Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: /piFMwtEK9rxD+RQ+bWozdI+fM3cJuRqU6R8ssGD2Og=
Subject key identifier: C5:C8:7B:62:6A:4C:42:7C:F7:F1:E7:EB:B4:30:03:17:BE:7F:FD:9D
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01A00213AA8243B85430AE79A63AFBED2262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 21:00:38 +0000
Manifest this update: Fri 14 Aug 2026 21:00:38 +0000
Manifest next update: Sat 15 Aug 2026 21:00:38 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: D/FlZMTozWajuz89vXmAPbgzNl/YgttDyqA7u0rZT7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:aa:82:43:b8:54:30:ae:79:a6:3a:fb:ed:22:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Aug 14 21:00:38 2026 GMT
Not After : Aug 15 21:00:38 2026 GMT
Subject: CN=c5c87b626a4c427cf7f1e7ebb4300317be7ffd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:ce:c8:98:e3:8a:ad:59:9d:5c:53:e2:6d:
6d:17:3d:8a:a7:0e:e1:b8:ab:9f:c4:2e:b0:8e:cc:
e0:59:47:d8:2f:e8:db:a5:44:72:74:51:9f:e4:76:
24:72:a1:f4:6c:3d:46:54:b2:7d:f2:b6:39:8a:ef:
32:fa:ff:5a:76:88:0f:1d:e2:15:4a:96:e6:4e:3a:
8d:25:f2:4e:1e:0e:46:c5:62:df:bf:4a:ed:30:d0:
da:d9:dd:3b:5f:6c:a3:e8:cd:78:59:87:0f:a1:4a:
be:30:a3:49:b0:c6:01:69:77:e4:3f:ca:ac:27:e1:
bf:bb:d9:2c:e9:93:ca:7b:c3:ad:e7:e0:7d:e0:93:
b9:fe:89:1c:c3:15:aa:20:6a:d3:eb:d2:fb:d9:3c:
e2:26:30:8a:cc:6d:6a:17:c1:b0:27:7f:36:74:56:
56:83:8b:71:78:07:02:8d:96:5d:28:26:ab:a5:06:
92:7b:1b:7f:94:e9:0d:a4:3e:3e:67:43:e2:c3:96:
b9:9e:70:e1:f0:cd:fe:b2:1c:fb:61:85:f8:4c:c3:
60:ae:ec:9b:59:64:53:96:f4:f4:d6:82:07:c7:63:
ad:c9:5c:2e:b3:84:d3:41:e8:38:a5:95:3a:f0:00:
6f:05:f2:93:f3:11:39:e5:6c:e8:af:03:b3:e8:cb:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:7B:62:6A:4C:42:7C:F7:F1:E7:EB:B4:30:03:17:BE:7F:FD:9D
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:13:03:a5:c4:80:e9:d6:e1:aa:65:05:4e:fe:28:46:7d:
ee:3b:a1:66:d5:39:9a:8a:05:21:3f:75:9c:fb:c2:44:37:e9:
1a:78:ab:94:dc:ea:fa:3a:e7:13:f2:fa:c2:f4:c4:b3:20:c1:
33:96:fa:45:c7:0f:3b:22:2c:18:75:06:36:ff:e2:93:42:aa:
86:fc:73:b4:da:8c:c6:a3:4b:b2:40:7c:bb:3a:f4:ac:45:99:
3a:a1:7c:90:89:10:61:ab:40:66:20:90:ed:93:02:20:0b:17:
dc:39:eb:a9:05:03:df:13:e0:0d:97:9d:98:b8:b0:4a:58:89:
80:dc:90:ae:d5:1a:9e:61:38:96:36:0d:b2:31:bc:6f:aa:e0:
bc:11:e1:76:5c:b5:9a:6e:29:c3:8d:28:e0:66:45:1e:50:db:
d6:44:94:a0:bb:e2:b4:67:87:ef:b6:ac:43:05:6d:8c:61:6c:
e3:18:6a:4d:e8:d4:93:fc:71:2e:74:8d:a7:58:3b:45:b0:99:
d3:74:50:e3:2d:f8:43:1b:ed:c8:7e:be:e4:d4:72:0e:a9:8a:
17:c6:cb:94:10:07:8c:87:f7:89:f4:1b:78:36:a8:31:98:af:
fd:7d:2e:28:5d:e8:c4:72:44:b3:36:fb:bb:57:50:06:a4:02:
45:39:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:29 2026 by rpki-client