
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: Gienpe+EoIX0Gn6uaNAvKuK16/2yu+BVtn4X3faC4/w=
Subject key identifier: 8A:6B:04:66:49:2C:60:58:BD:41:CD:CB:97:E0:FB:2A:67:11:88:B4
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 01A181F4D04398E0D02BEF45DCDB7D9BFC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 13F1
Signing time: Wed 28 Oct 2026 10:01:07 +0000
Manifest this update: Wed 28 Oct 2026 10:01:07 +0000
Manifest next update: Thu 29 Oct 2026 10:01:07 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: 6uiHTqnJmim0wxY3bISPPKhcYB3H8PAWOEXSkrttsGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:d0:43:98:e0:d0:2b:ef:45:dc:db:7d:9b:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Oct 28 10:01:07 2026 GMT
Not After : Oct 29 10:01:07 2026 GMT
Subject: CN=8a6b0466492c6058bd41cdcb97e0fb2a671188b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:d4:bd:9c:e6:af:bf:3a:63:4d:a9:d6:f8:
31:fb:08:be:f7:c2:5d:6e:22:23:3a:22:91:2f:01:
61:ff:4e:00:05:fc:b6:6d:63:64:ef:76:1a:35:87:
48:be:2e:09:51:00:03:12:bd:88:05:d3:59:2a:a0:
0c:89:de:85:1e:70:5c:69:03:83:cb:49:a3:c0:b4:
2b:14:68:db:1e:67:db:e4:15:83:da:c7:39:6c:a5:
65:3a:5b:a4:bd:93:58:5e:c0:71:10:de:19:ce:26:
4f:8b:da:d8:25:81:be:3b:a7:7f:d1:ba:08:08:b5:
3e:97:12:8c:bc:0a:43:5d:e4:f3:f3:19:90:bd:67:
cf:df:29:b7:92:c8:ce:98:ba:a0:c2:00:44:4d:ac:
60:ee:78:5f:17:7c:36:5d:e1:cb:7f:3c:2d:f1:b7:
75:96:5b:ac:13:29:94:79:7b:42:d3:24:ab:9c:fd:
e7:e9:ce:ef:08:e9:a2:c4:74:e3:1a:1b:5d:c5:aa:
32:38:74:f6:9a:7c:1f:4a:f4:1c:a4:b7:af:63:cd:
5a:30:77:fc:3d:13:49:9b:14:bd:b3:9b:be:d4:18:
63:c8:ba:42:2f:7a:32:06:c7:98:b5:d2:af:ce:79:
8e:e6:99:b8:5c:8f:38:63:00:1d:f1:01:75:e0:d1:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:04:66:49:2C:60:58:BD:41:CD:CB:97:E0:FB:2A:67:11:88:B4
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:9b:19:7d:66:9f:fb:5c:7d:06:6a:68:48:6e:b8:ad:b4:
4d:83:ae:8b:bf:5a:d6:3b:dd:a8:ae:a9:7c:79:da:fd:2b:ba:
65:19:68:27:5b:21:d1:71:13:c0:b0:95:fa:b5:05:54:2c:82:
89:62:99:ea:6c:99:52:6b:5f:57:64:ba:b3:9c:d9:a5:cc:24:
93:3b:54:92:80:65:0b:f4:0d:a5:87:20:5c:2a:18:44:f6:0b:
75:c4:00:c1:52:02:7f:04:89:4d:e0:37:ad:8f:db:86:42:fb:
63:05:ca:d2:98:0b:a6:e1:54:1a:c1:99:fa:18:e5:57:bd:78:
05:3d:a0:72:26:9a:1e:fb:a3:a3:85:99:33:52:9c:30:7e:cb:
5b:50:4d:0d:ef:35:09:30:eb:e1:7a:87:21:6e:6f:95:31:2e:
e3:59:04:57:5c:22:8f:86:44:92:75:c5:08:8c:db:9c:1d:7b:
b0:de:20:40:4b:fb:73:4a:20:83:1f:cd:aa:7d:2b:fb:e5:f3:
6c:c9:7f:6d:ca:2d:93:17:03:55:ee:9e:10:2c:1c:8e:86:09:
3a:74:88:a0:89:fa:bc:0a:6b:c9:81:fb:e2:02:36:2f:b9:3d:
53:d8:37:0d:54:a1:7e:ef:7b:52:5c:47:38:08:8c:2d:1f:0a:
52:fb:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:00 2026 by rpki-client