Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: 0ItPGIIQHfRTuiIdM4n4V6cRVURh8S3SKm9r47IY3HA=
Subject key identifier: 00:28:D6:0A:F9:E0:B1:FF:F3:39:EE:DE:F9:D8:6E:1C:A8:43:EE:77
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019F916C4B6B4A54E90201F520E9B07DEBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 12B1
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: H9WWsCVzvm+EK0soNX1aYqPhTz8AVDc9Yle4AfwNcWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4b:6b:4a:54:e9:02:01:f5:20:e9:b0:7d:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=0028d60af9e0b1fff339eedef9d86e1ca843ee77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:4f:c5:5e:fc:b8:46:96:52:62:b7:d1:16:
b4:03:9e:23:24:15:1d:07:5a:8c:cd:d6:90:a2:12:
a0:7a:31:01:a4:2b:b4:30:09:7c:e2:ba:a1:78:f4:
5b:62:31:c0:97:a0:b1:a8:2b:f9:47:38:fa:39:07:
5e:bd:bb:fe:e0:e0:8a:5b:1c:93:54:51:63:fb:ec:
a6:c8:e5:e4:f4:4c:be:84:55:d3:ae:cb:3a:7a:d7:
aa:e8:e5:3b:d0:ee:ca:a4:b4:c6:57:46:44:13:7f:
ef:7e:53:2e:18:05:f1:3a:1a:72:ee:43:d1:3f:45:
0e:5c:dc:c8:5d:39:3c:f8:09:bb:49:bc:e7:c9:0b:
ff:ae:3f:ff:16:80:4b:b5:f6:9a:d3:bf:7c:d9:a7:
59:d0:1d:57:32:2f:33:f1:94:35:84:88:18:62:23:
d2:8b:32:f0:fe:d5:c3:82:9c:74:47:0d:50:a8:10:
1b:51:f0:2b:e4:7f:99:76:48:49:38:59:f5:50:fa:
7c:2b:d7:ab:63:a6:2d:94:d2:4e:38:76:dd:2f:46:
ae:de:62:9f:97:27:4e:99:99:f4:ab:39:27:e6:e6:
78:a6:7a:44:e1:b2:f1:23:26:02:27:59:e8:56:38:
e4:9b:8d:29:2d:47:0c:b9:7e:c4:35:d2:cd:c2:fe:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:D6:0A:F9:E0:B1:FF:F3:39:EE:DE:F9:D8:6E:1C:A8:43:EE:77
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:3b:76:b3:46:dd:2b:23:51:b9:3d:c9:da:5f:8a:eb:71:
45:c3:91:8e:da:88:85:8a:c6:16:ef:ee:07:db:e5:2c:10:60:
b2:ee:3e:10:aa:06:42:99:d2:a1:e0:05:f3:44:86:70:c7:3c:
a0:21:3d:ae:3e:b6:17:5e:49:ea:37:c4:58:e1:23:7e:db:1f:
6b:b7:d0:39:cd:e0:a8:2f:4d:46:af:e0:a6:ac:6b:29:30:e2:
8d:59:f9:99:14:fa:b1:b5:18:17:45:36:22:2e:a6:82:4d:cb:
f5:5a:5b:87:a0:cf:d8:62:2a:99:2d:20:42:d3:40:dd:14:e2:
66:2c:1a:36:55:da:66:6d:8a:56:e1:a4:db:f1:3d:2a:a2:86:
15:d4:64:63:9c:2e:36:bb:a2:63:bb:66:0d:87:1d:d8:54:68:
15:02:47:d0:26:30:76:d1:dc:47:f4:d5:54:72:b6:0f:9c:45:
09:60:0c:8f:43:d5:ea:b3:b9:d7:6a:af:ae:4d:bb:c9:14:de:
78:33:e9:56:5e:67:16:80:3b:03:2c:08:9b:05:c3:34:19:8e:
15:75:16:25:ae:23:eb:22:e9:de:51:f8:b3:da:86:b2:87:6b:
7e:80:05:25:fd:81:ea:75:82:d8:0b:24:6f:2a:26:0f:df:16:
ed:ac:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:10 2026 by rpki-client