Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: 142q8Y6yfkkx1Km+hAQz3DDhxUQzAWZmlyNzoXutsVs=
Subject key identifier: A3:68:79:75:D6:15:5F:CE:0F:CD:7B:40:E4:00:DC:3F:A9:4E:90:71
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019CAC101474091ADFCBF8EDAE1089FFB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1170
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: kDxKP28SwEPYbj8iMLLQPDAtyoTThnLMOjY9pcrDby4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:14:74:09:1a:df:cb:f8:ed:ae:10:89:ff:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=a3687975d6155fce0fcd7b40e400dc3fa94e9071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:58:a9:bb:34:5d:58:01:0a:ee:62:32:e5:
d1:96:90:03:ec:3e:b9:81:e1:d1:f9:2c:14:f6:fd:
b4:f1:53:92:f5:c8:96:bb:ab:96:9c:2a:bf:54:7b:
09:5a:65:bc:aa:fc:e0:b0:e9:da:b0:6d:69:1c:34:
40:91:1c:d8:c5:f4:e6:fb:9e:8f:96:74:19:1a:73:
86:8b:96:77:75:d2:65:75:90:af:01:cd:12:2d:83:
cf:49:64:73:12:5f:3e:39:4f:4a:1e:8d:05:ed:ff:
6f:6b:14:9d:a3:ad:57:b4:03:f6:83:b4:28:70:a8:
2e:a8:bd:1f:04:fc:0c:b2:3d:71:83:02:69:aa:6e:
2d:fb:42:f2:24:57:23:fd:a2:01:ee:3c:42:f0:60:
0c:1d:4f:5e:25:17:2a:dc:b0:4f:6b:76:18:11:1d:
f1:b5:7e:ce:c8:36:5e:69:84:5f:75:3d:e6:e0:11:
ce:3d:e2:e8:17:81:71:d8:dc:b2:e2:bc:d8:c3:88:
1b:4a:4d:f3:9e:80:0f:41:23:d2:3e:3e:a5:33:4f:
c9:61:96:8b:5b:2d:de:99:7f:4d:cb:cb:81:61:2c:
49:7a:3a:2f:7a:83:4b:f5:e4:67:32:c0:b7:3a:2e:
0c:9b:4f:6f:f1:e9:93:9d:b1:ad:00:dd:ec:1d:70:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:79:75:D6:15:5F:CE:0F:CD:7B:40:E4:00:DC:3F:A9:4E:90:71
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:69:f6:64:06:ac:7a:a5:9a:91:28:ce:e9:f0:ed:36:73:
09:03:05:d6:d1:94:e9:60:0a:a1:6f:5a:29:aa:2b:f9:ac:57:
7a:93:3d:5e:f3:0b:83:5c:c4:6c:2c:0f:9f:47:b0:94:81:77:
38:36:1a:69:34:20:68:83:ce:b1:ec:32:5a:4c:4f:e0:6f:9d:
99:56:29:fe:0a:f9:40:93:e6:f8:a5:e9:2f:40:99:ed:47:a6:
35:e2:39:69:0f:fe:e0:05:d4:eb:54:c7:39:03:3e:39:2b:f8:
18:b9:7e:56:f5:ea:48:84:55:ac:5e:7c:fe:0d:fc:e5:e0:d6:
ce:03:b9:67:ab:c2:5d:c2:fc:42:f1:3f:23:db:a8:4e:78:99:
da:99:27:8e:c6:a2:de:03:6a:6b:ca:5f:08:94:6c:6e:f1:89:
d0:53:21:28:15:96:51:b8:57:f4:ed:30:d3:d9:61:20:92:9e:
4e:02:4c:e0:d8:4d:0c:b9:d7:8a:7f:d6:c8:ce:d7:72:fa:cc:
85:a9:7b:71:fa:48:10:31:14:99:01:ce:9f:0f:81:07:41:4f:
55:90:5a:33:83:c7:e0:07:9c:22:45:74:41:2d:a9:d2:2f:47:
42:64:c9:30:46:10:ce:3e:86:d8:42:06:c4:d4:22:17:5f:ea:
b4:35:52:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEBR0CRrfy/jtrhCJ/7QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYwMzAyMDEwMTAwWhcNMjYwMzAzMDEwMTAwWjAzMTEwLwYDVQQD
EyhhMzY4Nzk3NWQ2MTU1ZmNlMGZjZDdiNDBlNDAwZGMzZmE5NGU5MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3VYqbs0XVgBCu5iMuXRlpAD7D65
geHR+SwU9v208VOS9ciWu6uWnCq/VHsJWmW8qvzgsOnasG1pHDRAkRzYxfTm+56P
lnQZGnOGi5Z3ddJldZCvAc0SLYPPSWRzEl8+OU9KHo0F7f9vaxSdo61XtAP2g7Qo
cKguqL0fBPwMsj1xgwJpqm4t+0LyJFcj/aIB7jxC8GAMHU9eJRcq3LBPa3YYER3x
tX7OyDZeaYRfdT3m4BHOPeLoF4Fx2Nyy4rzYw4gbSk3znoAPQSPSPj6lM0/JYZaL
Wy3emX9Ny8uBYSxJejoveoNL9eRnMsC3Oi4Mm09v8emTnbGtAN3sHXABTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNoeXXWFV/OD817QOQA3D+pTpBxMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB51p9mQG
rHqlmpEozunw7TZzCQMF1tGU6WAKoW9aKaor+axXepM9XvMLg1zEbCwPn0ewlIF3
ODYaaTQgaIPOsewyWkxP4G+dmVYp/gr5QJPm+KXpL0CZ7UemNeI5aQ/+4AXU61TH
OQM+OSv4GLl+VvXqSIRVrF58/g385eDWzgO5Z6vCXcL8QvE/I9uoTniZ2pknjsai
3gNqa8pfCJRsbvGJ0FMhKBWWUbhX9O0w09lhIJKeTgJM4NhNDLnXin/WyM7XcvrM
hal7cfpIEDEUmQHOnw+BB0FPVZBaM4PH4AecIkV0QS2p0i9HQmTJMEYQzj6G2EIG
xNQiF1/qtDVSSw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:32 2026 by rpki-client