Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: PMFd2MITqZZEJXCuDuSvKaywx6p8ACXxjPasvq5Rhjw=
Subject key identifier: 75:76:0C:FA:A5:8A:A8:73:15:DB:91:2A:49:26:1E:46:5B:1E:3E:D3
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 01A0CFA3F7B59B60EF7E9341503515E834D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 07BD
Signing time: Wed 23 Sep 2026 19:00:24 +0000
Manifest this update: Wed 23 Sep 2026 19:00:24 +0000
Manifest next update: Thu 24 Sep 2026 19:00:24 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: 9Yd74AdmoOuDijGGVKmtRY+VAa4kd26CBtQe9aH9NYw=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:f7:b5:9b:60:ef:7e:93:41:50:35:15:e8:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Sep 23 19:00:24 2026 GMT
Not After : Sep 24 19:00:24 2026 GMT
Subject: CN=75760cfaa58aa87315db912a49261e465b1e3ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:0d:7e:f6:cb:7d:30:05:0b:96:29:f1:2e:
9b:64:76:6e:93:0f:91:31:91:a1:78:ea:ca:ec:d0:
ef:10:7f:ad:02:c2:3f:92:1e:d9:a4:ba:77:d7:42:
77:08:e9:30:89:fa:1a:b1:3d:32:cf:b7:5e:f0:07:
57:7e:72:5d:f0:0e:48:bf:cc:db:be:28:2f:8f:fe:
51:31:1a:cd:11:06:01:0e:82:bc:ed:90:3f:54:47:
d0:d1:f1:a1:4d:f1:e4:4a:e9:39:ed:bb:d5:b0:73:
fb:db:61:a3:02:87:81:56:4f:ce:cd:76:7b:2c:28:
97:f0:fc:ea:14:29:bf:63:4f:ca:8c:50:df:d2:a3:
e3:99:5f:e0:41:dd:72:93:a2:d2:d0:55:b8:f9:a6:
51:db:99:54:fa:f2:20:f4:30:ba:80:94:e8:d5:9a:
e4:43:73:e6:8b:55:63:52:7e:f9:f9:81:a0:dc:47:
a8:0d:76:ce:61:70:62:33:e9:04:f9:93:56:8d:ba:
18:cf:bd:9a:8a:75:f2:a3:7f:0c:bd:e9:85:db:b1:
50:2b:9b:cf:c4:36:11:16:b9:47:9a:4d:b5:27:0d:
dd:15:0e:8b:75:cc:bd:e2:11:5a:ea:d9:5e:8b:50:
ab:89:48:f7:f4:ed:a5:03:d2:4d:e0:ff:ca:b6:cb:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:0C:FA:A5:8A:A8:73:15:DB:91:2A:49:26:1E:46:5B:1E:3E:D3
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:af:05:08:5c:4d:95:e2:c1:b8:5d:09:aa:06:1e:98:e7:28:
4b:dd:8d:e8:5a:15:6b:9d:a6:77:25:71:43:b7:c3:18:4d:c7:
a8:f4:6b:1e:0e:fe:cc:c1:32:91:b8:ab:80:9a:ad:df:30:65:
38:d8:62:47:ab:cb:b9:aa:6c:ec:9b:ae:75:1a:54:0b:cb:48:
43:80:9f:33:b7:da:09:21:cc:17:81:3c:e1:ab:8b:e7:e0:99:
24:ae:82:58:36:08:23:ab:4e:27:cf:53:e9:00:69:0f:29:eb:
fb:5c:2e:20:38:49:21:af:b8:44:49:07:53:72:5f:36:20:00:
f8:3d:a9:23:ac:9c:6b:89:52:90:4f:c0:44:b8:53:57:06:00:
cc:27:74:69:f3:f8:73:2b:1c:f4:cf:fc:00:ea:87:ca:14:2b:
5e:f3:f8:86:2c:bc:a1:bc:95:1d:58:2a:38:99:70:3c:be:f8:
8e:d5:a7:bf:26:cc:a0:8f:f1:23:cd:27:33:f5:33:4f:a4:6e:
7f:ae:06:10:ff:db:93:88:f5:cb:06:39:ab:60:9d:32:c9:6b:
7e:55:3d:8e:05:63:8a:7d:7c:9e:52:57:c6:34:94:74:3b:43:
ee:7a:f9:f4:00:58:c4:70:21:3f:5b:0b:be:84:6c:30:b8:ec:
1b:b4:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:39:07 2026 by rpki-client