:f9:de:29:2e:
ad:4d:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:51 2026 by rpki-client