Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: e2RnVEHlGJi9qiD+aQmRCwvnLZdtNMMieSluhRp/KFw=
Subject key identifier: 3F:96:C2:0E:AC:D4:FD:13:40:29:AD:2D:99:C7:5E:E5:FE:BF:BC:50
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019F9EF20BB2FAC4FD25F3D84BDF09E2A1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 12B8
Signing time: Sun 26 Jul 2026 15:01:30 +0000
Manifest this update: Sun 26 Jul 2026 15:01:30 +0000
Manifest next update: Mon 27 Jul 2026 15:01:30 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: kJOD6K4mCk0rWZGnh1sG9GJiCTW7CFl+RhY+WEtr+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:0b:b2:fa:c4:fd:25:f3:d8:4b:df:09:e2:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jul 26 15:01:30 2026 GMT
Not After : Jul 27 15:01:30 2026 GMT
Subject: CN=3f96c20eacd4fd134029ad2d99c75ee5febfbc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:12:74:4a:fa:35:f1:10:de:2e:0b:b4:81:
ca:39:9c:12:3c:f5:0a:54:13:07:23:9b:ce:e3:7d:
7d:09:0d:32:f5:d4:b8:6a:e9:7f:62:28:ed:e2:79:
d4:7a:23:bb:bd:d2:52:ec:be:02:90:9f:3f:5f:3d:
44:25:9e:ff:3e:8f:fb:01:9f:04:6f:5f:8c:1f:3b:
46:68:bb:a7:a3:c4:8f:2f:48:aa:b7:44:1e:bb:e9:
3c:0f:12:bd:7d:5e:20:bf:fe:9f:17:98:69:4a:44:
b7:bd:04:2d:2c:d6:8a:7e:39:b4:74:5b:b4:e4:f3:
30:f5:f1:88:03:9b:23:85:d4:c6:7d:42:a9:a1:17:
0f:60:b7:e1:6f:91:41:5b:21:ea:ff:3d:6e:3a:da:
86:d8:d2:a3:66:46:ac:b9:91:be:66:51:5b:d2:8c:
fa:a6:8f:a4:26:40:b0:88:ff:32:6f:bb:fb:46:17:
d0:d4:52:84:42:33:6f:28:44:17:22:65:95:e4:7b:
ac:94:bb:7d:85:ca:fc:0b:c6:b9:c8:33:2c:74:d8:
10:e1:90:6e:39:4d:da:e9:51:07:ab:9a:5f:aa:34:
69:cd:1b:e3:fc:08:64:c6:df:22:e7:ce:c3:22:f7:
65:4b:45:99:73:c1:91:a9:ab:ad:01:cb:f0:e4:1d:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:C2:0E:AC:D4:FD:13:40:29:AD:2D:99:C7:5E:E5:FE:BF:BC:50
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:93:ca:2e:fd:41:da:a6:64:ff:ce:16:0a:04:04:f2:59:
35:e4:e6:f0:15:b2:85:5e:6f:96:5e:42:9c:28:41:fa:f1:d2:
80:7b:29:56:f9:19:a5:6a:ec:47:a6:42:38:7b:89:c7:9c:04:
38:28:5f:8a:63:a5:37:a1:0b:53:4e:e7:97:8d:71:33:0a:a7:
1e:58:1a:e0:69:fc:86:62:a2:b4:9b:28:d9:07:33:ea:d3:e8:
6f:ec:0f:48:78:a6:d5:ff:46:59:db:49:f8:ce:43:a3:75:17:
a6:6e:90:dc:0b:a5:75:2d:19:cd:b4:87:83:81:5a:6f:47:d5:
1f:6c:54:02:fb:55:90:15:af:6e:af:68:95:11:ce:49:2d:84:
8a:61:53:5d:d0:45:99:86:2e:0e:aa:77:ee:0c:0a:b8:aa:ab:
b7:68:f9:2d:af:3c:1e:96:f7:14:66:92:6d:81:e3:7a:5f:7a:
38:dc:53:69:96:ed:f3:0d:30:94:ec:64:c9:10:31:c8:bd:0f:
a7:c2:e1:bd:e0:83:0f:81:32:65:91:1e:97:9d:4c:ca:c0:7b:
92:80:4f:b8:fd:21:de:81:49:fd:f3:8f:64:cd:cc:a9:46:11:
db:d3:60:09:2e:b0:5e:ae:b6:60:2f:46:2f:7a:a7:35:f3:d7:
93:a5:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:59:00 2026 by rpki-client