Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: qcOJdfbcvplHFIKefWvqXj/1EB3oVZI0zI4Qui/goYY=
Subject key identifier: 4B:1C:08:3B:1D:BB:25:4D:4A:C9:5D:5F:C7:4C:10:25:87:16:31:17
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019CAE6C7F820B590E2C903BDCE1C7936ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 12:01:11 +0000
Manifest this update: Mon 02 Mar 2026 12:01:11 +0000
Manifest next update: Tue 03 Mar 2026 12:01:11 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: AOoQFoihC422YdWSqqnWU6uh98D5rSHStsrXHwlU8SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:7f:82:0b:59:0e:2c:90:3b:dc:e1:c7:93:6e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Mar 2 12:01:11 2026 GMT
Not After : Mar 3 12:01:11 2026 GMT
Subject: CN=4b1c083b1dbb254d4ac95d5fc74c102587163117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:36:40:da:7e:ea:e4:c5:ff:4c:30:b9:93:
00:38:d5:1b:6e:60:a8:ae:ff:48:bf:a8:c1:a7:92:
f3:14:95:34:8e:27:50:56:17:87:60:20:81:7a:8d:
18:4c:3d:1d:96:47:f6:08:0b:42:98:a7:f4:3b:ae:
dd:e2:bc:cf:ae:2f:e7:05:43:42:7a:15:94:7c:01:
9d:12:95:04:36:68:bb:ee:16:bb:2f:93:95:98:19:
ef:b2:cd:a7:b3:bb:ef:89:c0:6c:d6:d8:0a:b2:93:
22:e8:3c:77:6a:0b:ee:db:ef:9d:2e:cb:e3:01:09:
e6:c6:13:fa:82:c3:46:ae:11:8a:48:01:f6:45:1c:
53:00:e4:90:a5:5e:09:d7:63:90:31:58:ca:b2:77:
b9:87:c5:8d:4b:89:f2:72:0e:c4:43:79:7a:8e:c0:
8a:ed:ac:41:43:df:5f:dd:c7:29:7a:b3:bf:9f:2f:
0b:29:55:bb:68:e2:4d:42:31:c9:ac:4e:97:24:51:
5b:2e:43:df:e2:c4:5e:bd:03:f8:bf:c4:05:c0:72:
14:29:bf:73:b4:f0:c9:8c:a1:4b:92:85:74:30:2a:
91:6f:2c:d0:22:66:08:e2:cf:e1:bf:82:0e:27:42:
31:97:01:4c:0f:8b:52:78:fc:af:a6:2f:d4:d5:5e:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:08:3B:1D:BB:25:4D:4A:C9:5D:5F:C7:4C:10:25:87:16:31:17
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:2b:b8:b6:69:a5:0d:84:ff:cb:66:ef:8f:1b:a8:56:71:
f7:76:63:4d:ea:7d:d5:01:31:8d:c4:5c:c3:6a:c9:c7:a0:09:
7b:80:60:11:37:59:dd:d7:5e:27:40:1a:2c:ee:d8:22:0c:f8:
e8:ff:b2:4e:4d:04:0f:03:b9:d9:30:4d:e0:3c:30:9a:f6:ff:
89:1c:06:cd:01:99:d0:f5:9b:9b:c5:80:0b:9a:db:a3:f2:ba:
3c:83:8b:5c:4e:5f:c9:50:41:7e:26:e2:21:2b:4c:46:74:96:
5b:df:c0:3f:f0:32:41:12:7d:2f:44:64:7b:09:23:79:2e:67:
89:cf:8e:cc:61:b9:4c:9a:d3:7c:c7:0e:ac:7f:6e:4b:9b:50:
77:14:d2:ca:3d:fe:bd:9d:ef:34:38:bf:47:26:40:c2:a8:09:
ee:5e:24:3d:e1:5b:8f:c2:92:32:fc:76:50:53:31:07:09:77:
6b:1d:30:85:b2:dd:3a:47:30:f2:5e:c9:cd:dd:b2:fc:ef:e8:
4a:1d:96:04:fd:34:24:37:6d:39:d9:29:18:4f:4f:9b:8e:e2:
c3:d8:96:f4:a3:44:75:48:e1:99:75:56:b3:19:a2:21:48:db:
aa:1d:30:1b:b7:ea:24:48:f1:fd:37:da:be:6e:e1:94:a1:ec:
79:1a:7a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubH+CC1kOLJA73OHHk27SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx
YTcxYzgwHhcNMjYwMzAyMTIwMTExWhcNMjYwMzAzMTIwMTExWjAzMTEwLwYDVQQD
Eyg0YjFjMDgzYjFkYmIyNTRkNGFjOTVkNWZjNzRjMTAyNTg3MTYzMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw02QNp+6uTF/0wwuZMAONUbbmCo
rv9Iv6jBp5LzFJU0jidQVheHYCCBeo0YTD0dlkf2CAtCmKf0O67d4rzPri/nBUNC
ehWUfAGdEpUENmi77ha7L5OVmBnvss2ns7vvicBs1tgKspMi6Dx3agvu2++dLsvj
AQnmxhP6gsNGrhGKSAH2RRxTAOSQpV4J12OQMVjKsne5h8WNS4nycg7EQ3l6jsCK
7axBQ99f3ccperO/ny8LKVW7aOJNQjHJrE6XJFFbLkPf4sRevQP4v8QFwHIUKb9z
tPDJjKFLkoV0MCqRbyzQImYI4s/hv4IOJ0IxlwFMD4tSePyvpi/U1V7TCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEscCDsduyVNSsldX8dMECWHFjEXMB8GA1UdIwQY
MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt
NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4
LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1IruLZp
pQ2E/8tm748bqFZx93ZjTep91QExjcRcw2rJx6AJe4BgETdZ3ddeJ0AaLO7YIgz4
6P+yTk0EDwO52TBN4Dwwmvb/iRwGzQGZ0PWbm8WAC5rbo/K6PIOLXE5fyVBBfibi
IStMRnSWW9/AP/AyQRJ9L0RkewkjeS5nic+OzGG5TJrTfMcOrH9uS5tQdxTSyj3+
vZ3vNDi/RyZAwqgJ7l4kPeFbj8KSMvx2UFMxBwl3ax0whbLdOkcw8l7Jzd2y/O/o
Sh2WBP00JDdtOdkpGE9Pm47iw9iW9KNEdUjhmXVWsxmiIUjbqh0wG7fqJEjx/Tfa
vm7hlKHseRp6sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:21 2026 by rpki-client