Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: Z0NtBNLL1aohvSfEHT9tCd9/rwM8L9tjW0ioL6sTcjY=
Subject key identifier: 36:EA:32:5E:43:64:E7:B8:E0:42:6D:01:28:FC:3B:9B:68:FE:BF:9C
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019F9D029970C65547082197B2C0CC7B171A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 12B7
Signing time: Sun 26 Jul 2026 06:00:20 +0000
Manifest this update: Sun 26 Jul 2026 06:00:20 +0000
Manifest next update: Mon 27 Jul 2026 06:00:20 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: T5SbTNVT7//uJU2lXZ7jcQrwdjBMgtV3c1cv7lwGsys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:02:99:70:c6:55:47:08:21:97:b2:c0:cc:7b:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jul 26 06:00:20 2026 GMT
Not After : Jul 27 06:00:20 2026 GMT
Subject: CN=36ea325e4364e7b8e0426d0128fc3b9b68febf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:70:63:1b:cb:9d:d6:19:43:fb:8f:3c:4d:
47:ce:28:18:fd:fe:89:a5:d3:20:f3:3f:37:5e:ff:
bb:a6:8d:8c:be:78:56:32:54:44:21:3c:e0:11:54:
35:68:d7:17:42:25:99:90:13:55:9d:81:a6:d1:f8:
45:40:50:4c:3f:f9:6f:3e:f6:97:65:3b:5d:fb:66:
66:a7:36:0e:60:3d:24:64:8d:42:09:4e:52:1f:5f:
ec:da:15:61:6f:b1:f0:07:47:7e:23:20:27:9f:15:
00:f2:66:5b:52:90:65:d8:ba:ac:2a:51:32:d4:6e:
15:4c:63:4d:b3:63:0d:0f:44:bc:fd:8e:89:94:95:
fa:c8:63:f3:ff:d2:93:cb:11:bd:b8:b8:91:32:68:
76:80:64:9a:84:b0:6e:d2:b0:3c:13:2e:42:95:23:
02:90:f5:09:f9:be:db:4a:57:07:27:7b:a6:3a:f6:
15:07:90:14:bb:7c:e3:32:9a:3d:ec:23:43:6c:80:
85:c1:88:df:50:0b:a6:a9:16:6e:0a:1a:2b:6a:ad:
65:e5:b4:d3:1b:6f:e9:6b:7f:a6:84:7f:b7:6f:7d:
1c:be:05:f3:e8:a7:23:2b:35:fc:a9:54:83:72:75:
f0:33:e9:56:0f:df:57:cc:0f:1d:fc:e5:e1:93:d2:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:32:5E:43:64:E7:B8:E0:42:6D:01:28:FC:3B:9B:68:FE:BF:9C
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:68:01:7c:cc:bd:86:8c:5b:3b:89:9b:21:00:0b:af:06:2a:
ef:1e:4f:cb:29:42:4b:45:3f:21:d2:04:37:b0:8c:6d:9a:f9:
8f:7c:f7:45:99:e7:80:99:02:59:ce:9a:39:82:d3:29:b1:ae:
a0:e8:ea:8a:44:4c:77:54:95:15:2d:54:f0:20:c0:66:82:5e:
42:46:59:45:52:a7:68:05:58:cf:70:09:97:3d:5d:90:ad:cf:
02:54:c0:7e:0e:1e:6a:e5:1e:f3:e4:bf:ce:0a:a6:d0:5a:79:
27:35:d5:8f:36:38:18:fb:65:ea:4d:46:58:c1:40:57:dc:ea:
b1:4a:4e:57:33:93:00:b5:eb:25:ca:18:3f:93:3b:6c:27:91:
20:a4:ce:6c:fb:ea:50:7d:d7:33:f7:fd:1a:ec:92:f8:bb:f6:
91:e4:a2:5b:20:d1:72:32:b6:77:e2:a4:16:1b:b3:1e:c0:13:
93:22:66:3a:55:5a:f9:45:3c:44:c7:ee:1d:5c:e7:84:c5:a5:
f8:a5:c1:72:b5:c7:a2:a4:c8:26:f3:a7:d4:06:04:e5:77:6e:
93:9b:6e:b4:f7:be:d5:8e:6f:a5:26:d0:56:21:c6:8e:aa:d1:
41:f3:fe:80:27:f0:0d:77:f0:84:5f:19:98:d8:21:6d:19:3d:
71:dd:c6:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+dAplwxlVHCCGXssDMexcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx
MmM0ZmUwHhcNMjYwNzI2MDYwMDIwWhcNMjYwNzI3MDYwMDIwWjAzMTEwLwYDVQQD
EygzNmVhMzI1ZTQzNjRlN2I4ZTA0MjZkMDEyOGZjM2I5YjY4ZmViZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwhwYxvLndYZQ/uPPE1HzigY/f6J
pdMg8z83Xv+7po2MvnhWMlREITzgEVQ1aNcXQiWZkBNVnYGm0fhFQFBMP/lvPvaX
ZTtd+2ZmpzYOYD0kZI1CCU5SH1/s2hVhb7HwB0d+IyAnnxUA8mZbUpBl2LqsKlEy
1G4VTGNNs2MND0S8/Y6JlJX6yGPz/9KTyxG9uLiRMmh2gGSahLBu0rA8Ey5ClSMC
kPUJ+b7bSlcHJ3umOvYVB5AUu3zjMpo97CNDbICFwYjfUAumqRZuChoraq1l5bTT
G2/pa3+mhH+3b30cvgXz6KcjKzX8qVSDcnXwM+lWD99XzA8d/OXhk9KbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbqMl5DZOe44EJtASj8O5to/r+cMB8GA1UdIwQY
MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt
YzYyYmU4YTcwM2NlLzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl
LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWgBfMy9
hoxbO4mbIQALrwYq7x5PyylCS0U/IdIEN7CMbZr5j3z3RZnngJkCWc6aOYLTKbGu
oOjqikRMd1SVFS1U8CDAZoJeQkZZRVKnaAVYz3AJlz1dkK3PAlTAfg4eauUe8+S/
zgqm0Fp5JzXVjzY4GPtl6k1GWMFAV9zqsUpOVzOTALXrJcoYP5M7bCeRIKTObPvq
UH3XM/f9GuyS+Lv2keSiWyDRcjK2d+KkFhuzHsATkyJmOlVa+UU8RMfuHVznhMWl
+KXBcrXHoqTIJvOn1AYE5Xduk5tutPe+1Y5vpSbQViHGjqrRQfP+gCfwDXfwhF8Z
mNghbRk9cd3G8Q==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:22 2026 by rpki-client