Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 5KfAdfDlW0hfD9ffTXTf9nddvEplz6W4sg5KJfXVlSI=
Subject key identifier: 01:61:66:6F:D3:EE:0C:A9:55:6A:40:F4:8B:6F:8B:56:42:96:2F:B7
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01A14E3E5B206CC4C1C55940D6BE81176416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1AAF
Signing time: Sun 18 Oct 2026 09:01:11 +0000
Manifest this update: Sun 18 Oct 2026 09:01:11 +0000
Manifest next update: Mon 19 Oct 2026 09:01:11 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: Cks8ZhGBOEtnxe0wAE6iilmvSbGRqXKyuIB8BUx2AZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:5b:20:6c:c4:c1:c5:59:40:d6:be:81:17:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Oct 18 09:01:11 2026 GMT
Not After : Oct 19 09:01:11 2026 GMT
Subject: CN=0161666fd3ee0ca9556a40f48b6f8b5642962fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:4c:df:45:c1:a7:60:eb:9d:5e:32:71:25:
04:b2:22:ac:b8:9a:e0:1c:4b:af:51:49:06:ad:53:
33:e7:7c:b0:ee:21:bb:c4:ff:3c:b3:d8:17:c8:37:
f3:c5:80:0d:87:36:5a:2c:36:55:b9:06:cd:f3:75:
89:8d:5a:89:0b:2f:22:b0:7f:b1:cb:99:ed:0b:58:
93:0b:af:a9:f4:fa:fd:a6:6c:bc:ec:97:f4:ff:11:
95:c6:ea:5c:e7:d5:c1:fb:78:4b:f0:46:8c:39:2e:
c4:32:bd:d8:6d:bb:ff:00:0e:8c:74:7b:86:fd:a5:
72:f5:3a:86:bc:25:74:24:f8:93:0d:39:38:ea:03:
5d:d9:6f:69:b0:81:1f:bf:fd:42:9e:ed:1b:45:3c:
75:a7:b7:a5:3b:2d:64:f2:c4:2d:db:ff:51:f8:e1:
07:0b:e1:8f:33:05:fb:0a:66:67:bf:d0:fd:5b:db:
f0:a0:3f:3e:1f:82:fc:25:07:56:5e:b0:e1:db:9a:
69:43:ab:17:66:a5:65:4a:d1:e8:78:fb:ca:58:98:
e2:b9:56:10:aa:69:cc:1c:f2:a6:00:b6:72:29:d5:
6a:53:e9:77:db:06:6a:ae:16:9f:20:94:e7:d2:67:
59:4a:4a:d6:e9:6f:f7:a4:45:66:a3:cd:fd:40:93:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:66:6F:D3:EE:0C:A9:55:6A:40:F4:8B:6F:8B:56:42:96:2F:B7
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4a:22:3f:5a:ee:f8:12:5b:63:ef:b7:a6:5d:4c:04:d0:79:
23:8e:d8:e5:1c:57:c0:f3:5e:f6:51:55:51:41:78:96:dd:9c:
eb:6c:a6:1c:bb:29:97:a3:e1:40:b9:b7:5e:64:e8:4c:fe:87:
20:ff:e7:6a:e8:a0:e8:cd:bc:24:00:25:99:d3:46:e0:99:e4:
12:84:8c:ee:9a:a8:1f:d2:67:b7:e9:a4:89:57:e5:a6:f4:09:
e3:73:1e:e2:1f:aa:96:b1:ea:e0:5e:c4:98:85:3c:d6:a0:71:
42:77:ca:ef:d6:14:12:19:e4:44:07:9f:d4:b8:72:16:dc:a9:
d2:f5:e3:3e:fe:88:32:bc:d5:3d:39:09:f6:d0:99:74:fc:cb:
56:87:66:72:dd:7c:8f:50:6e:80:ed:7a:94:33:30:f8:e3:97:
b1:1a:48:e1:bf:64:a2:d9:9c:b8:21:f0:86:5d:48:d7:14:7d:
73:59:92:01:92:5e:c2:69:42:b7:d1:32:94:0c:c6:a3:83:ca:
dc:2c:37:c0:8c:4d:33:a0:82:6a:f1:91:de:43:43:07:43:d8:
db:48:60:84:cc:24:81:f7:d4:11:2d:de:57:ae:58:39:66:0d:
37:f0:66:67:d4:20:8b:05:79:de:8a:ba:26:4e:be:8f:22:0e:
c6:ad:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:37:50 2026 by rpki-client