Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: ESjaHZbHmO90NXDpFRzrK5cJq345yTHx0VcefRy+7Cg=
Subject key identifier: 26:AC:3B:4C:E2:65:63:D0:44:D8:BE:3B:D5:0F:D8:75:FC:6B:C3:83
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019FA3055C9310F53F2DF4A79B88CB43EBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 12F9
Signing time: Mon 27 Jul 2026 10:01:05 +0000
Manifest this update: Mon 27 Jul 2026 10:01:05 +0000
Manifest next update: Tue 28 Jul 2026 10:01:05 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: Y0xTD8C8C30770lYoHzmo8UpaWSsaZY9E+a5CYwOpWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:5c:93:10:f5:3f:2d:f4:a7:9b:88:cb:43:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Jul 27 10:01:05 2026 GMT
Not After : Jul 28 10:01:05 2026 GMT
Subject: CN=26ac3b4ce26563d044d8be3bd50fd875fc6bc383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:cc:27:90:e0:1c:16:cc:bd:08:1e:c0:7f:
a4:13:85:84:7e:5a:5b:59:7a:8b:60:12:2d:d1:da:
9e:bd:9e:dc:e5:57:62:58:34:d0:bb:04:d2:ca:2d:
e0:27:f4:81:64:7c:56:9c:e2:85:80:0e:73:a2:b8:
71:bd:84:0d:9e:cb:8c:37:52:c5:d7:f4:31:72:a2:
0f:9d:4a:fe:15:5d:e4:95:74:11:19:88:05:2f:8c:
eb:ab:b4:e8:44:8d:8d:7e:fa:2b:e3:93:13:8c:57:
e5:fa:00:d1:b4:ec:8b:77:84:40:59:22:e9:ab:3f:
01:1a:85:f1:02:11:19:6f:d3:5c:0b:7c:85:e3:7a:
dd:11:02:e8:02:53:14:57:64:44:df:41:20:4e:37:
9c:e7:df:77:21:83:5f:85:47:b2:c8:94:5b:17:9d:
fe:9c:1b:ec:26:e2:27:20:c1:e1:e9:2d:2e:60:7f:
68:e5:ab:10:60:23:66:d6:b5:45:7a:98:4a:91:58:
ea:d3:24:70:e6:b5:ab:21:aa:92:2e:f3:a7:88:ca:
18:64:75:2b:fe:09:3a:34:00:c2:a9:1f:41:9f:85:
cf:15:42:02:3f:aa:44:ba:6e:f5:ac:0d:0c:91:66:
ba:fc:01:fa:e4:eb:c9:6c:2b:72:10:07:26:14:f6:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:3B:4C:E2:65:63:D0:44:D8:BE:3B:D5:0F:D8:75:FC:6B:C3:83
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:99:65:47:ac:f7:73:c8:1b:2e:b7:3e:c3:6b:76:92:8a:
cd:f0:69:96:15:9f:a1:da:72:62:2e:40:80:99:0a:3d:d2:7a:
fb:c3:1d:7d:94:a1:d8:2a:af:23:8a:76:96:41:5e:6d:70:eb:
97:e6:3b:f4:d7:e4:0e:85:c4:90:16:34:b2:f4:c3:89:a6:06:
2e:8b:1e:b2:3c:52:38:27:07:86:98:2a:63:20:67:51:0c:bf:
43:a7:4c:6c:07:a6:96:96:87:f5:36:68:63:03:67:b1:36:6b:
0d:7b:f9:95:82:91:be:fd:a6:21:64:3a:a1:ff:ab:da:25:39:
be:87:16:0e:50:0e:e3:30:8f:63:0b:75:b8:6d:e3:5a:82:7a:
76:43:41:df:f5:e9:47:32:3d:89:2c:bd:0d:c7:a5:b2:f0:7b:
38:06:f9:eb:81:80:8e:ac:fe:e2:07:9a:e8:de:8d:ae:1b:e7:
ef:81:e9:4e:92:a2:a5:2c:eb:d6:e1:d9:72:31:f1:5c:ec:22:
be:c2:75:82:d1:b2:c8:11:f0:33:61:d7:35:bd:4c:2d:e6:72:
9b:54:05:c8:45:71:64:e4:77:9f:63:b6:8e:66:a9:3a:d0:17:
82:05:4f:d6:c2:3d:db:3b:27:59:d2:ba:d0:7d:0b:a0:be:98:
35:8a:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:32 2026 by rpki-client