Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: wq3Ft0wtLb1+omvDTu6rCYrvnb97dPZVusr6HSCUdBc=
Subject key identifier: B3:BF:FB:AA:79:E1:0E:D1:70:E8:34:7D:F8:5D:0F:BF:94:16:65:0C
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019FF9B640F4E008230286C457B173833EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 0235
Signing time: Thu 13 Aug 2026 06:01:38 +0000
Manifest this update: Thu 13 Aug 2026 06:01:38 +0000
Manifest next update: Fri 14 Aug 2026 06:01:38 +0000
Files and hashes: 1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: wInm7MccwpAzxeuiJdESYkNTqYTQVKVG8dqTKkyKYjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:40:f4:e0:08:23:02:86:c4:57:b1:73:83:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Aug 13 06:01:38 2026 GMT
Not After : Aug 14 06:01:38 2026 GMT
Subject: CN=b3bffbaa79e10ed170e8347df85d0fbf9416650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:31:80:95:30:e9:6f:f1:98:e2:f7:c1:93:
ad:7a:24:05:ef:e2:ca:7d:90:2d:74:c1:07:a2:fa:
cd:b9:b6:09:07:77:bc:3b:a7:56:37:cf:a1:77:5e:
6c:ef:63:f0:5e:1b:9c:31:d7:d7:2e:51:df:aa:21:
8d:f2:63:c6:88:7b:8e:2c:57:4e:32:d8:03:15:ba:
55:2c:be:19:c6:72:15:37:51:0d:32:f0:26:bf:4c:
ad:6c:b6:0a:95:93:b2:41:c0:f3:f7:cc:3c:c7:8a:
1c:0d:f9:f9:58:b0:3c:87:ee:8f:59:a1:bf:d3:e7:
8e:64:b9:68:5a:37:04:2d:51:d8:93:16:58:c3:0f:
a5:75:48:9f:c9:2b:e4:41:15:35:0e:38:1d:cc:05:
a7:34:0a:eb:59:c6:5a:16:4c:e0:98:18:5f:89:f4:
18:47:df:26:c3:0a:6d:04:a7:5e:17:0c:d8:55:2e:
2e:15:c9:b3:97:fe:2a:f7:fd:43:77:e4:4f:0c:3c:
68:0b:26:af:e9:fc:de:10:04:b3:59:ea:e6:d7:23:
7a:2f:d0:50:05:2b:a3:c8:c5:7d:ab:d0:a0:5c:8a:
43:2d:1d:a8:81:7e:e2:10:25:88:26:22:a5:3a:73:
12:c0:2c:45:e8:a1:be:18:04:b5:4a:88:69:0a:15:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:FB:AA:79:E1:0E:D1:70:E8:34:7D:F8:5D:0F:BF:94:16:65:0C
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:d5:49:f0:56:7b:4c:32:95:9f:c4:81:90:7d:69:a1:9c:
67:30:77:ea:87:52:4f:d1:57:34:53:b8:39:9e:8c:bc:c3:ec:
76:c4:aa:1a:56:88:2d:f5:f8:06:45:1b:54:55:ab:a4:17:82:
0f:53:4f:b8:d3:7a:a0:ee:d3:63:b7:d7:28:f7:29:f9:e2:04:
6b:45:0c:a1:8f:67:bd:3a:f7:76:1b:92:2d:80:cf:0a:a0:8f:
79:82:83:f5:2d:81:61:9e:f5:d5:d7:82:86:f6:94:6d:0e:ab:
0b:da:2a:91:40:f7:72:66:cd:18:ed:05:66:23:c0:0a:c6:a5:
8e:63:6a:8f:e2:f1:17:56:ff:b6:3a:80:0a:ad:f3:92:1d:e4:
d5:a1:19:20:4b:61:b9:7f:ae:f9:a9:f3:50:17:99:e8:eb:f8:
cd:a1:ca:c7:ce:43:0d:6a:31:98:4d:2c:12:c3:b7:43:5c:45:
06:73:c0:1b:44:7b:e8:98:df:a7:3b:c8:39:ad:15:0d:d0:11:
d3:0f:d4:f2:9c:ec:53:70:9f:a7:0e:39:0e:e9:fd:13:5f:35:
1b:cb:31:e8:75:8c:12:52:0f:f2:d6:14:11:41:6f:7a:b3:3b:
58:19:41:e0:7e:b7:13:7f:ca:ca:c3:17:3e:de:44:00:c8:f5:
0d:9d:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:18 2026 by rpki-client