Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: +TtJ4yj5gLRwDwRzQt0wYo/9AgYcD7jnVSH1p2REE+8=
Subject key identifier: F3:AE:85:77:86:65:56:1B:CB:27:C8:72:88:AD:79:8E:58:CA:91:EF
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 01A0CFA4454F5448AAE582D39E23C316A605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 19:00:44 +0000
Manifest this update: Wed 23 Sep 2026 19:00:44 +0000
Manifest next update: Thu 24 Sep 2026 19:00:44 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: 1Ekax9ltgxJDk9+duM1PsKc4T5hUw/NE0dvsV5b7/Mw=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:45:4f:54:48:aa:e5:82:d3:9e:23:c3:16:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Sep 23 19:00:44 2026 GMT
Not After : Sep 24 19:00:44 2026 GMT
Subject: CN=f3ae85778665561bcb27c87288ad798e58ca91ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:78:a2:45:a9:87:d8:65:69:69:e0:cd:04:
23:18:74:34:d6:fb:c5:64:53:99:26:74:c6:a8:62:
87:06:c5:70:33:c3:1f:12:a3:11:65:b1:b4:96:30:
fa:cc:9c:92:93:67:43:77:cc:c2:87:db:e0:dc:6c:
44:b4:3d:5f:45:b1:eb:bc:ec:51:92:71:0d:cb:bc:
f0:12:69:57:05:12:02:ae:ee:ac:c1:b7:51:56:ec:
51:2b:58:dc:a2:93:b8:b1:ea:34:ca:e7:d0:37:1b:
f6:2d:3a:06:ac:64:9c:38:3f:9e:6c:ea:62:05:12:
3c:29:10:bb:06:74:ba:01:50:7a:90:8f:9c:54:e4:
61:e4:03:c3:c4:d5:8c:9f:b9:ea:73:32:94:dd:47:
9e:c8:e5:7d:db:b5:7b:40:ff:7f:07:95:87:de:d5:
2d:a0:06:c1:e2:3c:d5:ce:2a:d8:a8:21:da:27:27:
23:56:d2:c0:ae:71:4b:88:05:73:f1:be:78:5f:9d:
dc:61:d8:93:53:57:88:96:c7:76:03:87:e1:b2:76:
87:0f:fa:37:97:ba:e0:b2:d2:c2:b2:93:a8:a2:5b:
11:a6:f8:fe:17:ae:31:39:8a:30:5f:b7:03:8d:12:
83:16:dc:24:a3:1f:8a:6d:ba:ad:bf:63:83:e6:34:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:85:77:86:65:56:1B:CB:27:C8:72:88:AD:79:8E:58:CA:91:EF
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:6f:48:eb:df:c1:55:f8:11:37:9b:37:37:26:cf:66:99:
ae:fb:9b:c4:f2:86:77:24:3f:5c:40:b7:18:11:cc:15:66:d7:
6f:4e:07:32:3b:e0:80:56:31:3d:de:c6:1d:31:89:af:e5:19:
b8:b8:61:da:ab:1d:5a:d1:b1:80:0e:33:f0:f1:d7:4d:3d:34:
4c:10:d8:7b:13:b8:c8:d1:e3:8f:a6:4b:19:67:87:8b:5b:fb:
29:0b:90:3c:9d:d7:70:88:e4:ce:c7:b6:4e:8f:99:b7:79:a7:
b4:72:87:9a:14:c1:9e:20:4d:a1:40:d6:78:6f:25:85:1d:35:
be:fd:c7:d0:ff:21:b6:53:04:76:6c:31:2a:b9:b1:e5:39:95:
5f:63:e7:ac:9e:00:20:d4:16:59:53:c0:5a:70:9d:68:93:99:
51:a7:10:ae:2e:fc:11:02:52:81:0a:6c:7a:06:a0:67:4f:7f:
d4:db:26:9b:8a:83:eb:40:93:b3:a0:8f:71:d9:41:ec:96:64:
f5:b1:6f:5e:87:50:2b:da:de:6c:4a:24:a8:e2:34:00:a6:41:
9a:2a:68:82:f8:fb:18:39:bb:84:5a:6b:6c:89:8b:7f:d6:ac:
a4:9f:68:e4:42:93:c9:f0:21:31:83:76:31:d4:59:f4:b3:4c:
d4:4a:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:43 2026 by rpki-client