Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: VyTPqZNATsxZ7D79RbDExPMiMwFF5sUKiB8iiKMpBCE=
Subject key identifier: F6:CA:43:E5:BE:6D:5D:4E:9B:40:37:7B:14:5E:1C:46:8D:2F:72:A8
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019CAE6BF4F7EB20DEBAF122E26E715AAD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0AE9
Signing time: Mon 02 Mar 2026 12:00:36 +0000
Manifest this update: Mon 02 Mar 2026 12:00:36 +0000
Manifest next update: Tue 03 Mar 2026 12:00:36 +0000
Files and hashes: 1: 3pPlGefERPNNb3LZTRw8EyYwrK8.roa (hash: 9UINQk9n7UxmChzwqHzUGLHOlISFZwBCGhQ+P6Wni5M=)
2: _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (hash: 2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: HYMM6jVpeLKj50KRbBOZsujy3qdhfB+C6SnKpLIXoRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f4:f7:eb:20:de:ba:f1:22:e2:6e:71:5a:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Mar 2 12:00:36 2026 GMT
Not After : Mar 3 12:00:36 2026 GMT
Subject: CN=f6ca43e5be6d5d4e9b40377b145e1c468d2f72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:86:4b:c2:23:e9:b0:2f:e1:95:58:bd:ab:
37:cf:9e:87:99:f8:2d:52:bb:3f:07:8a:bb:82:89:
0a:91:3e:45:18:33:f7:be:e2:d6:30:d1:51:b8:02:
09:ab:69:b5:24:69:8a:93:08:60:42:26:08:f3:96:
2a:87:75:72:b7:03:fd:86:cd:c8:65:cc:ac:4c:0c:
2a:30:b2:67:6e:40:f5:59:3f:dd:2e:1a:f9:6f:d8:
de:57:bb:4f:61:d0:f2:6f:e1:8c:91:de:3b:e0:c9:
3c:6b:9c:f4:6a:c9:17:1b:ca:ae:31:a8:ca:7b:be:
fb:21:a8:b6:d5:44:27:5d:c6:e7:43:34:a5:1c:3f:
43:f5:af:d5:f0:73:fe:f8:fe:a0:42:6d:c1:6c:8f:
22:8c:dd:9c:85:4d:38:f7:38:8a:46:25:32:89:98:
95:78:3f:19:27:3d:84:ef:b7:eb:b5:f8:a5:ee:72:
65:34:cd:90:3a:6b:33:92:0a:fd:b5:8c:d6:20:93:
ed:1c:78:91:82:21:ab:46:69:c4:8d:d3:30:f1:5a:
cc:30:4f:96:22:17:7c:bd:b7:f2:b2:1a:52:6a:00:
69:a8:bf:d4:db:de:e1:8e:ad:80:38:75:92:b8:01:
c6:8c:a0:e4:1d:1d:1d:c2:73:d6:c8:f7:cc:2b:a3:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:43:E5:BE:6D:5D:4E:9B:40:37:7B:14:5E:1C:46:8D:2F:72:A8
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4a:ff:db:4f:21:26:0b:3f:a4:3a:b7:d2:81:87:ee:9b:bd:
de:4f:d1:99:3d:50:98:51:8b:ea:85:f4:39:9e:6b:0a:b9:ca:
42:3b:8f:ce:82:3f:b5:79:39:c9:58:01:60:66:80:67:75:59:
c3:a9:75:de:8f:e5:d6:a7:43:4a:10:e9:4a:e7:58:bf:3f:7d:
1e:b7:d1:45:7c:c6:08:4d:91:0d:9f:b8:d4:ec:f1:8c:84:44:
ce:3c:6f:5e:77:d1:f6:ae:0e:31:1b:09:a4:f1:d9:d7:ce:35:
c9:17:ae:54:0f:0b:77:c9:bb:da:55:f1:57:04:4b:e8:04:52:
9c:62:a1:f7:51:a0:36:a4:b0:b6:3b:f6:96:e1:52:66:80:e4:
ef:af:f4:d4:8e:0e:7e:49:46:80:ac:d6:b9:14:68:ae:f9:ce:
eb:48:50:65:e7:07:86:d1:af:8c:d9:87:c7:4d:64:3f:18:cd:
d9:99:1c:f9:cb:82:c7:21:26:33:4d:63:b0:36:f4:44:af:7b:
f9:e1:e5:0e:20:e0:70:c4:f0:52:b7:d3:3a:c3:92:69:fe:ea:
0f:0c:71:3c:e4:c5:b2:c6:7a:b3:25:de:de:21:e9:c5:d3:62:
4b:29:7f:87:25:4e:80:52:16:f0:33:ec:8f:d5:c9:97:66:e9:
87:4b:4c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyua/T36yDeuvEi4m5xWq0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjYwMzAyMTIwMDM2WhcNMjYwMzAzMTIwMDM2WjAzMTEwLwYDVQQD
EyhmNmNhNDNlNWJlNmQ1ZDRlOWI0MDM3N2IxNDVlMWM0NjhkMmY3MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKuGS8Ij6bAv4ZVYvas3z56Hmfgt
Urs/B4q7gokKkT5FGDP3vuLWMNFRuAIJq2m1JGmKkwhgQiYI85Yqh3VytwP9hs3I
ZcysTAwqMLJnbkD1WT/dLhr5b9jeV7tPYdDyb+GMkd474Mk8a5z0askXG8quMajK
e777Iai21UQnXcbnQzSlHD9D9a/V8HP++P6gQm3BbI8ijN2chU049ziKRiUyiZiV
eD8ZJz2E77frtfil7nJlNM2QOmszkgr9tYzWIJPtHHiRgiGrRmnEjdMw8VrMME+W
Ihd8vbfyshpSagBpqL/U297hjq2AOHWSuAHGjKDkHR0dwnPWyPfMK6MMXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbKQ+W+bV1Om0A3exReHEaNL3KoMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0r/208h
Jgs/pDq30oGH7pu93k/RmT1QmFGL6oX0OZ5rCrnKQjuPzoI/tXk5yVgBYGaAZ3VZ
w6l13o/l1qdDShDpSudYvz99HrfRRXzGCE2RDZ+41OzxjIREzjxvXnfR9q4OMRsJ
pPHZ1841yReuVA8Ld8m72lXxVwRL6ARSnGKh91GgNqSwtjv2luFSZoDk76/01I4O
fklGgKzWuRRorvnO60hQZecHhtGvjNmHx01kPxjN2Zkc+cuCxyEmM01jsDb0RK97
+eHlDiDgcMTwUrfTOsOSaf7qDwxxPOTFssZ6syXe3iHpxdNiSyl/hyVOgFIW8DPs
j9XJl2bph0tMsg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:00 2026 by rpki-client