Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: w4868zBOMUKmCYjH2aOfkgPYqiaxsqn0KbWzrOx+tuI=
Subject key identifier: 53:2C:F5:EA:78:03:65:2E:1D:1C:36:B3:97:5C:6E:43:17:13:64:59
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019FAB2C9928816A51312A87712632A60B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 00:00:54 +0000
Manifest this update: Wed 29 Jul 2026 00:00:54 +0000
Manifest next update: Thu 30 Jul 2026 00:00:54 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: LHMIZWelhAqUn2C40Q2n9CYNvaS7e8vkcnddPFpnN88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:99:28:81:6a:51:31:2a:87:71:26:32:a6:0b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jul 29 00:00:54 2026 GMT
Not After : Jul 30 00:00:54 2026 GMT
Subject: CN=532cf5ea7803652e1d1c36b3975c6e4317136459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:a6:84:9f:00:9f:af:f0:ae:2e:ab:5b:5d:
dd:34:80:0a:fb:c4:a2:4b:ab:8c:2d:f1:18:13:50:
87:6b:47:4a:71:ae:fb:8c:8d:17:4a:79:22:d4:ca:
8d:0e:23:08:af:fb:9a:49:9e:3f:fb:83:a7:55:76:
25:de:56:9f:73:ca:73:52:a2:27:2c:50:42:b8:66:
c1:75:e5:fb:e6:fd:2c:26:f5:66:48:f5:fc:0b:48:
3e:a4:ad:45:41:4e:e6:15:8d:11:ac:c1:eb:92:8a:
4f:fe:dc:0d:f0:7c:62:c0:23:a3:3c:84:b1:4d:28:
b4:ad:ef:bb:0b:94:4d:07:23:a9:77:ab:b6:0e:1b:
ce:20:59:af:61:87:a9:a6:0a:78:fe:06:b0:99:9d:
6a:86:e2:88:53:df:43:d2:36:38:31:8c:b0:ec:bf:
4b:77:e2:e8:9e:97:76:8d:dd:af:70:22:48:08:5f:
2d:6d:72:7d:fc:54:2d:77:65:9b:b5:39:e6:a5:60:
3e:30:85:ed:88:43:73:52:7a:35:c7:6a:fa:44:7a:
43:7c:93:21:01:66:ac:55:82:b8:fb:27:a2:c8:1b:
d4:a3:de:57:6f:da:3f:ca:43:5f:f4:05:22:8d:a0:
1d:40:21:72:33:d1:6a:7e:7d:e5:1a:d9:5f:1e:22:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:F5:EA:78:03:65:2E:1D:1C:36:B3:97:5C:6E:43:17:13:64:59
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1d:1e:a5:34:71:44:f2:5a:61:3c:52:3a:29:05:cd:a4:2d:
85:75:bd:01:ee:2a:cb:17:de:bc:62:91:24:bf:d8:37:59:60:
32:5f:8d:85:f3:4e:7f:9a:10:e7:2e:db:95:cf:94:26:29:01:
fc:e8:84:1e:67:dd:de:a8:dd:df:e1:6a:b6:f0:c3:bb:03:3b:
e4:60:fc:47:81:35:21:78:b8:c2:b2:1e:eb:6a:de:c9:f2:2c:
1c:28:19:97:d0:42:f0:ce:54:59:80:39:3e:04:ed:e1:82:92:
c8:81:21:d0:e4:ba:5b:6f:74:40:71:a9:9c:20:7e:bc:48:8b:
37:44:35:76:6c:af:2c:e2:a7:ca:7e:f6:8e:34:20:fe:d4:14:
5c:dc:6d:2f:75:96:f8:af:0f:ce:72:2f:ee:0b:d8:de:7a:36:
87:0e:c2:ba:a1:bc:94:b0:7c:7a:42:c9:76:f7:0d:e9:be:6c:
41:ff:01:d3:67:15:98:3b:ff:0d:78:bd:21:83:6d:32:29:46:
e5:7e:21:41:12:ef:e0:8f:95:99:b0:78:a1:72:7a:ae:b2:03:
57:3c:2c:e3:a1:1c:6f:8b:7e:db:95:5a:b5:cc:bb:d9:8f:0c:
bc:cb:2e:b0:e4:d4:e7:c3:66:59:e4:b5:a9:57:0c:fe:02:64:
86:47:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:37 2026 by rpki-client