Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: S6g/iryKUDpPosZ56SFWMkLSYgfxnkCcZh7h8TxT9Tw=
Subject key identifier: 0B:9C:76:5B:84:01:48:44:97:88:41:83:B9:9C:F8:93:20:1E:A2:45
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01A0CFDB4C5E6232F00D0A9EFD21C01C0447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 20:00:50 +0000
Manifest this update: Wed 23 Sep 2026 20:00:50 +0000
Manifest next update: Thu 24 Sep 2026 20:00:50 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 2EqPkHNJC8K5lVlJtfyY5cvlisah6SoyZ3JYreicHVY=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:4c:5e:62:32:f0:0d:0a:9e:fd:21:c0:1c:04:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Sep 23 20:00:50 2026 GMT
Not After : Sep 24 20:00:50 2026 GMT
Subject: CN=0b9c765b8401484497884183b99cf893201ea245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:1d:1f:15:93:dc:1c:c2:cc:e5:82:8e:ab:
3b:c6:d7:39:9f:2f:2a:98:80:8b:cc:d1:55:02:49:
96:c9:59:a1:a3:9e:39:03:de:44:dc:0d:7f:ad:db:
f9:6d:19:2e:4e:aa:be:4b:41:74:16:11:c1:6f:40:
16:c6:28:37:b4:a1:5e:a9:5e:be:a9:fe:4f:08:f3:
8a:df:83:0e:f5:c6:25:f1:98:8d:d6:b3:5d:3f:cf:
40:39:ee:78:83:53:b9:b5:d3:88:9e:24:46:8e:db:
12:d9:fe:b7:5f:e5:53:b5:b5:18:b9:85:2f:db:41:
95:1d:50:17:5c:da:33:c1:5a:b6:9f:c0:5d:74:db:
4a:62:63:e2:e6:5b:8b:aa:32:e1:3a:2a:7a:ce:11:
5e:77:96:3f:34:cd:5d:4a:31:13:15:7d:37:a9:b7:
93:c9:93:9c:f8:ab:3d:94:9c:5a:b4:00:06:ce:c9:
84:c2:1c:f8:5b:6d:95:d4:3a:ff:d9:e0:eb:42:39:
08:0a:09:d0:8a:33:b5:95:80:c4:6b:d7:63:b2:58:
de:eb:c3:7f:60:4d:cc:2f:da:9c:e7:45:a1:bb:75:
8e:77:7e:02:dc:19:6b:28:60:0f:43:e3:6f:f4:b8:
17:47:80:d1:53:eb:86:ce:a8:e7:8e:f5:fb:25:8d:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:76:5B:84:01:48:44:97:88:41:83:B9:9C:F8:93:20:1E:A2:45
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:2e:64:16:44:c8:2a:9a:29:e8:f8:6d:12:5a:e6:bc:35:
22:9d:08:f3:5f:64:eb:8d:ef:f6:47:6d:fe:ef:f3:aa:53:52:
8c:f9:77:be:fc:be:cd:45:9d:ed:a9:3a:7d:f3:a8:d5:ca:7b:
c8:f9:d5:87:05:28:52:7e:92:90:6d:5f:a1:09:72:88:6a:cf:
32:87:39:96:4d:6e:2a:e4:7d:52:d0:91:1d:6a:fb:9e:47:85:
c5:ef:2a:e0:86:6a:b8:99:33:8b:80:08:d8:b2:d0:04:6b:02:
b3:ab:2f:6e:32:60:e1:b3:7e:72:ec:6a:b1:42:0e:ad:96:cc:
88:b0:d9:43:1d:e5:e3:61:81:38:e5:f1:ff:e0:1f:39:08:e1:
cf:1f:b5:4e:9b:1d:e2:a8:9a:d8:95:b0:21:1b:16:06:dd:c4:
06:bd:bf:4e:ad:67:65:de:90:cf:0c:cf:19:9a:13:d9:2f:38:
06:b0:01:fa:43:f4:64:03:b4:6e:46:54:75:3b:18:e0:bd:ec:
d9:65:89:e4:71:97:22:1c:a6:dd:a1:5e:db:3f:b4:20:6d:f6:
82:1b:4b:2b:22:46:38:2c:6b:06:4c:98:47:11:fd:0b:00:45:
dd:8c:80:1d:d0:65:db:9e:65:84:4f:11:e0:6c:b6:69:56:4b:
ed:d6:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:11 2026 by rpki-client