Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: u8tD8blI821IgAt2ahMVUfetqgjFGTqIcYp+f0/qC4c=
Subject key identifier: AD:72:07:49:2A:D1:DE:B6:8B:D1:74:4F:15:DF:79:89:8B:58:2B:D9
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019D38D3614A2399038780659B37456E08B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 117A
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: yJ4oRM2/W6pp+Dor3gzJfmsguupQ1fV6c1uKJH62ESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:61:4a:23:99:03:87:80:65:9b:37:45:6e:08:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=ad7207492ad1deb68bd1744f15df79898b582bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:c8:bd:c6:40:14:ef:13:51:e4:d2:91:2e:
a6:0f:68:59:32:3c:42:a1:84:ca:38:05:e4:8f:43:
8d:e0:49:ab:4d:15:79:3e:16:6f:94:23:32:e3:6b:
7b:30:d5:00:53:9d:03:24:4d:7a:d6:76:af:6d:04:
29:a9:2a:9f:95:8e:bf:5b:4a:03:25:4b:8f:04:ef:
2c:f8:72:95:98:64:7e:e5:e4:a9:b5:e5:2b:49:7d:
50:9e:b0:43:1e:8e:6f:f5:a9:b5:6b:a6:cb:b4:6a:
50:b9:bc:c2:fa:14:1f:fd:af:10:cb:c3:b5:a5:fc:
d8:e1:11:58:d4:60:50:b8:4f:00:2a:59:4f:91:98:
9e:63:5e:46:ab:68:5f:f1:07:f6:49:e3:14:13:3f:
48:8c:e7:1f:f1:13:82:f7:24:69:78:a1:19:2e:5f:
97:75:53:36:d4:ac:b7:cd:91:17:87:47:aa:5b:b1:
0f:ff:96:df:59:0f:7f:21:d1:72:f9:3c:5f:87:70:
64:73:5d:94:9e:99:b9:4b:f0:be:7f:10:70:ce:f7:
8f:e6:e5:71:56:fb:85:c2:b6:2f:d2:c3:10:1a:ea:
d9:75:35:ac:64:ab:a3:d7:42:dd:d4:41:27:00:cf:
b4:9a:f3:c7:40:2f:65:c9:c6:b7:79:6e:63:93:3a:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:72:07:49:2A:D1:DE:B6:8B:D1:74:4F:15:DF:79:89:8B:58:2B:D9
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:7f:04:f6:5c:a4:c5:c1:ec:79:92:a9:2f:fb:13:22:e6:
ae:e3:bd:11:01:cd:f8:bc:05:59:12:0c:dd:60:f2:20:06:21:
e7:e2:9d:00:87:4c:c0:a0:83:60:b6:00:bf:b4:8c:4b:01:af:
4b:8a:e5:11:e7:69:b0:00:93:cf:3a:62:0b:05:88:4c:97:e2:
dc:19:90:90:bf:cb:41:c5:cb:a3:bf:05:df:d0:f3:91:e6:b5:
0b:32:0b:43:7f:b7:db:89:51:97:3a:ad:2c:db:44:73:0a:5f:
8c:98:1c:b1:bb:0b:dd:b5:88:dc:70:de:3c:22:ff:45:23:6f:
45:22:64:bb:e7:a1:5b:69:a0:24:e3:b2:dd:6f:bd:70:20:0c:
2a:4d:09:69:9a:23:2d:dc:6c:2b:51:eb:6d:96:64:ee:91:b9:
86:af:f5:30:5c:55:72:a6:e7:c1:86:63:c1:a5:4f:a4:84:0e:
0d:61:cc:59:5e:03:84:ca:90:4a:95:37:35:07:21:2a:67:ab:
95:0f:3c:d4:37:a3:aa:9e:86:38:31:14:b2:89:0a:12:76:d3:
10:57:ee:2e:a0:4f:8c:48:9f:60:34:db:84:41:5e:a6:87:ec:
8a:6b:f7:2e:d5:d0:ed:6e:2c:11:4b:98:6d:c8:eb:3c:a5:70:
5b:78:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:45 2026 by rpki-client