Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 4PYX345KWKrIiIxrnwKJUxHo4EVYozxud5V10/Rt1S0=
Subject key identifier: 8B:78:C2:E9:CC:71:6D:A4:E5:84:76:1F:7F:27:96:3D:E7:44:31:95
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01A0CA46AE0485D0EE976BD8D53A053E1251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 18:00:24 +0000
Manifest this update: Tue 22 Sep 2026 18:00:24 +0000
Manifest next update: Wed 23 Sep 2026 18:00:24 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: cVJNZOxgUYNpptAlBJJ7FGPvhBvZ8x7tw8CsmfGcuRY=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:ae:04:85:d0:ee:97:6b:d8:d5:3a:05:3e:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Sep 22 18:00:24 2026 GMT
Not After : Sep 23 18:00:24 2026 GMT
Subject: CN=8b78c2e9cc716da4e584761f7f27963de7443195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:b8:15:70:19:63:ef:b2:c7:4d:4e:d1:8f:
9f:a0:93:15:e9:4e:46:9c:be:36:15:ab:d8:cb:0a:
2b:a2:9c:5a:24:f4:c6:f3:e7:4a:54:5e:83:cb:65:
f0:38:e4:f9:21:2b:89:ca:30:69:81:0c:d3:50:da:
89:53:98:25:9b:6f:51:2c:75:75:d1:86:cb:3f:c2:
2a:46:9b:f6:a7:d7:d5:3f:45:99:12:2a:6b:61:90:
9b:39:68:9d:b8:88:c7:c3:92:ea:48:86:7d:9d:86:
a3:32:86:6f:03:6f:cb:27:2b:c5:d9:b4:19:47:69:
f8:78:7c:d0:81:d0:7b:f3:05:18:03:f7:21:0e:d9:
d4:97:d3:e6:60:5a:fd:10:04:86:f8:9c:05:0d:10:
58:e0:6f:4f:6b:54:13:ca:37:b2:a8:ca:a3:4e:80:
64:75:06:74:8d:ff:bb:ff:9d:24:a5:17:d3:33:d2:
a2:22:e0:ed:19:5f:6d:ff:ff:91:0f:73:c0:31:fb:
71:8b:74:30:9f:18:ab:89:89:cf:1e:24:a4:87:84:
5d:a8:a8:18:63:3c:87:16:c2:42:38:22:d2:4f:a7:
8b:36:71:49:d1:59:f1:72:36:6d:dc:8b:9a:07:dd:
df:7c:b3:18:e7:2c:6a:8b:0e:c4:bf:f8:c1:a5:e7:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:C2:E9:CC:71:6D:A4:E5:84:76:1F:7F:27:96:3D:E7:44:31:95
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:da:6a:7d:d9:b1:a8:85:7c:8b:08:00:06:0f:8a:40:55:06:
09:6e:d6:d6:c1:35:56:48:cd:e3:b2:94:68:c2:cd:99:f8:79:
3d:fe:57:84:9e:b5:87:ac:b7:c3:a0:e0:b7:03:f5:ac:8f:97:
6d:9a:37:4b:3f:82:55:09:6c:5b:18:cc:4c:b1:2b:34:dd:50:
aa:19:0d:c1:d4:1f:02:84:fe:69:b6:e6:05:fd:b6:6f:1f:82:
0a:1e:0e:92:9e:d5:69:55:7f:27:14:9f:91:11:42:72:f6:37:
67:3e:6d:88:89:9b:9e:76:45:af:6b:2a:38:a4:2a:b7:19:fe:
68:9c:da:5e:b8:ee:fa:ce:ec:ec:df:bc:f8:6e:06:31:f1:67:
40:07:01:bf:7e:93:77:21:e0:9b:6a:67:5b:6c:de:73:38:f7:
7d:d4:d0:ab:b5:55:2d:b2:20:90:5c:70:a8:1e:43:cb:6d:a3:
3f:82:cc:81:f7:b4:cd:15:d0:e7:d2:83:36:b1:24:72:c1:d5:
0f:67:63:6e:78:15:9b:26:40:e0:39:b6:eb:f2:05:14:c6:d1:
90:00:70:b0:24:ae:8b:ea:78:0b:5e:4a:32:b0:cc:b7:fd:64:
ee:b9:96:98:e7:d5:a6:a7:ef:cc:e3:61:ba:5c:2d:74:01:3a:
28:df:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:56:41 2026 by rpki-client