Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: hls6He869Ao9rsxPj3niKdKdrM9XHUTwhh5oPCpdySc=
Subject key identifier: 17:03:79:2A:65:16:9C:C2:F6:2A:BD:52:56:BD:7F:68:AC:A6:E4:7E
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019EB54558A989A0DD5075702AF835D9953C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 123F
Signing time: Thu 11 Jun 2026 06:01:21 +0000
Manifest this update: Thu 11 Jun 2026 06:01:21 +0000
Manifest next update: Fri 12 Jun 2026 06:01:21 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: ZvC1Rxv8PM8cua1USk2DqI9rOBc1CN3CJE6Nh8jkfaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:45:58:a9:89:a0:dd:50:75:70:2a:f8:35:d9:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jun 11 06:01:21 2026 GMT
Not After : Jun 12 06:01:21 2026 GMT
Subject: CN=1703792a65169cc2f62abd5256bd7f68aca6e47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:b6:f1:e2:b5:45:0f:2f:f8:7f:f7:3a:1c:
ed:89:35:82:c1:c7:59:ec:71:69:2a:99:ad:66:d7:
22:65:54:51:0c:91:90:63:25:b7:30:af:a8:8b:4f:
40:c4:8e:a8:55:10:c0:4c:35:ed:5d:f2:e9:48:9f:
fb:72:0e:89:c5:61:65:75:d7:e5:ee:a6:99:07:42:
a1:f9:99:06:bd:dd:04:ea:3c:0e:8b:98:a0:2c:cb:
2e:9e:c6:85:2c:44:57:84:ee:71:30:7e:a9:75:fe:
b3:90:01:5a:37:30:89:58:f6:6a:2b:32:1b:c8:00:
0e:88:6f:e5:f8:78:eb:6f:81:78:b7:ea:6d:db:1a:
27:5f:95:99:ac:4e:27:8f:a5:b1:71:78:89:25:20:
fd:0d:8b:b6:ee:e9:84:16:74:e3:15:e4:1d:33:9a:
9f:30:ff:60:32:b2:8a:0f:f5:b5:d3:0f:f5:e4:28:
8f:22:4b:5d:c1:02:c6:01:86:cf:1d:8b:be:77:f9:
d9:0c:80:91:f5:25:e5:45:4d:98:18:f2:74:70:32:
a0:58:f1:2b:c6:36:97:0b:8f:f5:a0:44:fd:55:c1:
a4:a8:6a:a7:05:ff:24:82:ec:f7:cd:5b:8a:dd:5c:
bc:56:45:c4:4f:4e:06:91:ed:e7:0d:7c:04:f4:a5:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:79:2A:65:16:9C:C2:F6:2A:BD:52:56:BD:7F:68:AC:A6:E4:7E
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:eb:ce:36:ef:0d:33:71:5a:37:60:71:59:4d:d2:1d:15:
c5:93:e5:f4:ea:a2:a9:24:17:d6:9b:44:a9:d3:fa:72:8d:dc:
00:0c:94:65:a6:f2:27:ad:80:1c:9d:13:45:40:ae:6c:f4:f4:
16:6a:7e:bb:d8:b0:ff:34:73:86:82:43:dd:89:92:bc:ed:85:
09:f6:ea:50:fb:90:dc:32:4e:3a:3b:04:4d:0d:d6:53:bf:51:
4e:83:2c:92:51:fd:93:0a:9a:fd:ad:22:e8:2e:fc:47:e9:20:
52:0a:cd:ef:ae:8f:3b:06:78:33:4b:69:ec:23:46:2c:98:69:
1c:a4:ba:bc:05:35:83:0f:26:05:56:e6:f2:a4:03:3f:3d:f2:
6f:09:21:09:3e:e7:a4:4a:d4:70:a2:09:7f:d3:37:f9:36:19:
62:f8:35:1e:fd:87:be:a2:95:1b:39:ff:8c:c3:b1:cd:39:43:
ad:d0:b7:65:77:c1:ac:1f:83:b8:89:d4:d7:4d:c9:c4:8a:47:
da:a7:49:c8:c3:16:6c:41:29:0c:b0:16:c5:00:0d:7b:b9:b0:
38:1e:49:c0:d0:0f:80:8b:4e:82:42:a5:9b:74:64:9f:54:94:
52:eb:c1:29:78:8d:5f:e5:b6:99:07:74:13:16:98:17:5b:47:
63:81:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:18:36 2026 by rpki-client