Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: EUDDnTTtaU8VYYiNr43wUaR+VVySsBgwSldypHQ4zjk=
Subject key identifier: 44:D1:F5:47:6C:0A:1E:79:F4:4A:B8:60:2A:1E:AD:B2:C6:B9:73:BC
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019FA898E3255D49C45C84E290A0899E930D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 020B
Signing time: Tue 28 Jul 2026 12:00:19 +0000
Manifest this update: Tue 28 Jul 2026 12:00:19 +0000
Manifest next update: Wed 29 Jul 2026 12:00:19 +0000
Files and hashes: 1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: jI9thucwqQRrhU1xTEoItfLfj3c+aiDqfL9mLboLhP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e3:25:5d:49:c4:5c:84:e2:90:a0:89:9e:93:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Jul 28 12:00:19 2026 GMT
Not After : Jul 29 12:00:19 2026 GMT
Subject: CN=44d1f5476c0a1e79f44ab8602a1eadb2c6b973bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:ec:a4:93:38:8b:c5:3c:7a:3a:c7:32:8a:
7a:fb:73:26:91:18:ca:f1:24:06:a9:15:41:0d:fd:
2f:a8:94:18:6d:73:d4:5a:02:83:92:e5:f5:40:76:
75:b5:e0:36:bc:fd:55:a5:da:cc:55:ba:7a:0d:be:
b2:0e:22:cf:1e:71:c7:ee:da:9e:84:4f:93:28:b3:
d8:57:82:13:47:5a:c5:14:92:3f:26:78:fb:6f:62:
85:30:4c:2a:76:8c:13:90:03:11:ba:1e:a9:39:ca:
92:a0:18:43:12:15:21:1b:ef:75:0c:7a:12:5d:9d:
c3:5b:8f:7a:01:f6:01:c4:be:21:0d:4e:3d:7a:0a:
45:f8:d9:7e:86:a9:c0:fc:a7:c3:fa:e0:4a:2e:27:
b2:20:77:40:51:b7:fc:27:3b:e7:59:29:3e:d3:ff:
c4:0f:eb:b4:9e:66:f3:95:c4:3b:36:bc:4e:1c:ba:
91:8a:1d:16:cb:53:d0:ca:79:f9:4d:15:b1:a3:a1:
65:70:59:f6:11:4d:18:ad:f1:08:79:f8:30:f2:eb:
89:d6:db:2f:dc:56:a0:cd:79:56:8f:ce:78:d1:de:
48:7d:34:5e:7d:c7:36:42:20:6e:d4:6d:47:d0:75:
85:ec:48:aa:98:d0:62:2a:48:10:e9:a0:17:a0:81:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:F5:47:6C:0A:1E:79:F4:4A:B8:60:2A:1E:AD:B2:C6:B9:73:BC
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:38:89:8b:31:a0:45:c3:5b:29:fa:dc:95:e3:02:6d:94:98:
63:ae:2e:89:4b:1a:30:22:e0:07:f6:8b:e9:cc:2a:c4:10:7d:
5c:81:19:d7:d3:0b:16:78:ac:0e:2d:79:d6:8e:61:dd:cc:d1:
80:b3:c5:1e:09:d2:f3:53:4b:db:fe:f3:c6:83:ed:02:56:d1:
23:67:52:d1:cd:64:16:6d:64:1a:61:dc:bc:df:37:34:d9:2b:
4f:b2:a8:25:8c:2f:13:1b:3d:60:0c:4b:64:3a:44:24:48:c3:
c5:09:00:67:a6:2a:9a:07:98:56:30:bf:72:9a:33:df:cc:0c:
8c:14:16:0f:d5:4f:54:b0:c2:61:45:f8:d2:8f:de:ed:66:83:
b1:86:44:e3:00:b9:3f:f0:dd:7c:43:5d:aa:b6:ec:be:07:7f:
db:4a:02:ff:01:c8:63:f9:61:5e:c2:9c:99:dc:84:0b:e4:52:
63:c5:27:91:0c:23:7a:b6:ec:11:a8:93:a5:fd:ca:79:1b:0a:
9e:9f:71:25:d8:7a:f5:b4:5c:90:da:ec:af:c6:d3:56:44:7f:
4f:33:78:de:59:bb:1c:1e:dc:17:03:bf:e3:dc:e0:4e:d7:72:
2a:24:ef:11:a6:a2:f5:ad:e5:e6:50:ae:76:5e:66:7c:f2:41:
0c:40:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client