Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: 8ng6CkQHqp9N6enE7hx1QprpicfMRCR+1IwlMbR2rvw=
Subject key identifier: B7:28:CA:2C:96:F0:F4:C8:4E:E5:3E:A8:E2:B5:2D:0F:6C:DA:AE:D9
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 01A1AA4C08107C23103D0A2164A175488D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: 0315
Signing time: Thu 05 Nov 2026 06:01:11 +0000
Manifest this update: Thu 05 Nov 2026 06:01:11 +0000
Manifest next update: Fri 06 Nov 2026 06:01:11 +0000
Files and hashes: 1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: /ZZZrKhDdolZAs+rO9Ljwh+o0ovVGxENZW9Jn0+VmPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:08:10:7c:23:10:3d:0a:21:64:a1:75:48:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Nov 5 06:01:11 2026 GMT
Not After : Nov 6 06:01:11 2026 GMT
Subject: CN=b728ca2c96f0f4c84ee53ea8e2b52d0f6cdaaed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:e5:64:ca:7f:f6:0f:85:a1:fc:08:95:e3:
37:c3:56:a1:66:57:d4:09:55:8f:44:d4:75:70:24:
b3:b4:49:ba:54:b7:48:31:61:b4:ac:17:c3:60:10:
43:0a:9e:01:2f:e3:c3:32:c1:58:e5:d1:63:33:90:
88:b7:55:33:7a:2f:79:5b:da:e5:18:c7:f0:13:b3:
93:d0:13:e7:f7:73:3a:06:9a:df:36:cd:be:2b:d1:
37:4c:72:2a:1f:57:cf:62:05:92:95:c9:9e:96:2d:
47:e6:c2:f7:bf:42:49:c4:25:89:1e:f8:1a:fb:39:
b4:3e:10:4c:a8:eb:30:18:95:70:7a:37:aa:55:c2:
a1:71:63:c9:6d:44:3c:14:d2:9e:80:61:73:cc:41:
29:e6:30:9e:8d:ce:3e:1e:0a:ca:be:79:33:ff:09:
38:72:f2:e2:a8:9b:2b:6c:a9:d2:7b:f5:34:19:60:
73:0f:21:63:91:ae:85:e6:7d:cd:d4:4c:52:05:18:
f2:0c:ab:86:e6:f2:95:70:be:74:52:85:c0:24:f0:
b7:57:5d:e7:21:cb:56:92:7f:44:e0:3c:0e:eb:00:
ad:e8:e0:15:3c:22:ca:f8:2a:89:aa:f5:2c:8b:4b:
c0:d7:02:62:31:56:2b:2d:47:d9:ca:4a:86:8b:00:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:CA:2C:96:F0:F4:C8:4E:E5:3E:A8:E2:B5:2D:0F:6C:DA:AE:D9
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:84:e3:60:a2:18:9f:90:59:30:d2:60:bf:4d:03:6c:f9:
69:a5:09:82:c2:97:c8:e7:fa:c8:4b:ed:cf:e8:00:bf:c9:c7:
d6:05:48:e8:1f:81:0e:9c:69:9f:9f:a8:1b:df:0a:17:2e:02:
f3:e1:d2:29:f9:a5:fb:03:b8:4a:32:86:23:0c:8e:c1:94:c9:
68:38:f8:32:6f:2c:2d:2f:ca:b3:a1:36:b6:be:7d:a5:2a:7e:
5a:07:66:e8:64:e5:51:cc:f9:55:9d:ab:11:20:08:f4:37:01:
93:dd:d7:be:17:70:51:37:e5:89:4c:7b:0f:ea:96:3c:b8:e7:
d6:3d:ab:9b:66:e0:02:78:4c:43:f9:3f:4f:ac:ce:c6:cc:60:
51:d7:f3:9f:75:6f:56:61:54:ab:97:d9:ad:db:fa:4b:6f:fe:
03:bf:29:94:aa:5c:96:6c:f4:4c:11:0a:98:5c:96:ef:0b:e8:
fd:18:8e:e1:2e:3b:0e:f9:63:23:48:62:ed:e8:e0:2f:b5:37:
35:07:1a:3d:1b:9d:ce:7c:07:90:7d:e7:37:a5:fd:53:b5:62:
b3:15:c1:a6:55:37:33:8b:ca:2f:7a:80:43:6b:62:47:5e:74:
12:c8:ad:d6:95:20:71:3b:18:0b:53:52:d1:32:a1:cc:e0:0b:
91:ed:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:39:54 2026 by rpki-client