Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: QELPmlCljl7QsT7N5xqt266aAxxitnuL4SCmQX2eTDs=
Subject key identifier: B6:D4:8E:D1:84:76:D1:A8:4B:F8:CF:F1:C8:1A:9F:5D:1C:B4:A1:9F
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 01A0D7CC99A457C00CFCA3896739CF87A3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 135A
Signing time: Fri 25 Sep 2026 09:01:45 +0000
Manifest this update: Fri 25 Sep 2026 09:01:45 +0000
Manifest next update: Sat 26 Sep 2026 09:01:45 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: 7CneXTgZiHniSy3sH6g2FGRhE5A//M2SyFOExAwW24w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:99:a4:57:c0:0c:fc:a3:89:67:39:cf:87:a3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Sep 25 09:01:45 2026 GMT
Not After : Sep 26 09:01:45 2026 GMT
Subject: CN=b6d48ed18476d1a84bf8cff1c81a9f5d1cb4a19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:79:67:7d:e2:a8:92:ba:7d:0c:c1:a3:a9:
12:e4:5a:71:d1:66:74:6e:7c:2d:8d:78:41:2b:ee:
d4:0a:cb:48:40:e3:23:96:9c:2c:38:54:5e:ef:e1:
25:a9:26:50:85:51:da:df:d1:b5:f8:86:f2:1e:69:
e1:cd:82:62:c0:8a:5a:47:dc:a3:ff:1f:ed:cb:7b:
01:45:72:dc:63:0d:89:b4:f5:e3:23:49:f8:aa:9d:
c5:a2:ca:b1:14:d8:7d:b3:50:f9:b1:8c:76:49:50:
ea:3a:01:10:59:e3:36:8a:2c:5c:fd:0c:76:66:94:
1a:17:64:54:12:47:71:d7:47:3a:bf:79:1d:88:90:
13:20:5d:8c:4f:b6:a2:9e:2f:24:51:5c:e1:65:3a:
a1:bf:cf:31:0f:0c:eb:a0:40:1e:21:96:2a:e6:7b:
de:38:ca:3e:3b:da:f2:8f:66:4e:9d:18:80:7a:b8:
08:23:07:02:6e:b1:c1:a6:a7:ad:7e:df:3c:c6:f2:
1b:75:b6:ac:2c:a6:85:91:c5:dc:ce:a5:76:d8:4f:
91:06:cf:2f:56:35:6a:26:07:d5:af:f8:50:78:05:
ff:4a:91:34:db:ad:d2:a9:80:f8:fb:74:71:49:92:
98:39:96:de:30:f8:34:c3:8e:e0:d2:3c:f3:90:9c:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:8E:D1:84:76:D1:A8:4B:F8:CF:F1:C8:1A:9F:5D:1C:B4:A1:9F
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:e0:31:ea:23:46:ac:cc:8c:96:d7:e0:74:c6:29:91:f6:
3b:48:5d:0f:a5:80:af:c7:7f:46:77:ff:ae:9a:57:fb:76:92:
a2:7d:67:57:02:c6:7a:2f:8b:2e:20:64:2e:a1:48:cb:26:36:
1c:7d:2c:82:89:70:c7:c6:19:9d:13:d5:92:73:14:d5:4f:e9:
34:2f:07:fb:65:4a:69:8f:37:74:b5:46:ab:09:48:5e:92:fe:
bc:18:be:d7:ec:45:44:44:d3:5b:16:17:cd:72:24:46:5e:41:
f0:84:c1:6d:80:3d:2e:2b:48:9a:d8:fe:8c:6d:9f:78:24:0d:
b1:0f:43:c5:c6:89:cb:ae:86:66:02:8a:98:b4:58:d9:7c:7d:
b5:9f:60:f7:32:ea:b2:a1:0e:f8:ad:98:21:36:84:40:3f:29:
8d:8b:6b:74:71:af:e6:dc:f7:e3:5a:97:1f:7f:03:a5:e0:75:
4f:4e:85:12:68:53:bf:44:14:fc:c3:3c:66:d3:1f:44:ea:36:
56:1c:c5:64:69:a9:b4:7d:c8:d1:2f:5b:ed:83:31:ac:82:23:
6c:f2:aa:7e:3c:f5:9e:34:01:36:de:68:df:d6:b0:1c:0b:7c:
3d:44:1b:19:f0:1e:97:61:d1:74:86:f2:86:5f:25:8f:cd:69:
de:24:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:54 2026 by rpki-client