Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
File: 2f8DY0XtlWcmR-U2aB82Dy36g_8.mft (raw, json)
Hash identifier: LLu/kc34LZPioz3tuP5eXCuq6gJMEIDoQCi7rOQr7NE=
Subject key identifier: D4:DF:1A:12:71:A5:0E:FC:C6:69:83:81:89:0A:56:86:F0:0C:7C:1E
Authority key identifier: D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
Certificate issuer: /CN=d9ff036345ed95672647e536681f360f2dfa83ff
Certificate serial: 01A130344C6EC36D626EE26CCF67753CAA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
Manifest number: 0126
Signing time: Mon 12 Oct 2026 13:01:36 +0000
Manifest this update: Mon 12 Oct 2026 13:01:36 +0000
Manifest next update: Tue 13 Oct 2026 13:01:36 +0000
Files and hashes: 1: 2f8DY0XtlWcmR-U2aB82Dy36g_8.crl (hash: lbeQnTfZAxZGAgwyNnOt9PfOqCTXc2MT0laSB6liMnI=)
2: It5cbOgz2y72fjZZnZVlVg4gUp4.roa (hash: a450t8uMkdYjk8suu61d1NDEpbQ077pWciP2jMuUUw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:34:4c:6e:c3:6d:62:6e:e2:6c:cf:67:75:3c:aa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff036345ed95672647e536681f360f2dfa83ff
Validity
Not Before: Oct 12 13:01:36 2026 GMT
Not After : Oct 13 13:01:36 2026 GMT
Subject: CN=d4df1a1271a50efcc6698381890a5686f00c7c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:4b:38:08:77:02:b7:10:57:58:6c:78:c5:
8a:40:fb:3c:ed:a5:09:d3:e8:37:f6:21:dd:9d:58:
b2:67:75:c4:1d:7c:78:6f:03:84:f5:db:76:c2:be:
c7:30:ee:c9:09:c1:da:49:97:d1:c8:db:38:0e:e1:
78:09:b4:a0:ee:b3:f3:50:c5:03:7d:d8:27:e1:df:
b4:f7:83:f2:7b:1b:00:df:fb:bc:07:21:0f:bf:c4:
f3:9b:ca:a2:18:39:bd:47:77:ec:92:75:cb:36:73:
07:9a:bf:e8:62:b2:09:a5:7a:80:73:cb:f2:48:cb:
7e:a7:af:a8:8c:78:76:d5:8b:87:74:0d:5d:f9:33:
ab:d4:87:ff:ac:14:87:32:6a:07:5b:a3:02:20:80:
7c:13:80:2b:a9:c8:b5:7c:fb:00:11:9c:e9:37:da:
4a:c9:d3:19:9e:e7:60:0e:7e:ca:cb:f5:a5:45:bf:
fb:78:b8:cf:86:e4:ea:03:77:c5:bd:8e:9f:b3:d4:
22:c2:62:02:0c:6a:93:35:d3:e7:15:1d:0c:4f:eb:
a0:42:52:6a:f1:95:d5:b1:aa:68:79:08:dd:25:1b:
71:0f:4f:37:c9:ee:d4:ca:58:46:e6:1c:f7:4c:eb:
79:91:07:32:a8:98:98:e8:7d:03:29:79:0b:a1:d8:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:1A:12:71:A5:0E:FC:C6:69:83:81:89:0A:56:86:F0:0C:7C:1E
X509v3 Authority Key Identifier:
keyid:D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b6:18:7e:73:6c:83:4a:7b:7a:cd:0c:28:68:65:e3:c9:d8:
10:c1:ae:09:f1:c3:06:ed:6a:88:f7:8c:53:4c:5e:7e:b6:a7:
01:90:70:dd:df:9e:33:da:da:77:1f:54:20:50:1f:2b:b8:91:
be:2c:2e:3c:43:7e:93:ad:52:f0:1d:06:21:39:2c:7a:3d:ad:
4e:44:f4:b5:c4:66:2d:42:fc:93:f5:c4:ee:99:ab:b7:aa:c6:
e6:31:4e:f2:34:7a:13:90:aa:1c:a2:b0:96:70:74:e0:f6:3e:
21:91:3b:1a:d1:03:f1:c3:38:f3:f9:f8:4b:46:ae:7a:c0:21:
df:68:c2:de:da:69:48:ed:ba:3c:c4:8e:ec:f5:a9:27:a5:8f:
23:65:02:41:99:df:df:1f:93:f8:29:24:c8:cc:3b:c2:2b:e7:
d6:04:79:58:bd:0d:a8:50:e9:79:34:fa:76:1d:34:51:39:36:
b0:af:d1:f7:67:63:c2:2c:71:5f:2b:b9:78:d3:1b:cc:fb:4f:
54:17:08:49:60:83:fc:ce:06:2f:cc:a8:78:d9:90:86:ce:03:
09:91:16:ab:65:9b:99:b7:6d:7c:3c:35:4d:5e:40:ff:b4:1e:
86:a9:01:38:88:6c:1e:1e:8d:4e:78:15:22:38:13:83:0f:a7:
a8:99:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:29:08 2026 by rpki-client