Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
File: 2fGfBczyIhOYRpwL6N3ATOFOE1o.mft (raw, json)
Hash identifier: QCPPJgSUiVJ49FQKmJZga/JSl93wB1AHQ9jYMZq46GQ=
Subject key identifier: 8C:3A:3E:8A:88:D2:1A:ED:86:92:AF:C4:D0:F6:DA:0A:DC:4C:C9:0C
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 01A0D8DEC54281A5EABA5D953172A7196254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
Manifest number: 163E
Signing time: Fri 25 Sep 2026 14:01:13 +0000
Manifest this update: Fri 25 Sep 2026 14:01:13 +0000
Manifest next update: Sat 26 Sep 2026 14:01:13 +0000
Files and hashes: 1: 2fGfBczyIhOYRpwL6N3ATOFOE1o.crl (hash: b/RxHGAreHrm8spFq6K67YMs1gRAC/WX8WewvzIxF+8=)
2: D5r66qCGlpT6UM1S2JZDnwLEq_g.roa (hash: AsE96zhoWPvQynJOqug2jdhORzzqgKtcCYsyjnQ29Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:c5:42:81:a5:ea:ba:5d:95:31:72:a7:19:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Sep 25 14:01:13 2026 GMT
Not After : Sep 26 14:01:13 2026 GMT
Subject: CN=8c3a3e8a88d21aed8692afc4d0f6da0adc4cc90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:63:a3:90:0f:fd:d8:42:ca:dc:15:75:85:
1e:9d:b0:87:d6:16:10:47:63:9e:f3:fb:88:66:f0:
7e:fa:92:4a:66:99:58:f0:f9:68:34:c3:34:81:9b:
80:2d:58:4f:44:8b:1b:44:8b:2e:a7:27:ac:3a:8e:
a7:a1:f2:d0:8a:19:c5:17:16:a5:69:38:7c:15:bd:
09:c6:e7:23:fd:26:1d:63:f6:03:3e:b8:22:19:b6:
01:08:4f:f0:db:72:00:de:a8:2a:67:00:ae:af:92:
9b:0d:ae:9a:d5:c7:2a:7f:cb:f9:9e:ad:4f:ef:79:
05:25:00:63:21:df:f0:ea:65:c0:1b:f9:c0:a8:9d:
38:5e:2a:22:70:12:a9:08:49:ce:cb:8a:d0:f1:cd:
f8:f3:04:ea:6d:7c:8e:43:f3:25:b9:08:2a:e9:ba:
63:ca:5a:29:d1:8c:f3:b8:cb:32:f8:d5:7c:34:9b:
95:cc:97:7b:50:92:75:de:b3:a9:d0:65:a1:68:35:
a9:be:3d:ce:5f:18:1c:27:06:fc:fd:26:c9:cf:30:
fa:71:e0:83:c4:c9:9e:f0:04:01:d0:7e:e2:2c:2c:
85:df:c2:14:a9:f3:23:5a:fd:2a:35:00:3f:f3:41:
ef:31:09:a4:f5:08:36:c9:71:23:fd:62:99:4a:78:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:3E:8A:88:D2:1A:ED:86:92:AF:C4:D0:F6:DA:0A:DC:4C:C9:0C
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:bf:ea:a1:c6:8c:76:0e:c4:8e:76:cf:0b:c3:3c:b8:94:
54:09:06:aa:78:77:b3:94:e0:62:93:8e:eb:5a:7e:b5:ff:52:
46:89:87:f7:10:bd:64:37:53:b1:5a:43:0f:bc:57:9e:64:6a:
a9:59:21:f8:76:c2:fd:d7:4f:d9:48:b7:22:9a:2b:a0:5f:c7:
90:29:85:d7:fa:0d:eb:30:0b:02:e0:a2:d4:57:eb:ae:b6:70:
3f:b7:d6:be:fc:1b:a4:87:2d:3e:fb:2c:aa:03:ac:ae:4c:77:
cf:85:d0:14:54:77:6b:57:da:5e:66:42:f0:ed:99:e4:23:af:
10:61:64:55:22:26:27:28:3c:18:8a:79:e7:01:9d:27:6d:b2:
f4:59:7b:2a:04:17:7e:52:2f:75:e7:4d:67:32:cf:5b:48:84:
ed:d5:55:14:70:92:a7:47:0c:0d:ba:c0:dc:18:a3:4c:c3:33:
28:58:39:69:2d:34:1a:96:7b:d0:92:bc:0e:ed:3e:cd:c0:55:
e4:07:87:a3:c5:36:c4:2a:47:b5:1a:82:a8:cc:34:0c:ee:5e:
66:a6:43:2b:05:e4:0a:87:8f:55:45:62:97:a6:5a:83:bf:1c:
9d:5b:5a:ce:25:3e:0f:a2:45:ad:93:44:45:8b:2f:51:0c:1e:
72:8b:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:58:55 2026 by rpki-client