Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: Pqg8z32xZUR5d7Uv5zzYJNKZn51qW29SBaIbShZUHAk=
Subject key identifier: 7D:C6:E4:B9:B9:5A:70:15:86:0E:A3:D3:26:22:1D:D6:B2:30:C2:52
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 01A0CAB500E1ECA6A17EAD9EB12FF56C3517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0B1A
Signing time: Tue 22 Sep 2026 20:00:54 +0000
Manifest this update: Tue 22 Sep 2026 20:00:54 +0000
Manifest next update: Wed 23 Sep 2026 20:00:54 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: azmsBIkC77HhZPM6V+VV3HapiCLVkF95aYIGICy46MQ=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:00:e1:ec:a6:a1:7e:ad:9e:b1:2f:f5:6c:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Sep 22 20:00:54 2026 GMT
Not After : Sep 23 20:00:54 2026 GMT
Subject: CN=7dc6e4b9b95a7015860ea3d326221dd6b230c252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:6d:7c:02:86:75:27:39:ab:b0:14:7d:80:
da:61:c4:b3:1b:a8:a2:c8:36:4a:c4:18:bc:22:cb:
d6:f1:3c:f0:9c:3d:84:e9:6e:92:03:d6:ec:84:7a:
95:fb:2a:26:88:32:1e:7f:04:ee:eb:a9:b9:9c:7c:
ac:bb:a6:43:3a:45:bd:df:46:8b:91:94:33:c1:85:
e2:dc:65:af:ba:e5:fa:39:96:d6:fa:33:26:b6:f6:
20:6b:5a:12:ff:0b:18:61:35:fb:1e:b7:32:f9:97:
72:3e:33:1d:90:02:cd:22:62:1c:b9:ae:fc:3d:bd:
f5:69:21:d6:03:b2:a0:db:7d:25:b1:8d:64:c7:06:
09:c5:11:56:10:c5:ca:1f:78:01:c5:92:49:6d:2d:
3d:ef:69:29:ee:3c:88:88:f9:d9:47:82:a0:63:00:
fb:e8:57:ca:6f:2e:2d:c5:72:26:76:db:ff:d4:d5:
e9:38:17:c9:cb:48:42:e5:db:66:e8:21:4d:2e:84:
6c:99:72:d1:65:3d:b0:cf:c8:a7:8f:8d:72:36:b9:
01:67:35:e1:3e:9e:5e:d7:80:53:a8:68:6c:8c:2f:
f0:ba:ae:90:88:95:fb:ff:93:50:99:6e:5f:58:5b:
3a:c5:5c:8b:37:8f:82:ca:f2:a0:5c:4b:19:82:b3:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:E4:B9:B9:5A:70:15:86:0E:A3:D3:26:22:1D:D6:B2:30:C2:52
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:0c:15:7c:22:55:2d:e4:f7:b1:15:a8:85:56:37:0e:60:
e5:29:c8:ad:db:8d:46:20:4c:0b:14:2e:fd:26:bd:91:82:04:
9f:5e:77:69:56:28:2a:68:ea:0f:1f:7d:a0:d2:06:e8:5b:6f:
56:87:2e:5c:04:6d:cd:83:35:52:28:75:fa:ed:19:05:f8:85:
86:3c:24:82:e9:c3:47:60:3d:12:05:16:b6:82:ab:28:1f:8f:
af:ed:4e:ce:54:72:09:f4:ae:45:a5:ff:8e:b3:8f:78:c8:7b:
cc:27:70:2f:07:f8:80:f0:6b:6c:02:d9:a3:f8:14:ba:63:5c:
59:04:27:3e:cb:db:7a:22:65:d0:0b:b0:a4:65:87:b8:51:2e:
f3:2a:f6:2d:a7:22:8f:4e:1b:6a:f0:e7:10:90:a7:14:55:a8:
38:06:b0:f0:7f:e5:8c:13:f7:76:93:99:4f:d1:30:65:ed:9e:
ca:6b:12:90:07:c1:29:b1:23:a3:d8:7b:9d:46:b1:52:76:65:
0d:08:d9:ae:86:09:25:37:a3:ba:8e:54:11:07:d4:ae:1e:1b:
e5:50:83:60:80:22:bb:9e:6a:b7:e6:5b:68:46:6b:71:52:b8:
10:34:99:00:49:af:46:5a:bd:0d:ca:f4:03:b7:62:74:1b:b1:
e7:d8:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:18:01 2026 by rpki-client