Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: tI672Z75yOJ1N1k00RY0M177wX+Dd/uJK2+j3EXc2T0=
Subject key identifier: 55:CF:72:01:77:C5:59:DB:10:E5:78:88:CD:6E:58:EA:10:0A:2B:0E
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019D9962CE05FF546FDABB584ED9FFA3E838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 11AC
Signing time: Fri 17 Apr 2026 03:01:22 +0000
Manifest this update: Fri 17 Apr 2026 03:01:22 +0000
Manifest next update: Sat 18 Apr 2026 03:01:22 +0000
Files and hashes: 1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: FSBdfIPKycLHTUnEDOQlQufSq6f28tb/VZX/tVmc9H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ce:05:ff:54:6f:da:bb:58:4e:d9:ff:a3:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Apr 17 03:01:22 2026 GMT
Not After : Apr 18 03:01:22 2026 GMT
Subject: CN=55cf720177c559db10e57888cd6e58ea100a2b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:c7:2c:a4:d2:63:f6:bc:4e:47:1a:f1:26:
98:0c:95:36:84:9b:f0:0f:17:a5:20:ef:42:a7:a1:
49:93:9e:74:91:62:c4:bb:2d:73:a0:0a:3d:6f:f5:
db:1c:76:9b:9f:ba:05:6c:39:4a:07:33:11:ee:2c:
5c:cc:51:1e:cd:4d:70:4d:12:68:8d:87:25:fd:96:
3b:fc:2f:f5:15:e5:c3:00:56:7c:a4:72:ad:14:71:
27:0d:34:32:91:e7:2b:da:2f:ed:b3:e7:ec:df:d2:
48:fc:d8:c2:c1:ee:55:53:24:19:a2:ba:fa:89:21:
bb:56:dc:e5:56:06:38:d0:99:b3:64:56:cc:d1:76:
0d:7d:83:46:20:fd:61:53:cc:6b:e6:fb:5f:89:09:
29:6d:e1:1e:cf:76:e6:e9:19:0e:c0:4e:6c:7d:1b:
99:cd:b9:5f:3a:bb:29:46:22:d6:b0:8a:ae:cb:d4:
50:11:f5:37:6d:76:9f:99:80:bf:d0:7a:fc:d0:32:
fa:d7:30:43:6d:3b:67:70:4a:6a:e3:a8:30:24:81:
93:49:15:f6:ff:6e:af:d5:10:ef:a0:15:5f:c5:65:
39:dd:f5:34:bf:f4:6e:ff:b6:19:8b:c6:6a:8c:b2:
e8:f1:fe:24:e1:ad:ad:43:93:26:0d:f5:21:ba:a1:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CF:72:01:77:C5:59:DB:10:E5:78:88:CD:6E:58:EA:10:0A:2B:0E
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:53:3b:cd:8c:d5:01:e2:60:d2:11:25:6d:5e:bf:da:98:
fd:09:fe:63:21:d2:cf:d9:73:d1:69:85:8d:68:04:0d:48:54:
68:27:28:57:b5:f0:35:0e:f7:d5:1b:d4:17:d8:48:d8:cc:a6:
14:1b:a8:d3:f7:0c:0b:03:d3:e0:0c:ab:e2:f3:d6:b0:fa:9d:
18:a7:0e:5e:94:dc:39:42:94:f5:00:ee:ef:66:67:44:38:54:
c2:dc:1a:2c:1f:f7:48:7c:0a:b4:02:f1:cc:6f:fa:d6:13:1e:
6f:c5:e1:46:ea:12:a5:02:30:d1:07:08:84:f8:99:2a:2f:bd:
66:64:74:41:5d:4b:7e:64:39:1b:a3:bc:1f:33:a5:9d:79:7e:
57:69:dd:8d:d3:5f:8b:f2:c8:2e:54:63:7b:a9:27:61:15:bc:
c2:03:34:53:15:34:10:40:53:35:8d:32:84:2d:f3:95:c0:00:
1e:f4:67:f9:24:28:e7:32:2f:50:c1:88:35:a8:b3:1c:38:90:
35:c3:fe:63:d2:ff:07:8e:26:84:be:12:cc:68:32:38:b5:82:
b2:5b:00:cd:e8:ab:28:fb:85:a8:ba:cd:d6:e6:4c:f5:0e:b6:
9b:ab:2b:51:63:c7:fe:81:93:4e:87:1a:3c:d7:9d:fb:79:08:
44:3f:6f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYs4F/1Rv2rtYTtn/o+g4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx
MmM0ZmUwHhcNMjYwNDE3MDMwMTIyWhcNMjYwNDE4MDMwMTIyWjAzMTEwLwYDVQQD
Eyg1NWNmNzIwMTc3YzU1OWRiMTBlNTc4ODhjZDZlNThlYTEwMGEyYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLPHLKTSY/a8Tkca8SaYDJU2hJvw
DxelIO9Cp6FJk550kWLEuy1zoAo9b/XbHHabn7oFbDlKBzMR7ixczFEezU1wTRJo
jYcl/ZY7/C/1FeXDAFZ8pHKtFHEnDTQykecr2i/ts+fs39JI/NjCwe5VUyQZorr6
iSG7VtzlVgY40JmzZFbM0XYNfYNGIP1hU8xr5vtfiQkpbeEez3bm6RkOwE5sfRuZ
zblfOrspRiLWsIquy9RQEfU3bXafmYC/0Hr80DL61zBDbTtncEpq46gwJIGTSRX2
/26v1RDvoBVfxWU53fU0v/Ru/7YZi8ZqjLLo8f4k4a2tQ5MmDfUhuqEwNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXPcgF3xVnbEOV4iM1uWOoQCisOMB8GA1UdIwQY
MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt
YzYyYmU4YTcwM2NlLzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl
LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsFTO82M
1QHiYNIRJW1ev9qY/Qn+YyHSz9lz0WmFjWgEDUhUaCcoV7XwNQ731RvUF9hI2Mym
FBuo0/cMCwPT4Ayr4vPWsPqdGKcOXpTcOUKU9QDu72ZnRDhUwtwaLB/3SHwKtALx
zG/61hMeb8XhRuoSpQIw0QcIhPiZKi+9ZmR0QV1LfmQ5G6O8HzOlnXl+V2ndjdNf
i/LILlRje6knYRW8wgM0UxU0EEBTNY0yhC3zlcAAHvRn+SQo5zIvUMGINaizHDiQ
NcP+Y9L/B44mhL4SzGgyOLWCslsAzeirKPuFqLrN1uZM9Q62m6srUWPH/oGTToca
PNed+3kIRD9v4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:07 2026 by rpki-client