Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier: 1EK4OkviDzKFJXe0U9gbeA/3MRmnzIGko3u1xeTh+a0=
Subject key identifier: FA:A8:AB:CE:32:DD:97:81:5B:69:D0:71:44:39:0A:B0:FD:54:FD:A1
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019D9C9A6B13B95634ABB8EDCD0FCD01693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number: FB
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
2: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: WU3142j4y3sfuycIv9LY/l0zp5U7Vbf85SEStAjzeos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6b:13:b9:56:34:ab:b8:ed:cd:0f:cd:01:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=faa8abce32dd97815b69d07144390ab0fd54fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:8d:a8:41:a9:a0:e2:14:fb:df:95:4c:2d:
93:35:42:9b:db:11:3e:40:14:4b:0e:df:02:14:6e:
3b:a0:e1:9e:5a:62:4d:44:f2:e5:a0:fe:c6:3b:f1:
fa:29:84:7b:c2:91:bf:2f:61:a2:c0:fc:cb:63:73:
1f:ba:02:db:33:8a:29:cc:11:24:d6:91:8a:97:68:
ac:c0:88:97:1f:d2:30:65:f4:27:c0:81:74:00:67:
b6:62:ec:e9:48:41:e7:8a:82:dd:4e:03:1b:51:e1:
4c:6a:f1:7e:b5:1b:0d:47:1c:60:3b:2d:c5:a3:54:
fd:0f:4a:86:19:7f:b2:2e:aa:c5:7b:4a:b6:6e:de:
dd:86:4c:93:1c:d0:ca:88:2c:c0:c6:1e:4a:38:ca:
9f:ad:8a:6e:66:84:da:96:69:a9:54:03:40:e8:0b:
b1:e9:91:14:e3:59:47:fa:a0:5c:5a:f8:46:33:be:
de:a3:d7:f2:af:19:6f:f1:b5:e2:87:62:e8:fe:53:
d9:2f:f4:9b:bb:39:0b:10:a2:b5:b7:5c:b4:c0:dd:
b5:31:44:b8:38:90:0f:5a:ea:84:d6:c0:5b:81:68:
b0:76:7b:1a:e2:00:58:35:e1:37:7f:b1:25:c7:fa:
24:70:62:15:05:14:45:97:44:11:08:49:78:1d:2b:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:AB:CE:32:DD:97:81:5B:69:D0:71:44:39:0A:B0:FD:54:FD:A1
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:dd:c7:5f:fc:59:9c:5a:56:da:58:ae:f1:86:e4:3b:28:
0a:f0:e9:1e:07:f0:bb:54:83:e3:36:60:f9:e3:aa:33:69:35:
1a:35:66:bb:b4:29:67:2d:93:9f:ea:9d:e6:03:45:f8:f3:56:
c0:51:e9:d9:38:3d:1c:ca:c7:74:44:68:07:0b:77:a4:be:48:
43:de:83:e1:f8:9e:cd:6f:b9:9e:4a:09:8b:d2:73:19:0a:94:
3f:fa:65:cc:40:15:b0:71:ea:c2:6a:16:06:3a:64:ab:1f:26:
b3:27:73:0b:f1:47:ed:7f:d0:92:a2:2f:84:84:73:f9:0c:c3:
07:e3:2b:9d:ca:02:b4:75:e5:86:4e:96:c0:b8:95:a9:7f:73:
d8:0b:36:f6:e5:4d:a7:a8:6e:dc:05:eb:93:85:71:5f:8c:ea:
4c:58:ac:92:47:a7:ca:dc:33:82:b9:b7:f9:bc:e8:5e:23:9f:
29:72:73:5e:8b:fc:a4:21:9c:02:5b:52:9c:b1:d2:c9:18:0d:
7a:de:2a:44:f9:9b:ef:70:61:3b:58:f2:6b:97:ad:1a:a3:8e:
35:2b:84:b3:65:31:20:ba:83:33:cc:1c:7a:0d:b1:f0:ce:8a:
13:10:66:7d:2f:fb:e6:89:df:0d:c8:8a:0a:72:b7:90:85:e9:
92:27:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:51 2026 by rpki-client