Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: XRu4FXzCRrOODkFZNPyibtgMgNzsWZm6qozWx7QvKSA=
Subject key identifier: 27:D7:90:28:7A:D0:26:A4:FF:2D:6D:A5:B9:9A:04:01:86:10:35:A7
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 01A0CE23DF9685FDACD02515ACC5E3460824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 03DD
Signing time: Wed 23 Sep 2026 12:00:52 +0000
Manifest this update: Wed 23 Sep 2026 12:00:52 +0000
Manifest next update: Thu 24 Sep 2026 12:00:52 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: e4gLaGDDpYxM91bhpQTChACO1J6VpoLRd5nF855Y5S0=)
2: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (hash: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:df:96:85:fd:ac:d0:25:15:ac:c5:e3:46:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Sep 23 12:00:52 2026 GMT
Not After : Sep 24 12:00:52 2026 GMT
Subject: CN=27d790287ad026a4ff2d6da5b99a0401861035a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:88:d4:22:c9:28:8b:bd:5f:0b:3d:49:cd:
90:e7:a4:79:be:64:23:0f:04:a5:af:d4:de:4a:6f:
31:1e:e5:31:e4:6b:81:9c:36:1b:e9:64:e0:e9:f9:
16:46:20:ff:e2:f9:26:2f:f7:76:ff:16:d9:1a:15:
39:bf:a7:58:d0:a8:9e:39:f2:79:f9:71:5b:22:d8:
61:cd:16:2d:f3:a5:09:3b:5f:fd:6a:ed:28:4b:f6:
d4:13:07:58:7f:0c:08:fd:7c:7c:4a:34:30:f6:90:
c8:8c:eb:d2:0c:de:dc:1b:84:bd:6c:f3:34:ff:dd:
bc:a1:13:5a:68:76:8d:7e:4f:b8:19:04:69:c6:c3:
7e:9e:53:87:ab:2d:c1:2c:c3:ac:91:8c:c8:b3:07:
73:eb:2c:45:db:4b:22:c5:09:57:54:00:ae:d8:91:
7c:26:01:35:15:bb:29:a5:90:5f:15:89:78:c2:0d:
bc:c7:36:31:0a:ac:8e:b4:55:96:ba:33:6b:d2:f1:
83:e2:d7:e4:8a:f5:c5:66:7b:eb:78:6c:e4:40:50:
d4:78:48:9e:67:eb:5b:7b:99:2f:db:e3:48:15:44:
9d:02:b4:ae:f9:bf:c6:25:3d:23:c1:b7:80:4c:e2:
50:71:2d:78:4f:bc:21:2b:62:cc:07:79:14:45:22:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:90:28:7A:D0:26:A4:FF:2D:6D:A5:B9:9A:04:01:86:10:35:A7
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ac:3c:40:41:e5:50:73:03:45:1b:ed:bb:d4:1c:ce:b0:f9:
0f:3b:db:c4:94:70:7f:04:ab:70:2a:00:8c:eb:4b:c9:d0:c4:
ae:cb:41:19:10:cb:f8:d8:56:fc:47:3d:7b:5a:a6:89:4c:b2:
8e:00:a2:c0:7f:21:db:29:2d:16:a7:14:47:9d:d6:c1:f0:a2:
bf:6f:63:61:86:7f:3e:3c:48:95:a4:89:1e:d8:08:80:37:5e:
2c:d5:95:be:e0:57:6a:0f:8c:37:4b:f2:50:2f:52:09:f6:dc:
28:27:e4:d5:26:fe:2d:40:fa:1f:44:bc:52:20:69:eb:d6:51:
54:93:ab:27:8a:ef:62:71:80:df:66:4a:34:77:91:4c:d1:7c:
8c:e1:0f:91:a4:9e:1a:c1:86:23:28:83:76:6c:26:b4:41:67:
ae:0b:98:a5:33:4c:98:fd:33:e5:fb:55:48:bf:49:cb:91:ed:
80:52:74:87:2e:66:cf:0c:fd:6b:ff:1c:c2:55:1e:20:b2:c7:
36:27:a0:52:b2:30:7b:df:10:4b:0d:a4:fa:ee:8b:44:8e:6b:
0d:6c:10:ce:60:18:2d:b9:8d:88:b7:6d:27:8b:73:1a:b7:bd:
a3:73:48:c5:80:2a:1d:0a:3b:b5:2b:6f:d5:41:fc:c0:fd:fd:
e3:5e:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:01 2026 by rpki-client