Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: Xrz2pLonn2JBSP1Ze6UN3KU837i5aJG/djyuSgNd4ig=
Subject key identifier: 97:9A:6C:1D:70:37:5B:04:2B:D4:05:3B:53:D3:EA:99:4F:B9:74:59
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 01A17C28BF8B88C1B6FBB661C325323448F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 13EE
Signing time: Tue 27 Oct 2026 07:00:07 +0000
Manifest this update: Tue 27 Oct 2026 07:00:07 +0000
Manifest next update: Wed 28 Oct 2026 07:00:07 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: AiD8ZkyN3yuL2ucj3S7I4Y4R/j3sWJ1DvFDM86giG5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:bf:8b:88:c1:b6:fb:b6:61:c3:25:32:34:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Oct 27 07:00:07 2026 GMT
Not After : Oct 28 07:00:07 2026 GMT
Subject: CN=979a6c1d70375b042bd4053b53d3ea994fb97459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:e7:78:f0:ff:14:35:16:6c:68:ce:84:e1:
45:15:ee:f3:b9:a5:4f:1c:d3:96:07:69:de:0c:6e:
44:ad:5f:c7:42:a8:a5:16:dc:e8:87:98:19:0a:c6:
87:fc:e3:bc:5c:9d:02:a1:d6:20:c5:05:7f:96:d6:
7e:c7:8b:72:27:59:6c:50:fb:77:96:de:d7:e7:99:
51:70:c4:6c:fa:d1:6c:13:09:16:9c:55:42:51:c8:
e1:89:aa:f9:dd:52:8e:d2:f2:91:55:b6:29:1d:d9:
d8:8e:ab:70:26:cd:22:2b:ae:c4:2c:f8:47:52:d7:
71:ae:c0:81:04:ab:40:8c:af:dd:e7:44:f1:56:d5:
86:4f:3c:ad:5b:3d:7b:92:6a:7f:56:bc:84:28:eb:
75:24:56:ba:b8:f1:f6:9b:d8:c8:81:db:41:3a:66:
09:da:8e:14:b6:b7:14:f1:8c:11:76:ef:62:07:27:
fc:6b:c4:f9:3b:af:d8:11:9c:69:bb:e5:eb:d0:0c:
d1:2c:ab:c2:16:ba:6b:81:e9:ee:bb:98:f2:97:d3:
04:a9:59:27:90:80:a6:05:8f:77:a3:80:63:86:39:
86:f2:7c:13:48:83:db:bf:94:25:9f:18:ab:b8:7e:
f1:8b:63:c5:5b:20:d3:8f:b8:9e:5b:c7:00:61:15:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:6C:1D:70:37:5B:04:2B:D4:05:3B:53:D3:EA:99:4F:B9:74:59
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:7a:f2:50:e1:35:ed:29:1a:76:f4:fd:2d:ab:a2:b2:03:
e7:b5:75:7c:95:77:f4:9e:b6:fd:8c:51:05:7b:ed:92:1a:d2:
a8:6a:b1:4d:dc:73:79:c6:9d:7b:77:15:ca:50:f6:be:84:17:
ac:ac:6f:6d:b1:71:26:c3:9c:d1:58:1a:d5:a3:1f:0a:92:44:
eb:9b:c4:34:5c:2b:c1:8e:c8:f5:f3:30:5d:6d:0f:98:18:7e:
f9:56:9a:2c:a2:bb:f8:2a:bc:6d:ee:4b:61:a1:0a:8e:af:d8:
76:13:98:69:72:23:7e:bd:c9:72:59:12:64:c7:f2:ff:d3:9d:
ce:1b:6e:6e:59:94:c9:20:0a:ef:0d:58:01:22:90:6d:35:b8:
8e:22:67:b9:e5:2b:2d:cc:88:07:73:95:b3:ee:15:8e:0c:a4:
5d:86:f6:d7:5c:f5:32:87:f8:91:ba:01:b5:55:81:d2:45:cc:
4c:5d:e3:37:d3:33:89:c2:3a:90:00:96:ae:0c:42:03:a4:45:
c0:d7:16:16:19:68:06:f3:12:e8:e3:aa:ec:46:6f:2f:93:40:
88:af:67:b5:fb:a2:2e:a7:d4:8a:0d:a8:6b:4b:e3:54:d2:50:
30:8b:f4:ae:7d:37:10:42:95:f0:f6:1d:3a:29:0b:04:b5:d9:
09:8b:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:45 2026 by rpki-client