Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: EpmeY++OgsuhzMrU4mmEQdyrlPhPphxaMg6LdLdZKlw=
Subject key identifier: 92:D1:A9:C1:28:54:AE:7F:CC:A4:B1:AB:E5:66:0D:8C:BB:3C:32:9E
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01A12F582A91663909A3B04EFA8A447B1E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 09:01:09 +0000
Manifest this update: Mon 12 Oct 2026 09:01:09 +0000
Manifest next update: Tue 13 Oct 2026 09:01:09 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: eoD3q0KYcxNwXji0ErtiwfrWHtDsnw1X1BlC/PHWqkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:58:2a:91:66:39:09:a3:b0:4e:fa:8a:44:7b:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Oct 12 09:01:09 2026 GMT
Not After : Oct 13 09:01:09 2026 GMT
Subject: CN=92d1a9c12854ae7fcca4b1abe5660d8cbb3c329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:14:d0:03:9d:96:7e:19:0a:a8:7c:de:6f:
3d:52:ce:ae:5f:8b:b7:85:45:c0:0e:b9:50:09:bf:
ab:df:c6:21:99:24:63:e6:8b:e6:d5:7b:69:ee:4f:
76:2a:19:6f:87:88:f3:c5:8c:60:0e:65:d5:ff:d1:
43:30:d3:d0:bb:51:ca:06:c7:0e:5d:a9:df:4a:f1:
70:dc:88:4d:42:1d:a8:27:33:40:2f:0c:fd:20:4c:
e1:43:58:ba:e3:74:12:7c:95:96:18:84:8c:72:ed:
17:e5:38:af:c2:93:df:47:e3:42:88:b8:e2:e9:12:
33:45:fa:03:29:bd:27:12:77:c4:8e:fb:86:e4:d2:
fd:76:df:50:2f:22:8a:89:58:df:65:dd:b3:c6:ab:
f9:72:26:dd:85:53:a9:fe:c1:f2:97:c7:c6:c4:86:
04:c8:eb:b3:27:d5:11:cb:28:59:c7:36:4d:0d:16:
00:6f:51:fc:76:d7:47:9d:19:b7:39:6a:56:8a:cf:
43:b4:e8:4d:96:0a:88:dd:2e:00:b9:ab:67:5c:f5:
4d:c1:e8:20:68:99:82:ba:ff:7a:c7:67:59:f7:4a:
61:77:58:4a:02:e4:5d:98:61:68:15:0d:d1:b7:be:
42:7a:27:1b:17:80:aa:73:19:90:da:b2:e9:81:df:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:A9:C1:28:54:AE:7F:CC:A4:B1:AB:E5:66:0D:8C:BB:3C:32:9E
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:4c:5f:f9:8c:16:19:4c:93:e9:aa:81:a5:f0:e8:52:ae:
53:63:82:de:c7:bb:d9:83:e0:eb:f1:58:41:c3:4c:7c:31:f4:
57:e6:f5:60:dd:54:0a:5a:f0:54:f6:80:08:1d:3b:e4:f5:ac:
48:32:0d:49:8c:65:59:67:be:b6:f0:b3:0b:5f:68:ce:87:e8:
c8:cf:51:b6:5e:83:9c:71:83:02:2c:6b:13:51:bd:10:32:0f:
75:d0:a6:e0:c8:71:81:5a:51:2e:a5:80:d0:05:86:96:f3:04:
e2:a7:b7:e4:24:ca:b2:fd:9f:17:43:39:59:00:31:bd:aa:e3:
f9:7e:84:ef:5d:f6:b0:65:ab:fb:e8:85:5f:70:8b:a1:c3:c0:
ab:14:df:3f:c7:e5:17:7e:e7:c7:c8:e4:89:da:ee:5d:0a:cf:
4b:ef:34:26:f7:a0:72:76:9b:67:33:f1:10:2c:0a:32:d0:d4:
19:14:e2:b8:7c:5d:42:75:3b:84:a3:b6:84:d9:92:12:e8:c9:
f5:b5:a2:68:ff:38:47:df:73:fe:26:62:45:3d:e0:2e:60:ee:
b8:33:19:8c:fc:0c:66:f0:34:c6:38:2c:12:df:40:1c:5b:2d:
93:88:99:cd:90:3a:29:1b:11:8a:7d:44:ab:d7:fa:b1:ad:42:
bc:7d:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:55:27 2026 by rpki-client