Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: MX0QoDxOLreMNHIRVaLVUs6344A3x+9SX0SpQN8PfDs=
Subject key identifier: FD:64:84:64:8D:16:33:09:17:59:F6:29:65:82:00:B5:63:A9:21:C0
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 01A0CEC82038C67419FF14F5FC2BBF1EE6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 04E6
Signing time: Wed 23 Sep 2026 15:00:16 +0000
Manifest this update: Wed 23 Sep 2026 15:00:16 +0000
Manifest next update: Thu 24 Sep 2026 15:00:16 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: vdfIllsHR63Q8AAakl+eXJoWHbelRWbQ9WrwyKm70I0=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:20:38:c6:74:19:ff:14:f5:fc:2b:bf:1e:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Sep 23 15:00:16 2026 GMT
Not After : Sep 24 15:00:16 2026 GMT
Subject: CN=fd6484648d1633091759f629658200b563a921c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:40:b4:13:34:dc:f5:ad:91:2d:39:6a:57:
26:82:06:09:b6:0a:f3:e5:da:6c:cd:68:9c:fe:37:
a3:78:ba:d9:cd:af:ec:06:4a:e9:4f:27:d7:e0:ff:
9b:9b:fa:58:be:bb:a4:34:8f:8f:60:59:a9:76:8e:
7f:1d:5e:b7:40:58:60:c9:77:e2:75:78:e5:1b:93:
11:61:82:a7:f2:da:9b:df:79:d3:43:fe:58:5c:6d:
d0:37:3e:dc:d0:56:37:2b:fb:cb:69:c9:02:4a:39:
38:16:c8:50:08:b6:cf:0f:b8:2c:b5:0e:3f:6a:94:
dc:c1:47:9e:79:cb:e1:25:c5:ac:10:3f:55:b8:9e:
35:e5:db:5c:5a:77:24:69:3a:d1:ef:ca:e4:ea:ca:
ab:d7:63:11:be:f0:7b:ff:cf:c8:23:e5:04:1d:6e:
56:21:30:c5:f8:fa:79:3b:c5:01:ba:e6:5b:42:c3:
80:1f:45:fd:49:8f:b3:e1:5d:ed:fb:cb:6f:bb:06:
f6:7c:93:4f:cf:7e:79:3e:b8:e1:b8:56:7e:84:cd:
3f:35:3e:32:af:fd:06:a3:17:12:11:f1:21:c7:71:
2e:9f:4a:67:98:03:ad:62:bf:e0:64:82:e9:b0:14:
dc:f2:48:36:8d:f1:d8:a6:5a:49:5f:2e:3f:70:f7:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:84:64:8D:16:33:09:17:59:F6:29:65:82:00:B5:63:A9:21:C0
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:09:d7:c6:0c:20:20:5b:09:d5:28:ba:19:09:be:10:48:
98:6d:24:84:96:af:67:a3:8d:c0:e2:f2:e8:2a:31:3a:38:29:
31:e6:15:2e:a2:0f:8c:99:4f:7e:f3:c7:59:4a:80:6c:ec:7e:
49:a7:5f:c0:90:81:af:c8:e0:00:e4:e5:72:4f:8b:bd:9e:ba:
84:b8:80:4c:66:c2:d9:aa:a6:ff:0f:ca:31:a3:ca:77:d9:39:
f3:9a:53:a7:ba:f6:99:47:53:f1:a9:72:fc:0e:39:19:80:cb:
5a:1b:08:86:fd:b8:3c:da:cd:9b:14:7f:d0:26:c1:eb:cb:38:
b9:56:74:b2:78:f7:69:fe:d4:4d:55:da:a3:15:4a:88:5e:ba:
a8:05:4b:a5:c5:6c:c9:95:af:de:df:bb:d0:24:5a:2c:c3:d0:
67:c1:ea:0d:83:10:58:ef:6b:43:b5:ec:bb:89:a9:1d:74:02:
71:3e:4a:40:5d:1f:fe:08:0f:4f:84:ad:6f:6d:1f:19:8b:c0:
43:f8:27:af:a6:46:c0:31:0d:29:7d:85:10:86:29:12:e2:cc:
ba:3d:30:e3:e6:a7:c9:e5:a1:77:78:39:2a:9b:4f:5f:fe:ab:
55:d4:8b:b9:93:24:47:5f:03:c1:92:51:95:ab:d6:58:10:95:
de:98:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:46 2026 by rpki-client