Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: 5cPLxIQDb2HJAKLQavyuZOLUce/AsTPTRagNczK+2s8=
Subject key identifier: 17:BC:85:8B:22:79:2F:51:C5:98:41:D0:33:0D:F3:8F:B9:BE:CB:B5
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019FAC769F0890856B04602D4D8A04303129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 12BF
Signing time: Wed 29 Jul 2026 06:01:22 +0000
Manifest this update: Wed 29 Jul 2026 06:01:22 +0000
Manifest next update: Thu 30 Jul 2026 06:01:22 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: ahQ0HzGyeBvkmTD7Zkq5u10Ur9B//N6CasVxtWUFWtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:9f:08:90:85:6b:04:60:2d:4d:8a:04:30:31:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jul 29 06:01:22 2026 GMT
Not After : Jul 30 06:01:22 2026 GMT
Subject: CN=17bc858b22792f51c59841d0330df38fb9becbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:b1:62:73:45:17:e1:5a:38:b4:d3:e7:3f:
69:23:82:f0:31:fe:b8:de:02:92:6e:52:11:4d:ea:
17:eb:6c:9a:61:29:ba:b3:1d:1c:bb:07:9b:38:1f:
ea:96:21:a0:8d:e5:97:5b:24:79:73:fb:d8:ba:2b:
5c:8b:4b:cd:07:51:7e:a1:63:1e:2d:40:2d:ff:92:
39:41:55:a8:78:33:f3:25:5d:b2:1d:17:8c:87:b9:
43:05:1d:6d:45:80:82:f7:db:d0:d6:51:5a:e9:9b:
21:5a:9a:f2:92:f1:59:6d:a4:a9:e4:e7:19:bc:c1:
08:f5:59:a0:d2:0b:06:aa:b9:20:a8:46:63:fd:5e:
c5:83:34:8b:d9:b0:6f:f6:da:15:2d:96:32:c4:22:
fd:7f:94:ae:d5:8a:83:91:38:89:16:70:2b:53:08:
32:d1:ad:2d:7e:68:f0:da:ae:57:f2:d1:62:0c:c5:
4b:f9:d6:b0:58:95:42:33:6c:11:ed:43:49:db:7c:
2f:6b:e0:2d:04:6f:9c:9a:e1:a5:97:6c:7c:5a:90:
fe:61:76:80:d0:05:50:f5:dd:30:ae:37:35:56:8a:
83:94:4d:24:84:b1:aa:bf:f1:04:1f:71:d6:7d:25:
76:4d:d4:9f:74:42:8f:9a:39:f2:c3:76:fc:2e:1a:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:85:8B:22:79:2F:51:C5:98:41:D0:33:0D:F3:8F:B9:BE:CB:B5
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ea:48:5a:9f:2b:3b:f6:a9:b0:0b:97:90:fe:51:4c:af:ce:
2d:4b:b7:c3:9b:28:60:ca:f9:d7:41:0d:16:39:2e:29:07:78:
a5:76:07:b0:6e:1a:fb:c9:c6:2e:b0:c3:2a:34:a6:8f:b5:32:
f8:3a:3e:87:72:09:82:03:67:f4:9e:e8:e3:2d:b4:63:5c:09:
19:3f:49:85:1d:2b:8e:87:93:d9:3f:29:d7:9a:16:36:64:e3:
6f:b9:b9:81:0d:9f:fe:38:5a:dc:bd:f3:4c:5d:7b:10:00:3b:
18:10:3b:85:fc:bb:3f:ee:da:a1:ae:7b:68:fe:13:1d:ab:66:
f3:38:25:e1:e1:a0:56:e7:28:87:08:39:06:0c:6e:35:41:40:
e7:5b:3f:a0:ae:ac:9b:8d:21:3c:0f:43:27:db:ac:5d:07:0f:
18:e4:ea:1a:8e:a3:a8:07:a0:e6:c5:00:db:18:21:95:6e:9d:
01:0f:76:54:f5:e2:6f:d3:1a:7b:06:5c:ba:53:4a:de:47:c0:
ce:57:ab:a5:af:f6:5f:3c:15:22:65:ab:75:cb:9d:af:3e:f9:
98:d2:0d:b1:b4:f4:b0:bb:13:eb:26:b3:c8:b8:78:57:3b:af:
ee:1a:7f:7e:eb:d2:7b:36:75:4b:df:37:b4:87:05:c2:b0:04:
81:29:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:23 2026 by rpki-client