Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: 21SdwtjnLqmDOYHmJ4V6pSOGJ8hzIYlAc+4N2Zzfgs8=
Subject key identifier: 59:B5:FB:F3:2B:26:20:DE:EF:05:AB:81:A2:19:24:36:1D:65:E0:4B
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019E1EA2CA8C82634FCD27FE1ABD3F875C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 11F1
Signing time: Wed 13 May 2026 00:00:45 +0000
Manifest this update: Wed 13 May 2026 00:00:45 +0000
Manifest next update: Thu 14 May 2026 00:00:45 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: EyQHZ424DjC9bfEJ+aiY0Q5I+go8uF4IuotBscqZh+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ca:8c:82:63:4f:cd:27:fe:1a:bd:3f:87:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: May 13 00:00:45 2026 GMT
Not After : May 14 00:00:45 2026 GMT
Subject: CN=59b5fbf32b2620deef05ab81a21924361d65e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:38:6f:b0:b0:2a:b0:31:e6:86:73:91:1d:
0c:60:b6:42:4f:69:ba:60:bf:ae:6e:c7:84:1b:5e:
d8:30:c4:e2:ce:20:6b:f0:8e:be:33:9f:16:bb:65:
9d:2e:38:e4:2d:cc:3f:0e:b0:b7:d1:52:68:bb:46:
df:fd:64:e7:d0:c5:20:21:43:9b:a7:25:31:8a:63:
a6:f9:e4:61:6b:c3:1c:f4:da:35:43:12:78:be:fc:
01:44:81:1f:59:19:3c:7b:aa:3f:7c:38:ce:e6:b2:
01:1d:5f:a6:70:f9:c7:d1:78:bf:ba:d1:bc:35:a8:
f1:d0:da:08:fb:84:23:7b:6c:13:e4:d9:de:ff:f0:
c8:59:d6:00:c4:8f:6e:ce:61:53:a6:51:a8:ff:1a:
c5:1e:48:2a:b7:8b:0b:9c:0c:90:06:43:ea:b3:7a:
c3:68:a1:47:bd:44:6a:c5:27:ed:4b:70:eb:a4:73:
7b:e5:65:2b:63:ac:d2:06:1a:d3:db:30:db:c6:84:
6d:31:45:41:ab:e3:f1:9a:9d:0d:4a:cc:88:d0:b0:
f8:2b:e8:0a:50:66:44:69:54:fa:c5:51:3b:97:9c:
41:e6:c1:46:c8:dc:f3:f7:ec:23:a2:76:56:8f:1a:
80:3c:aa:02:3f:a1:02:ff:c0:80:72:3b:a3:73:8f:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:FB:F3:2B:26:20:DE:EF:05:AB:81:A2:19:24:36:1D:65:E0:4B
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:84:d7:4e:c4:09:07:66:a3:3d:04:7e:9a:e0:77:24:55:
16:c5:a5:6a:6e:28:87:8b:33:30:7c:f2:93:ed:4b:ef:6d:62:
df:d2:b2:c3:04:92:4b:36:33:9f:92:df:f6:10:8f:5e:b8:89:
00:c9:1a:89:9f:fe:49:47:ff:c0:11:c1:4d:6f:a7:88:f6:db:
fa:9c:d6:12:62:7a:da:29:e3:ef:06:91:70:df:c8:7e:ed:d4:
53:da:e2:8a:81:2d:1c:53:74:6b:b3:b3:9d:8c:5e:15:24:72:
6a:69:e4:48:a0:d9:a5:de:f9:0c:c0:29:4c:1e:ae:25:67:4e:
9f:8f:89:dc:4e:d4:02:60:53:5f:6a:76:79:52:95:82:df:a1:
e3:78:e7:2f:8c:0a:80:0c:65:b6:31:f1:f7:6a:31:78:e4:b3:
9d:ea:e2:3b:c2:ba:4d:50:7a:80:e3:3a:97:1e:8e:15:76:57:
88:1d:6e:cd:57:6b:17:75:5a:f9:c8:52:b0:c1:90:40:70:90:
ee:a5:61:7a:89:54:c3:5b:04:6b:86:bd:55:68:c5:f8:01:d2:
86:d1:8f:f8:0b:a3:f8:a6:44:22:a8:58:a1:fb:b3:53:e4:cc:
ec:66:bf:e2:d7:c4:ef:53:87:f1:a7:6b:97:9d:d2:0e:96:fa:
88:25:57:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eosqMgmNPzSf+Gr0/h1w8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx
MmM0ZmUwHhcNMjYwNTEzMDAwMDQ1WhcNMjYwNTE0MDAwMDQ1WjAzMTEwLwYDVQQD
Eyg1OWI1ZmJmMzJiMjYyMGRlZWYwNWFiODFhMjE5MjQzNjFkNjVlMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdY4b7CwKrAx5oZzkR0MYLZCT2m6
YL+ubseEG17YMMTiziBr8I6+M58Wu2WdLjjkLcw/DrC30VJou0bf/WTn0MUgIUOb
pyUximOm+eRha8Mc9No1QxJ4vvwBRIEfWRk8e6o/fDjO5rIBHV+mcPnH0Xi/utG8
Najx0NoI+4Qje2wT5Nne//DIWdYAxI9uzmFTplGo/xrFHkgqt4sLnAyQBkPqs3rD
aKFHvURqxSftS3DrpHN75WUrY6zSBhrT2zDbxoRtMUVBq+Pxmp0NSsyI0LD4K+gK
UGZEaVT6xVE7l5xB5sFGyNzz9+wjonZWjxqAPKoCP6EC/8CAcjujc48vZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm1+/MrJiDe7wWrgaIZJDYdZeBLMB8GA1UdIwQY
MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt
YzYyYmU4YTcwM2NlLzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl
LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpSE107E
CQdmoz0EfprgdyRVFsWlam4oh4szMHzyk+1L721i39KywwSSSzYzn5Lf9hCPXriJ
AMkaiZ/+SUf/wBHBTW+niPbb+pzWEmJ62inj7waRcN/Ifu3UU9riioEtHFN0a7Oz
nYxeFSRyamnkSKDZpd75DMApTB6uJWdOn4+J3E7UAmBTX2p2eVKVgt+h43jnL4wK
gAxltjHx92oxeOSzneriO8K6TVB6gOM6lx6OFXZXiB1uzVdrF3Va+chSsMGQQHCQ
7qVheolUw1sEa4a9VWjF+AHShtGP+Auj+KZEIqhYofuzU+TM7Ga/4tfE71OH8adr
l53SDpb6iCVXrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:02 2026 by rpki-client