Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: YoFwzsFW+YCeVJQAZPdXPPHCyblWZ0X+L09YObxlrRY=
Subject key identifier: 8D:BC:C1:1B:40:0A:BC:26:C2:29:77:4E:B8:61:A4:0A:27:54:A6:AC
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019D9B87DE6E6A713DBD18102A56F2717BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 11EC
Signing time: Fri 17 Apr 2026 13:01:05 +0000
Manifest this update: Fri 17 Apr 2026 13:01:05 +0000
Manifest next update: Sat 18 Apr 2026 13:01:05 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: BFVzHwuKcBRrMu3ZtdU4JIOaSX2PpOcTkHnNCVYzte8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:de:6e:6a:71:3d:bd:18:10:2a:56:f2:71:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Apr 17 13:01:05 2026 GMT
Not After : Apr 18 13:01:05 2026 GMT
Subject: CN=8dbcc11b400abc26c229774eb861a40a2754a6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:e9:4b:eb:45:2e:e8:be:17:18:d3:4a:d0:
b8:71:b4:b7:d7:9f:f9:fa:c7:a4:57:10:cb:3f:1d:
b8:e3:42:f2:a1:28:d8:b9:79:c7:23:a0:6b:5e:5c:
d3:74:ed:ee:a4:ee:a4:46:6a:f7:46:17:e5:d5:22:
a8:05:19:4c:9a:b2:02:c5:1e:9b:6f:27:0d:8e:7a:
04:c3:53:42:1e:90:65:1c:83:02:3e:94:c6:8f:59:
37:4c:5f:d1:e9:6d:8d:2d:29:e0:f8:b7:9d:e7:52:
08:e8:2a:87:5a:59:2e:5e:db:26:f0:02:0e:20:9b:
6a:1c:fc:11:5c:0f:24:86:63:4b:39:88:07:30:16:
91:a6:c1:3d:39:35:d4:4c:29:91:15:4a:0d:a2:13:
7f:b0:49:cb:03:52:22:8c:10:bc:de:dd:cc:2b:57:
7b:f5:53:88:55:a4:c2:bb:e7:88:6c:08:ad:f6:63:
0c:be:5b:f6:e9:0c:2e:af:13:ae:ed:b9:fa:9c:e3:
8b:62:c3:c5:2e:8f:cb:25:6b:86:ca:7e:6c:3b:0a:
cd:33:b6:ac:ef:59:fa:2b:10:1b:26:5a:ec:e9:6c:
ee:1f:2a:c0:1f:48:c5:9c:5d:3c:79:bf:42:1e:82:
ea:df:bb:29:a5:88:ac:97:bb:95:51:46:64:88:e1:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:C1:1B:40:0A:BC:26:C2:29:77:4E:B8:61:A4:0A:27:54:A6:AC
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:dd:1b:e6:e1:94:6e:a8:e2:40:85:2b:33:8e:60:e7:d4:
77:30:2b:cb:8d:20:45:17:c6:3b:ce:12:5d:ca:05:de:9c:05:
a8:1b:4a:20:1d:0e:37:67:52:22:c2:19:01:a3:9d:45:f6:3a:
11:af:91:df:12:19:69:83:8a:2c:43:5f:7f:ea:b6:a7:d4:c8:
9a:28:9d:41:a9:90:e6:9c:68:34:df:dd:87:10:b8:6b:16:d9:
95:9d:f9:95:3a:a7:86:29:f7:85:bf:26:40:bf:e4:4a:9e:a6:
c1:19:c3:76:37:85:8a:3f:e0:bd:0b:9c:0d:3d:b1:5a:62:07:
7b:05:54:c7:78:05:a8:ab:b6:bb:57:07:d4:01:65:a7:02:c9:
d8:8f:7d:b4:5c:c5:71:08:12:d4:33:cb:fd:fa:fd:18:80:f3:
2a:67:71:1e:e0:6f:a5:cb:66:fa:71:5a:10:59:2e:43:91:fd:
25:cb:1f:b8:79:a4:c2:0b:e6:59:41:c3:d4:83:b0:bd:a0:40:
f2:9b:3c:e1:cc:0f:d3:7c:d8:96:bf:3f:49:d5:a6:49:6c:76:
48:88:f4:e4:2c:d1:7d:fa:08:7c:5a:85:1a:3c:64:8f:15:48:
4e:b3:bf:f0:4c:e5:3c:f2:b3:4e:f0:1b:36:ff:c2:9e:26:f7:
a3:8f:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:13 2026 by rpki-client