Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: O90Gq1xfqrv/ZJXQBqhRD/AQeaxg41lB09tgoXEgSu4=
Subject key identifier: 81:06:BE:A6:F6:51:02:80:AA:B0:4B:F3:C4:65:1D:86:07:BC:CF:DC
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019D9BF55FC480CEEFB6797088B301971408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0B64
Signing time: Fri 17 Apr 2026 15:00:42 +0000
Manifest this update: Fri 17 Apr 2026 15:00:42 +0000
Manifest next update: Sat 18 Apr 2026 15:00:42 +0000
Files and hashes: 1: 3pPlGefERPNNb3LZTRw8EyYwrK8.roa (hash: 9UINQk9n7UxmChzwqHzUGLHOlISFZwBCGhQ+P6Wni5M=)
2: _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (hash: 2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: vE4nGteyxYokFKfTrM5ldBuHjv3pwGWvHpFgQ2pLp/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:5f:c4:80:ce:ef:b6:79:70:88:b3:01:97:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Apr 17 15:00:42 2026 GMT
Not After : Apr 18 15:00:42 2026 GMT
Subject: CN=8106bea6f6510280aab04bf3c4651d8607bccfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:30:04:f1:92:da:54:56:27:47:07:d4:b6:
f8:1a:60:f4:fd:17:b4:6e:84:ee:1c:a7:78:bb:2e:
26:a5:80:c4:a5:7a:6d:cf:89:d3:9b:67:07:8c:c6:
60:b8:f2:48:7b:60:14:a6:f3:e7:94:d8:dd:e7:a1:
b6:49:df:e7:2b:d6:dd:d8:59:8d:a8:55:83:1f:ba:
c5:27:8e:2c:1a:4e:0b:f5:93:b1:93:5e:c6:66:e8:
ea:20:cf:86:20:19:69:3f:70:f6:db:7f:6c:6a:d1:
ef:1a:c2:51:4c:7c:6a:85:fc:ff:44:fd:43:b9:ad:
89:7c:e0:06:5f:44:51:01:61:83:35:e6:84:14:3a:
61:ac:98:df:e4:df:d1:17:e3:bb:bb:08:a3:55:61:
f6:d3:1d:e6:e1:c9:d0:0b:ca:21:c8:70:fb:4a:f1:
e2:0b:5f:c1:f9:79:91:ec:18:c2:75:ce:90:1b:63:
03:15:4f:53:b4:cd:72:7c:b2:88:af:ff:f0:28:b1:
6a:69:37:0e:92:d3:0f:35:92:3c:c5:8e:41:8b:ff:
eb:03:a5:1c:49:4e:48:de:35:d8:ed:84:ce:fd:2d:
24:7e:b0:14:80:e9:bb:fd:6c:c8:e3:a0:15:da:6a:
a7:e1:24:8f:98:fa:4a:2c:ac:7d:0f:0a:9d:6f:20:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:BE:A6:F6:51:02:80:AA:B0:4B:F3:C4:65:1D:86:07:BC:CF:DC
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:22:1a:09:35:32:6d:a1:fe:85:80:05:df:10:89:88:2f:
c1:27:4b:8a:b3:91:28:db:95:4e:8f:88:b5:38:f7:e1:7b:43:
1c:fa:cf:07:f9:00:7c:f6:62:f1:69:9a:aa:65:4b:6c:e1:af:
58:82:5c:10:88:63:61:8b:23:65:49:02:e3:35:ff:c7:39:97:
e4:a6:4b:3e:c0:74:2c:57:05:22:f6:b9:08:b5:55:b5:05:09:
84:c7:a7:15:ac:67:d5:69:dd:c6:d5:7e:1c:fd:58:50:f3:88:
d1:7f:e4:16:33:83:05:18:5b:ac:87:b1:70:53:0d:a1:f2:5b:
32:6c:80:42:a9:12:1e:4d:4d:96:e9:07:94:7d:e2:93:57:a9:
65:b7:9f:4b:a6:47:e4:c0:1d:86:cb:96:7c:25:31:2d:ce:43:
33:33:49:0a:28:2f:e3:b0:c6:8a:1a:9f:b2:e7:f2:4f:05:18:
f0:60:bd:0a:8e:f2:07:d6:c9:ae:a0:df:1b:a5:87:cf:d6:78:
c9:58:65:4d:dd:af:16:5e:5a:b9:42:a5:44:03:cc:53:68:28:
30:49:cd:ac:59:61:22:30:29:78:44:6b:11:cd:e2:c7:a8:d2:
d4:24:c8:97:16:9b:da:68:45:7b:2c:4a:40:d2:10:72:1a:fe:
13:13:85:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9V/EgM7vtnlwiLMBlxQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjYwNDE3MTUwMDQyWhcNMjYwNDE4MTUwMDQyWjAzMTEwLwYDVQQD
Eyg4MTA2YmVhNmY2NTEwMjgwYWFiMDRiZjNjNDY1MWQ4NjA3YmNjZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSEwBPGS2lRWJ0cH1Lb4GmD0/Re0
boTuHKd4uy4mpYDEpXptz4nTm2cHjMZguPJIe2AUpvPnlNjd56G2Sd/nK9bd2FmN
qFWDH7rFJ44sGk4L9ZOxk17GZujqIM+GIBlpP3D2239satHvGsJRTHxqhfz/RP1D
ua2JfOAGX0RRAWGDNeaEFDphrJjf5N/RF+O7uwijVWH20x3m4cnQC8ohyHD7SvHi
C1/B+XmR7BjCdc6QG2MDFU9TtM1yfLKIr//wKLFqaTcOktMPNZI8xY5Bi//rA6Uc
SU5I3jXY7YTO/S0kfrAUgOm7/WzI46AV2mqn4SSPmPpKLKx9DwqdbyCKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEGvqb2UQKAqrBL88RlHYYHvM/cMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOciGgk1
Mm2h/oWABd8QiYgvwSdLirORKNuVTo+ItTj34XtDHPrPB/kAfPZi8WmaqmVLbOGv
WIJcEIhjYYsjZUkC4zX/xzmX5KZLPsB0LFcFIva5CLVVtQUJhMenFaxn1WndxtV+
HP1YUPOI0X/kFjODBRhbrIexcFMNofJbMmyAQqkSHk1NlukHlH3ik1epZbefS6ZH
5MAdhsuWfCUxLc5DMzNJCigv47DGihqfsufyTwUY8GC9Co7yB9bJrqDfG6WHz9Z4
yVhlTd2vFl5auUKlRAPMU2goMEnNrFlhIjApeERrEc3ix6jS1CTIlxab2mhFeyxK
QNIQchr+ExOF4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:45 2026 by rpki-client