Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: X7mKPLuVYYjVC1hNpHiXHBTkXD9Gdt8yLYLsm5rjI5g=
Subject key identifier: 7D:B5:2B:A3:A7:10:3A:45:37:58:1B:6E:FA:80:40:3E:B1:E4:10:C8
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019DD19A1B86C4434E8145850623AC0F1653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1208
Signing time: Tue 28 Apr 2026 01:00:30 +0000
Manifest this update: Tue 28 Apr 2026 01:00:30 +0000
Manifest next update: Wed 29 Apr 2026 01:00:30 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: E5c4+wGR1ay3lHWt6NXmGim1NpnpFAxJSJrwmEZNY8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:1b:86:c4:43:4e:81:45:85:06:23:ac:0f:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Apr 28 01:00:30 2026 GMT
Not After : Apr 29 01:00:30 2026 GMT
Subject: CN=7db52ba3a7103a4537581b6efa80403eb1e410c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:5a:bd:43:11:09:5a:06:0c:a8:d4:f9:f7:
96:d6:39:ad:2e:06:66:1b:37:4f:b6:1f:74:b5:45:
68:d2:e7:7a:52:c4:b7:c4:16:f4:49:cb:62:4e:b9:
4e:a8:a4:af:cb:bc:38:fb:9a:94:a0:31:d2:72:a7:
0d:ac:28:f6:8b:09:89:8d:bc:04:22:88:c0:53:d8:
3f:99:b4:a4:05:ce:f7:8f:ae:e9:5a:b4:e5:c5:52:
df:ac:0b:92:fd:72:39:21:92:1d:83:07:24:00:7e:
33:a2:f7:a4:62:b0:63:35:d6:b5:b0:ea:19:3a:c3:
da:8a:cb:75:b3:03:ee:c8:fb:12:8a:61:1c:ac:e8:
bf:be:a4:30:61:21:a1:11:d4:bf:16:0a:0c:65:af:
98:ff:ea:89:48:fb:d0:02:86:f0:42:7f:48:87:58:
d3:7d:67:5a:54:c9:db:06:b7:f1:0e:6d:98:3f:6c:
1c:22:64:78:26:15:eb:35:a9:64:fb:0a:94:66:04:
1b:65:cf:58:b9:2a:31:d6:59:73:e8:b5:3a:eb:61:
13:bb:c4:6b:56:0b:f6:6b:ce:2a:30:2d:b1:5e:0a:
1b:3b:dc:c3:c7:64:8c:55:bc:c5:95:1e:a7:be:2c:
21:d7:87:88:79:da:36:42:19:a4:84:6e:b6:21:ec:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B5:2B:A3:A7:10:3A:45:37:58:1B:6E:FA:80:40:3E:B1:E4:10:C8
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:a5:e5:f2:cd:72:3d:dc:9e:64:68:1f:4a:50:54:8e:51:
84:e7:a4:a3:9e:70:74:b3:87:15:19:69:ef:6f:88:e6:41:23:
63:63:89:b3:24:96:49:54:e1:91:55:13:dd:4a:58:5f:c6:60:
4e:ac:05:25:a1:7c:52:95:33:44:30:01:f9:5a:9b:d1:fd:09:
a6:98:85:35:2a:eb:0c:34:db:f3:b2:05:1f:e1:f1:25:a3:02:
4c:e0:42:f2:1f:88:3a:0a:57:1c:f9:2c:d2:45:4d:3a:6b:dc:
6b:92:b8:98:fb:30:77:05:1a:65:12:f9:12:6d:98:6d:12:f4:
0e:be:a8:43:15:93:0f:42:15:f0:e6:9c:ae:22:07:7c:20:5c:
6a:05:18:b5:51:f0:bb:dc:db:a0:66:b1:31:1b:18:48:c7:3e:
ae:22:cd:2e:a6:5a:dd:9f:62:d4:35:45:45:86:05:42:28:02:
05:9d:f2:d5:e3:28:6b:2f:d2:d0:82:0f:a3:3a:14:2b:d5:9e:
ce:26:53:20:92:6a:b0:e1:e5:01:70:4c:33:47:6d:ef:5a:31:
c4:f3:99:83:18:45:40:fd:db:64:70:8a:92:bc:71:96:94:60:
0c:97:82:87:1a:2a:9a:7a:15:7f:c3:9b:10:41:05:03:50:0d:
5c:a9:8c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RmhuGxENOgUWFBiOsDxZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYwNDI4MDEwMDMwWhcNMjYwNDI5MDEwMDMwWjAzMTEwLwYDVQQD
Eyg3ZGI1MmJhM2E3MTAzYTQ1Mzc1ODFiNmVmYTgwNDAzZWIxZTQxMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8pavUMRCVoGDKjU+feW1jmtLgZm
GzdPth90tUVo0ud6UsS3xBb0SctiTrlOqKSvy7w4+5qUoDHScqcNrCj2iwmJjbwE
IojAU9g/mbSkBc73j67pWrTlxVLfrAuS/XI5IZIdgwckAH4zovekYrBjNda1sOoZ
OsPaist1swPuyPsSimEcrOi/vqQwYSGhEdS/FgoMZa+Y/+qJSPvQAobwQn9Ih1jT
fWdaVMnbBrfxDm2YP2wcImR4JhXrNalk+wqUZgQbZc9YuSox1llz6LU662ETu8Rr
Vgv2a84qMC2xXgobO9zDx2SMVbzFlR6nviwh14eIedo2QhmkhG62IezRTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH21K6OnEDpFN1gbbvqAQD6x5BDIMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnWl5fLN
cj3cnmRoH0pQVI5RhOeko55wdLOHFRlp72+I5kEjY2OJsySWSVThkVUT3UpYX8Zg
TqwFJaF8UpUzRDAB+Vqb0f0JppiFNSrrDDTb87IFH+HxJaMCTOBC8h+IOgpXHPks
0kVNOmvca5K4mPswdwUaZRL5Em2YbRL0Dr6oQxWTD0IV8OacriIHfCBcagUYtVHw
u9zboGaxMRsYSMc+riLNLqZa3Z9i1DVFRYYFQigCBZ3y1eMoay/S0IIPozoUK9We
ziZTIJJqsOHlAXBMM0dt71oxxPOZgxhFQP3bZHCKkrxxlpRgDJeChxoqmnoVf8Ob
EEEFA1ANXKmMAQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 05:48:12 2026 by rpki-client