Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: eUrJQuLtCodiPnoX/9Czu5QEnWCoL93eWHe2/94IWqw=
Subject key identifier: CA:41:D0:EF:59:59:2C:DB:44:6F:10:D2:ED:C3:C4:26:55:32:5F:0F
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 01A08CB15FDEE03D455038BE0D1E01F33B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1372
Signing time: Thu 10 Sep 2026 19:00:29 +0000
Manifest this update: Thu 10 Sep 2026 19:00:29 +0000
Manifest next update: Fri 11 Sep 2026 19:00:29 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: QBqo3pTDA5L6ST7HAIGWmLe8f718jGFNfRtxC3F67Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:5f:de:e0:3d:45:50:38:be:0d:1e:01:f3:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Sep 10 19:00:29 2026 GMT
Not After : Sep 11 19:00:29 2026 GMT
Subject: CN=ca41d0ef59592cdb446f10d2edc3c42655325f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:f0:53:ca:ae:6e:4d:b6:f0:e5:ca:1f:67:
74:10:7f:4b:12:e0:e4:3c:7c:10:14:ab:a3:03:16:
33:5b:58:5e:5e:d8:f9:71:7f:2d:46:dc:c2:1a:1d:
b0:46:66:f2:32:8c:e4:3e:b2:a5:ae:8e:a2:7d:20:
5e:28:f6:f9:49:40:d8:0f:dc:9a:55:03:72:61:89:
b8:e4:b4:ed:ed:ef:ab:a4:49:16:7a:05:ea:61:82:
af:ed:ba:6b:64:c6:e7:6d:1d:16:13:dc:ee:76:d6:
da:b6:8c:8c:0b:20:8e:e5:89:52:68:6f:21:26:ff:
47:c5:49:73:40:14:45:71:53:d7:6b:c9:2e:42:09:
22:3a:58:61:a1:bb:58:c7:12:69:1a:0d:7e:72:44:
e2:b3:32:4e:81:ee:1f:e0:89:b8:10:70:65:d9:83:
71:bf:98:3e:19:87:41:67:23:40:e2:de:6d:2e:35:
61:19:82:86:1c:7a:95:ae:75:33:ae:b5:28:d2:36:
b9:38:e3:12:ca:af:1a:3f:da:26:19:e1:0a:42:c7:
7c:58:1b:36:8a:8c:a9:c7:1f:2c:7c:ee:8f:aa:35:
1a:e2:dc:68:1b:ba:d5:de:f0:6e:0c:5c:b7:fb:1d:
4d:99:1a:78:08:d5:7f:f1:d2:39:4b:84:4f:56:7d:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:D0:EF:59:59:2C:DB:44:6F:10:D2:ED:C3:C4:26:55:32:5F:0F
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a4:be:f5:06:6a:8d:bf:a0:7d:74:c8:01:31:0e:c8:6f:40:
20:c6:83:42:16:29:27:49:50:fc:60:3a:b6:7a:b8:8a:b5:1e:
2d:fb:d9:75:83:98:57:e8:04:a1:0c:53:b0:57:60:6a:c0:ef:
e7:7b:6f:67:f2:69:39:ce:7a:92:4b:ee:b4:57:59:c6:bb:8c:
56:ee:5d:0b:02:5a:cd:ef:75:62:74:f2:57:b0:e0:16:24:b2:
34:05:7f:6b:e2:57:ef:40:03:dc:6d:f2:3d:0c:36:ae:be:3a:
be:d2:97:84:0c:d5:d8:53:19:19:5f:1b:3d:57:e3:ec:b3:f4:
29:5f:6f:66:9e:7b:40:0c:1a:7b:27:d1:4f:b0:10:e5:31:02:
68:09:df:66:95:fb:28:0e:51:10:8b:f6:33:c7:fc:2e:bb:59:
56:91:b8:02:65:5d:ad:eb:d9:85:84:ad:7e:c5:be:33:35:f9:
0f:9c:5f:c2:08:e6:c5:0d:72:a4:70:59:ec:0b:25:fa:a0:dd:
d3:2c:69:a9:e9:6b:44:6b:bc:2b:0f:61:17:6a:6c:5d:78:e2:
28:1b:2d:8b:88:ec:7b:66:9d:55:ab:61:5c:99:02:7d:c6:8a:
62:6f:8a:7d:d7:7b:69:f7:8f:f6:b9:81:ef:46:f6:de:ca:06:
9d:0d:0d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsV/e4D1FUDi+DR4B8ztzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYwOTEwMTkwMDI5WhcNMjYwOTExMTkwMDI5WjAzMTEwLwYDVQQD
EyhjYTQxZDBlZjU5NTkyY2RiNDQ2ZjEwZDJlZGMzYzQyNjU1MzI1ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQbwU8qubk228OXKH2d0EH9LEuDk
PHwQFKujAxYzW1heXtj5cX8tRtzCGh2wRmbyMozkPrKlro6ifSBeKPb5SUDYD9ya
VQNyYYm45LTt7e+rpEkWegXqYYKv7bprZMbnbR0WE9zudtbatoyMCyCO5YlSaG8h
Jv9HxUlzQBRFcVPXa8kuQgkiOlhhobtYxxJpGg1+ckTiszJOge4f4Im4EHBl2YNx
v5g+GYdBZyNA4t5tLjVhGYKGHHqVrnUzrrUo0ja5OOMSyq8aP9omGeEKQsd8WBs2
ioypxx8sfO6PqjUa4txoG7rV3vBuDFy3+x1NmRp4CNV/8dI5S4RPVn2PfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpB0O9ZWSzbRG8Q0u3DxCZVMl8PMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6S+9QZq
jb+gfXTIATEOyG9AIMaDQhYpJ0lQ/GA6tnq4irUeLfvZdYOYV+gEoQxTsFdgasDv
53tvZ/JpOc56kkvutFdZxruMVu5dCwJaze91YnTyV7DgFiSyNAV/a+JX70AD3G3y
PQw2rr46vtKXhAzV2FMZGV8bPVfj7LP0KV9vZp57QAwaeyfRT7AQ5TECaAnfZpX7
KA5REIv2M8f8LrtZVpG4AmVdrevZhYStfsW+MzX5D5xfwgjmxQ1ypHBZ7Asl+qDd
0yxpqelrRGu8Kw9hF2psXXjiKBsti4jse2adVathXJkCfcaKYm+Kfdd7afeP9rmB
70b23soGnQ0NqQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:04:21 2026 by rpki-client