Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: Nim5umZghClKXeK29Lyc+BleRNSgJgCor2ohcrDXlYA=
Subject key identifier: B1:8B:F1:E1:51:12:A8:07:AE:43:15:5E:23:83:B6:A5:F6:00:BF:BB
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 01A0E73FBBAFE33E6A4B97F5A17A9BB64E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 02B0
Signing time: Mon 28 Sep 2026 09:01:48 +0000
Manifest this update: Mon 28 Sep 2026 09:01:48 +0000
Manifest next update: Tue 29 Sep 2026 09:01:48 +0000
Files and hashes: 1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: hZgJJ1kOPD9hMzbZ48W/O6DBUxIpWhjbpsEsINrQROM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:bb:af:e3:3e:6a:4b:97:f5:a1:7a:9b:b6:4e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Sep 28 09:01:48 2026 GMT
Not After : Sep 29 09:01:48 2026 GMT
Subject: CN=b18bf1e15112a807ae43155e2383b6a5f600bfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:ff:44:1e:17:96:7c:11:8c:b8:9a:1c:a0:
7b:54:f4:a1:ea:bf:3b:77:39:f8:82:b4:11:ef:61:
ab:62:75:14:c4:0f:6c:7e:4f:98:ad:2c:83:7b:42:
23:83:32:c7:7b:44:d4:dd:f3:de:e6:8f:5f:e8:8a:
08:c6:2c:14:89:cb:c4:32:7d:2e:d2:5e:6f:e3:9d:
c4:7d:63:f6:97:e1:51:74:6f:8e:51:25:03:e5:6d:
b0:84:e8:29:5e:4d:72:2e:6e:84:03:6f:d9:c6:f2:
eb:9a:21:54:27:7f:07:f4:eb:d2:ec:d6:a4:b2:5a:
92:1c:b1:5d:2c:87:2e:94:0f:ed:db:d6:b9:51:c9:
5f:58:d5:7b:94:1c:3f:63:68:8f:01:98:c8:d2:06:
f7:bd:f1:81:37:9e:56:21:94:e9:bb:33:a1:5b:f0:
a6:9d:77:aa:a3:a8:45:2d:82:0f:90:95:f7:62:b4:
f8:07:aa:0e:10:92:0c:dd:1b:44:3e:61:c6:12:68:
30:2c:c9:a7:dc:63:98:2f:e4:86:5f:1b:96:4b:84:
4a:23:1f:fa:8e:79:65:d7:8d:8e:7c:48:f2:37:7d:
e3:5e:10:1f:01:28:1a:7d:a1:1e:8b:6a:a8:9a:ff:
7d:28:eb:a1:55:67:4f:6b:76:ef:21:d1:db:bf:89:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:F1:E1:51:12:A8:07:AE:43:15:5E:23:83:B6:A5:F6:00:BF:BB
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1c:d1:9b:ff:21:5b:1e:b4:ab:11:df:45:a5:5a:10:c9:75:
f4:a8:d5:9c:f7:09:3a:31:89:64:a0:dd:94:2e:6f:51:d2:e5:
b4:07:37:da:f8:bd:a4:ee:69:aa:16:1a:3c:61:ab:bb:09:7d:
16:b4:01:ec:cb:71:55:7d:6c:bf:53:6c:6d:0c:7e:28:3d:aa:
f2:37:32:f6:c1:b9:ec:05:dd:6d:74:34:c8:41:af:67:f7:ae:
6c:32:18:8b:4a:04:b8:be:90:c4:c8:85:76:67:e9:3d:43:a8:
1c:c2:be:95:b4:61:ea:fb:4e:0f:c8:a8:a6:35:8a:3d:bb:fa:
72:a7:f0:51:0e:bf:79:71:6d:eb:04:4a:64:50:ca:20:17:38:
22:f1:89:7b:c4:cb:30:aa:c6:fe:ab:e3:e5:95:0a:dc:77:d6:
a0:5e:e8:93:22:08:75:e0:e3:4b:76:f0:32:cb:10:9e:8c:62:
44:a1:12:7b:81:05:de:a8:70:b9:ab:6b:47:df:16:d0:25:c6:
05:82:2c:46:1f:82:28:3b:3b:80:16:e5:8b:dd:20:d9:7a:58:
11:be:57:2b:40:5e:0f:7b:fa:5f:32:45:f1:fb:1c:71:b5:fb:
bc:b8:83:ff:7f:73:17:15:a1:33:a2:34:2b:27:c6:86:ec:31:
51:7b:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:30:58 2026 by rpki-client