Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: BrcF7YURdtI7UNoRuazb5SML/ln10GbVrQhGG0Unso4=
Subject key identifier: 2A:D6:3B:32:0F:CB:A6:9A:FD:73:A5:B3:E6:2A:3F:8F:E0:32:FE:90
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019D37898660CBF9A8AC0453400E512F4849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0B30
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: 3pPlGefERPNNb3LZTRw8EyYwrK8.roa (hash: 9UINQk9n7UxmChzwqHzUGLHOlISFZwBCGhQ+P6Wni5M=)
2: _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (hash: 2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: 2ejJ9JFD3BGd8Vs3jZ9JQVZhmxlQ7cc6QHb0rQq7UAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:86:60:cb:f9:a8:ac:04:53:40:0e:51:2f:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=2ad63b320fcba69afd73a5b3e62a3f8fe032fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:9d:7d:16:75:ec:81:3a:f5:c1:f6:22:fb:
ca:59:6d:00:55:cc:c9:a1:b9:45:c3:2a:7e:a8:b7:
47:65:c5:e6:5b:ad:a6:d5:60:f2:2d:63:da:7f:e0:
be:59:b8:b9:38:4a:f3:99:ce:5e:b4:99:89:13:e2:
d8:34:43:3f:bd:ac:4e:d5:a5:ce:d6:2e:f4:dc:2d:
de:79:20:a7:74:b0:ca:57:51:e3:69:fd:9d:72:69:
f9:b3:c8:28:55:3e:8b:ba:32:05:34:29:ad:9b:e4:
58:27:e5:63:30:1d:ce:01:a1:06:15:a2:7d:bc:2d:
c3:3c:2d:4f:ef:44:c4:a3:55:01:76:0e:c0:4e:8d:
22:51:8e:f3:5a:7d:85:ef:ae:e5:68:d4:75:b6:2e:
bc:a1:58:02:2d:8f:80:26:ad:06:0f:68:19:54:57:
97:e2:d3:57:90:73:17:d6:97:a6:22:b4:db:ff:2f:
3b:68:c7:50:65:a7:0a:4e:f8:18:15:40:e7:39:ac:
3f:e7:e1:c2:aa:d6:0f:1a:69:0a:3a:f1:69:1b:d0:
b7:ea:7f:85:bc:ca:fe:6f:f4:78:72:0f:0a:ff:db:
0e:e9:f4:3f:97:4c:15:ec:f0:61:bd:ff:ed:19:96:
fb:cc:fe:61:7d:3d:36:34:4a:0a:93:99:e7:9d:36:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D6:3B:32:0F:CB:A6:9A:FD:73:A5:B3:E6:2A:3F:8F:E0:32:FE:90
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:57:cb:fd:05:54:ac:49:99:49:91:28:e7:59:0c:66:89:71:
09:68:78:1f:3d:58:4d:9a:c0:11:a9:55:29:dc:fe:61:b5:4a:
55:6b:d5:d8:f5:3f:98:f3:67:5c:a4:f9:e0:53:36:02:1d:09:
7a:ad:26:79:65:ab:28:25:b2:60:fd:7a:4c:05:0e:61:ba:92:
ea:cb:a7:9c:49:2d:a4:f3:c2:af:e7:78:31:8e:bf:8a:16:7a:
2c:51:93:12:65:03:e2:e8:28:6c:1b:24:9f:30:dc:26:e7:50:
9f:61:85:39:0b:70:cc:66:b3:1b:7a:a1:b5:9d:4a:82:d2:78:
96:71:b3:a2:b1:da:38:66:1b:7a:6e:ca:e4:a0:08:14:d7:51:
8d:d3:85:cb:e4:65:d3:33:80:77:c7:b0:da:34:0d:02:24:c9:
78:c7:e5:11:ef:90:5d:a3:cc:5c:28:47:13:09:38:45:04:68:
23:e7:19:82:e5:d0:50:b4:cd:67:8d:18:3c:de:04:f3:af:34:
f0:7e:bb:0c:07:aa:d0:9a:55:7c:80:bf:c3:11:4b:ef:be:bc:
21:44:05:00:b7:b5:af:bb:a8:18:77:4c:ce:84:e5:d3:08:21:
8e:e6:88:c7:45:3e:c5:b8:44:f1:e2:51:5f:dd:c4:6b:93:27:
a6:ec:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client