Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft
File: 2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft (raw, json)
Hash identifier: d2SNDYLZgSB7baPDaT2L5DyrGE5z0tqCvFKiJP6cTCU=
Subject key identifier: EC:4C:8E:84:78:56:F5:86:D9:12:96:CC:15:69:96:BE:B6:38:2A:E8
Authority key identifier: D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73
Certificate issuer: /CN=d8dd0f066a3e24f1a663112a1f28e9d83b2ecd73
Certificate serial: 01A0D34A8F57747C5B79E801633FB3B9BCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft
Manifest number: 0294
Signing time: Thu 24 Sep 2026 12:01:13 +0000
Manifest this update: Thu 24 Sep 2026 12:01:13 +0000
Manifest next update: Fri 25 Sep 2026 12:01:13 +0000
Files and hashes: 1: 2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl (hash: W2u63LX67VtgcCj0Jw3y7VgW6q++b7S1IEAqW07acTk=)
2: kpMx_jDvAD2J4w_3QrPa_7EmM7k.roa (hash: s8PvuEvsSULDst+nlshWZnZoN6R6lxtcg9VvUqcdZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:8f:57:74:7c:5b:79:e8:01:63:3f:b3:b9:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8dd0f066a3e24f1a663112a1f28e9d83b2ecd73
Validity
Not Before: Sep 24 12:01:13 2026 GMT
Not After : Sep 25 12:01:13 2026 GMT
Subject: CN=ec4c8e847856f586d91296cc156996beb6382ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:c1:54:cb:aa:0c:49:94:d9:c1:dc:72:3f:
83:d2:9f:11:ea:d6:27:52:a2:f8:4e:67:bc:92:ea:
6f:a9:01:2d:c5:6f:a6:7c:dc:30:dd:85:b8:cd:26:
a4:a4:0d:2d:80:05:b4:b0:a2:25:98:f8:07:3e:70:
89:d4:62:73:18:10:2d:18:aa:75:b6:46:4f:2d:3a:
de:b5:8c:98:4b:94:b9:f3:5c:2d:e9:28:29:f9:97:
15:77:ed:52:af:6f:47:2d:38:76:96:c5:e5:18:b8:
1c:82:4f:d5:85:ee:d7:0c:3f:1e:8b:b4:a3:5d:44:
85:49:03:8f:5a:38:49:10:01:1b:0d:b2:3f:43:25:
79:6c:95:43:5e:2d:be:05:32:e6:d8:f0:17:ee:05:
27:d5:f2:fa:83:49:56:d6:79:27:ed:ea:44:43:60:
06:10:94:c5:9f:bc:49:af:a9:80:75:dc:51:d6:29:
a5:91:88:9b:bc:0f:4d:01:f9:c8:a2:39:98:80:ae:
67:79:8f:e9:5e:dc:34:16:ba:8f:64:16:bc:a3:00:
8b:29:6a:65:8f:79:0c:e8:f8:d1:ce:03:84:85:06:
32:bb:af:6e:12:05:1b:3d:9f:86:dc:f9:78:3d:5d:
17:70:88:e8:e0:69:88:6a:6b:0c:d0:61:b5:14:9f:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:8E:84:78:56:F5:86:D9:12:96:CC:15:69:96:BE:B6:38:2A:E8
X509v3 Authority Key Identifier:
keyid:D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e5:65:62:f1:68:74:39:b0:c5:88:91:f7:3a:c4:f3:78:be:
1d:4a:29:d9:f5:ea:4b:1a:4e:99:67:ac:87:bc:30:0b:08:5f:
96:e6:a6:a1:48:4e:dd:f0:c2:dc:09:87:87:74:72:5c:c0:54:
a1:d9:f5:ab:d8:2c:a7:50:56:ed:ce:9c:15:63:14:85:ef:f2:
6c:d5:7a:9d:e0:5b:b0:d1:4e:a1:db:9e:e6:7d:8b:36:63:3b:
ec:1b:df:19:81:2a:f3:d5:5d:cc:af:d2:69:ce:66:da:26:30:
62:24:a0:eb:7b:75:0c:ed:98:60:10:f4:bb:fc:a5:ff:88:7c:
7f:00:92:00:ae:a6:71:d7:8c:60:a8:13:07:5e:05:9e:f4:bb:
ac:c4:43:d5:fd:88:61:8e:9b:85:43:95:c5:70:17:ac:41:e2:
81:56:53:4c:35:42:ed:33:01:5a:ce:be:ac:4e:bf:2a:05:a7:
9c:72:9c:43:b0:c5:61:f8:a9:1d:ca:9f:62:99:8a:d8:84:61:
9e:23:66:00:b9:17:c5:25:cb:34:16:56:dd:ce:f9:98:88:67:
60:e8:46:71:de:5e:87:74:d9:6e:65:89:35:ef:ae:21:50:dc:
f0:54:d1:53:0b:a3:6f:b6:3e:4d:e7:13:7a:5e:aa:83:01:6d:
d8:47:22:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSo9XdHxbeegBYz+zubzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZGQwZjA2NmEzZTI0ZjFhNjYzMTEyYTFmMjhlOWQ4M2Iy
ZWNkNzMwHhcNMjYwOTI0MTIwMTEzWhcNMjYwOTI1MTIwMTEzWjAzMTEwLwYDVQQD
EyhlYzRjOGU4NDc4NTZmNTg2ZDkxMjk2Y2MxNTY5OTZiZWI2MzgyYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ/BVMuqDEmU2cHccj+D0p8R6tYn
UqL4Tme8kupvqQEtxW+mfNww3YW4zSakpA0tgAW0sKIlmPgHPnCJ1GJzGBAtGKp1
tkZPLTretYyYS5S581wt6Sgp+ZcVd+1Sr29HLTh2lsXlGLgcgk/Vhe7XDD8ei7Sj
XUSFSQOPWjhJEAEbDbI/QyV5bJVDXi2+BTLm2PAX7gUn1fL6g0lW1nkn7epEQ2AG
EJTFn7xJr6mAddxR1imlkYibvA9NAfnIojmYgK5neY/pXtw0FrqPZBa8owCLKWpl
j3kM6PjRzgOEhQYyu69uEgUbPZ+G3Pl4PV0XcIjo4GmIamsM0GG1FJ8hIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxMjoR4VvWG2RKWzBVplr62OCroMB8GA1UdIwQY
MBaAFNjdDwZqPiTxpmMRKh8o6dg7Ls1zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNGNkYzctNDAwMS00ZDA5LTliMjgt
ZGU0YWYyMjllM2JhLzEvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNGNkYzctNDAwMS00ZDA5LTliMjgtZGU0YWYyMjllM2Jh
LzEvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOVlYvFo
dDmwxYiR9zrE83i+HUop2fXqSxpOmWesh7wwCwhfluamoUhO3fDC3AmHh3RyXMBU
odn1q9gsp1BW7c6cFWMUhe/ybNV6neBbsNFOodue5n2LNmM77BvfGYEq89VdzK/S
ac5m2iYwYiSg63t1DO2YYBD0u/yl/4h8fwCSAK6mcdeMYKgTB14FnvS7rMRD1f2I
YY6bhUOVxXAXrEHigVZTTDVC7TMBWs6+rE6/KgWnnHKcQ7DFYfipHcqfYpmK2IRh
niNmALkXxSXLNBZW3c75mIhnYOhGcd5eh3TZbmWJNe+uIVDc8FTRUwujb7Y+TecT
el6qgwFt2Ecitw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:40 2026 by rpki-client