Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
File: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft (raw, json)
Hash identifier: FmPAWhf9nsxqO+1a8WoWf+yiv2IPDv0ZG0IAZWPBzMY=
Subject key identifier: 83:CC:86:1A:1B:2C:54:C3:B2:05:0F:EE:59:14:C0:88:37:1F:38:45
Authority key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Certificate issuer: /CN=db11520db30e58560013baee6106ca245f194a4a
Certificate serial: 01A0D3EF2A45D5BDE2FAF38DA0872776EE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:01 +0000
Manifest this update: Thu 24 Sep 2026 15:01:01 +0000
Manifest next update: Fri 25 Sep 2026 15:01:01 +0000
Files and hashes: 1: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl (hash: QXZsrciORPteHSFadLER62XdENZ90wk/TQuir9TjQs8=)
2: dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa (hash: n7M2DLVhupTXknxIXP5S/bJ1i2MjgUBbOoeKbEgGiQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:2a:45:d5:bd:e2:fa:f3:8d:a0:87:27:76:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db11520db30e58560013baee6106ca245f194a4a
Validity
Not Before: Sep 24 15:01:01 2026 GMT
Not After : Sep 25 15:01:01 2026 GMT
Subject: CN=83cc861a1b2c54c3b2050fee5914c088371f3845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:9a:d5:2a:10:d9:0b:1c:53:7a:dd:85:0a:
1e:cf:25:db:0e:33:20:d8:91:d6:af:fb:1f:11:68:
17:1f:cb:f1:54:61:f7:cd:09:60:32:df:46:c6:36:
4a:b3:df:0a:76:bb:a0:d7:8a:99:7b:57:d3:86:4a:
37:c8:5c:93:b5:d5:86:8f:0f:f5:26:73:50:cb:46:
e1:5c:11:2c:59:4a:f8:ed:b0:33:39:0d:90:1a:e7:
a9:0f:9a:68:b3:ba:1c:3c:6d:f2:ed:af:16:39:87:
00:c9:9d:89:ee:df:14:ec:38:4a:a9:e9:22:bc:04:
eb:a2:d5:e5:2e:55:ad:38:e4:ee:23:d0:f6:0e:e8:
96:8d:7a:57:49:80:38:42:46:ff:d8:73:ea:74:7a:
48:88:8b:9d:68:a4:46:15:1c:26:81:86:63:c9:a7:
45:5c:25:3b:67:7f:15:93:68:33:0a:74:c6:1e:0c:
30:0f:3f:28:15:ef:06:4b:c9:92:c0:f9:57:05:02:
a2:d9:87:b4:3c:5d:6f:1a:f2:61:6d:22:3d:8c:92:
6a:b8:b1:98:44:8a:af:1c:eb:88:22:60:10:ed:3c:
55:f9:cf:81:d3:81:d2:62:c8:c7:96:5b:ed:ec:98:
af:8b:97:40:6c:27:46:58:fa:b8:c4:8e:30:5e:02:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:86:1A:1B:2C:54:C3:B2:05:0F:EE:59:14:C0:88:37:1F:38:45
X509v3 Authority Key Identifier:
keyid:DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:4e:96:66:e3:5f:5a:aa:34:65:7e:76:8f:cc:c3:8f:82:
b0:d1:a5:f0:23:a1:e0:49:96:e9:8b:57:9f:3a:8c:a7:c0:92:
4a:16:5e:b7:97:60:56:88:16:a5:d9:b1:0d:14:b8:ad:99:71:
45:ab:7f:9b:8b:db:40:4a:8e:6e:3d:42:1c:b5:69:2a:5b:cc:
63:f1:72:25:48:95:bd:7f:3d:8f:93:d1:d2:b3:94:7f:91:fa:
55:55:52:73:4b:43:cc:d7:25:1a:f5:88:1d:d0:50:92:c7:b8:
b6:c5:3b:94:23:94:57:08:ac:b9:b8:2e:8f:8b:67:07:12:a8:
d0:84:02:48:c0:c6:41:39:12:e2:78:32:47:79:a9:ef:c7:0b:
5c:9a:53:05:b5:e4:a8:5d:c0:8a:ea:63:fb:44:ef:8b:c4:a9:
a4:90:6d:c5:e3:cc:05:9a:0e:6c:77:35:9b:c9:c8:93:71:07:
0f:4f:bc:f8:6b:66:ca:73:0c:8e:3a:f5:fe:7a:11:4a:49:34:
7c:d8:ec:79:8a:7d:bb:bd:4e:2a:1c:d3:1d:4c:31:a0:6c:2c:
64:23:cd:c2:2c:94:9e:10:02:61:4f:20:8c:98:27:a7:2a:b2:
82:c1:a4:66:33:7e:c2:47:1c:1d:1d:69:48:03:50:21:aa:49:
08:11:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:46 2026 by rpki-client