Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: ZgJpg+ygLi0grTLeG+MTxrnvy7kTKRaTR3XzpZnisMg=
Subject key identifier: 93:71:23:B0:55:39:36:CF:2C:BF:02:4B:9D:95:8C:36:04:FF:DD:24
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019CABD9CA701407D3AE7250540E647951FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 1131
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: LC4U8ycvsYbEV6Qxz22a9wgxy8bIxulgEdqqSwBVY+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ca:70:14:07:d3:ae:72:50:54:0e:64:79:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=937123b0553936cf2cbf024b9d958c3604ffdd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:18:17:57:f6:32:17:2b:bd:4c:c0:99:a8:
64:cf:cf:00:ed:64:16:a2:ac:5f:96:b7:73:4d:76:
3f:57:1b:10:5a:c1:2d:f7:2e:00:3a:07:80:2d:80:
2d:fb:97:52:43:bd:2b:69:b8:63:fc:ff:9b:0c:2d:
5f:d1:39:20:ae:dc:c7:f5:36:68:fc:bb:e0:71:ad:
57:91:6a:fd:cd:80:64:c6:d4:c0:38:5d:82:58:b9:
1f:66:34:d1:20:9d:16:37:aa:37:54:06:07:b9:82:
91:4f:4c:77:50:43:a4:1b:4d:f5:29:89:c7:4f:24:
05:0e:b1:6a:5d:30:e4:a7:66:71:18:40:78:d9:b1:
2c:6a:f4:4e:a5:d2:e0:24:52:71:9b:08:bb:5a:78:
b3:5e:35:4c:0f:14:d7:f6:b8:38:3f:e6:2d:bc:04:
18:02:42:27:86:fc:e5:c2:4b:38:51:bd:b6:4c:21:
1a:f9:be:aa:95:b1:84:5c:cb:88:4f:ae:05:f6:ca:
39:14:d7:18:ba:df:3e:ad:4d:18:eb:d2:b9:1c:ac:
83:c4:14:95:e8:b1:a8:80:5d:be:6c:18:c5:58:a2:
ca:ff:66:27:b0:48:e8:7a:9f:fb:f2:83:16:f9:86:
53:2e:60:b3:a6:61:d7:53:4d:3d:85:82:ca:90:00:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:23:B0:55:39:36:CF:2C:BF:02:4B:9D:95:8C:36:04:FF:DD:24
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7c:64:a3:f0:44:53:04:43:2b:6b:ff:66:0a:8c:09:92:9a:
50:20:f2:dd:74:82:32:e4:cf:13:8b:01:6a:87:c6:03:bb:17:
65:64:3e:3b:e8:c2:e3:7c:9b:5f:8e:ff:ea:36:e1:ec:4c:58:
5c:44:e1:ab:57:f0:da:a1:2c:8a:6b:f5:58:60:b3:78:58:86:
97:57:63:29:bb:5b:ae:1c:9b:5f:cc:a0:3c:9a:41:c9:38:f2:
48:79:d5:d5:ea:a7:f3:40:13:ab:0f:76:bc:64:83:9d:33:ad:
3b:da:1f:1e:e1:f9:b5:f8:26:3b:a7:d9:42:4c:fe:ef:a4:47:
14:73:72:0e:d8:16:84:d7:3c:b0:70:8d:c8:68:94:e0:99:e1:
aa:6b:db:62:65:cf:9c:c8:15:e3:9f:2f:50:18:45:d4:1a:54:
6f:60:b0:23:b8:dd:38:f2:7b:d1:cd:ea:0f:3a:ea:a0:dc:be:
86:be:31:d1:36:72:14:c6:42:29:7c:f9:72:d8:cd:b0:3d:11:
f3:82:9f:5b:6f:3c:30:ff:ff:a5:f1:e2:b3:ba:33:b7:44:b3:
54:44:19:0d:4b:9a:30:b6:71:20:4e:58:c6:e3:68:ed:36:97:
02:61:21:fb:a3:c8:e5:4b:14:c3:b0:61:cb:4d:db:2a:26:af:
60:94:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:15 2026 by rpki-client