Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 6Lrs6w/Rx/juchktIwVh2NujLF0U2bq/blWznMZyTgY=
Subject key identifier: 0D:35:22:2C:F5:0E:DE:F7:80:D3:E8:36:1E:D9:54:68:F3:91:BB:2A
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019D3789BA8802637B5409C2C32F7E9B7B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:01:06 +0000
Manifest this update: Sun 29 Mar 2026 03:01:06 +0000
Manifest next update: Mon 30 Mar 2026 03:01:06 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: iO7/I5fjHXSXaKCzD9kJ5EiVuHU8W6Kv5729fgziaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ba:88:02:63:7b:54:09:c2:c3:2f:7e:9b:7b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Mar 29 03:01:06 2026 GMT
Not After : Mar 30 03:01:06 2026 GMT
Subject: CN=0d35222cf50edef780d3e8361ed95468f391bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:29:62:8d:fd:58:8c:3d:92:f0:84:9e:45:
99:b0:3e:66:ed:01:d6:ff:6f:ee:d4:bd:11:6f:23:
a1:73:c5:2b:44:f3:cd:b7:58:69:90:6d:cb:55:aa:
70:f8:98:e8:b6:13:02:09:e9:cf:06:00:19:a7:b3:
26:27:e7:0a:08:03:5c:18:ba:81:98:7a:a8:66:9e:
1f:21:4a:54:5f:e6:f2:b0:d9:69:2a:d2:2c:33:5d:
40:08:13:3d:74:d0:e9:26:a9:e2:49:f2:e5:1f:5a:
70:16:e4:7a:ab:6d:34:97:8c:57:d6:88:a3:36:cd:
ad:a4:36:a3:c7:e8:3e:e3:36:93:b5:e3:d7:81:a1:
8a:a9:11:f3:00:cb:cb:c7:22:52:a7:be:e2:ca:d1:
ba:b2:7d:65:94:4a:9e:dc:8d:8f:a3:ab:44:b5:52:
f7:3f:d9:b4:3f:53:78:19:6d:b3:3c:1b:da:b0:3e:
de:dc:6e:45:2f:6b:2e:93:44:6c:1b:21:a6:7f:48:
fe:39:89:84:16:03:bf:62:70:37:5c:99:6c:7e:a7:
62:3f:80:6f:b4:db:fb:4d:e8:d1:8c:a2:f0:3d:ce:
ff:3a:49:a3:13:36:61:f2:d1:6b:a1:84:cb:11:c9:
87:c7:a9:4b:46:45:78:e0:67:ea:1b:d9:58:95:3a:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:22:2C:F5:0E:DE:F7:80:D3:E8:36:1E:D9:54:68:F3:91:BB:2A
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:13:19:81:b2:8b:b6:b7:5d:03:e5:4d:15:8f:87:ff:cb:35:
f2:bd:d6:0b:b7:53:45:9e:b8:a5:42:29:18:be:17:4c:e6:67:
c2:f6:1d:45:26:f8:6f:17:93:55:71:02:af:a3:be:14:88:93:
3f:ca:65:cb:d8:12:0a:a7:0d:93:27:55:bf:b5:e3:32:2a:f6:
5b:a6:99:d0:d0:98:0a:19:c6:f6:a9:e9:5d:8c:f4:9a:43:64:
7f:11:66:77:d8:cf:19:1d:7e:fd:d0:5c:ff:e0:24:bb:a8:ca:
db:ba:29:c6:b0:ef:8a:a0:56:0f:8c:dc:ef:0b:09:42:44:98:
f3:db:58:84:22:49:39:94:2a:01:ec:90:9f:3f:9b:40:00:2b:
cb:56:bc:dd:47:d0:8a:9a:26:86:f4:9d:d2:a7:8a:c4:c0:11:
4f:ca:d6:7f:5e:9e:ad:0d:c7:30:31:b3:da:9d:ff:47:0e:c4:
b0:fb:1f:bf:03:7f:8e:06:a0:53:ee:fa:3a:08:cd:09:f0:45:
4e:f6:5c:0a:a0:e1:23:bc:b6:aa:60:f0:dd:87:1d:10:65:6d:
5d:11:75:3e:e4:de:ee:89:c8:e8:a9:70:29:b7:d3:5f:06:b9:
2a:ab:ee:53:ca:76:bf:5f:95:c2:3c:32:7e:21:dc:63:1a:d2:
97:af:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:05 2026 by rpki-client