Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: 5dR3jxaxOw8yegLyDZ81EJRfAA5wqNk/JGUf0ZmqWIw=
Subject key identifier: 2C:A6:52:DF:86:42:9A:14:68:47:70:78:0F:A2:96:66:29:C3:BA:AF
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01A0CCDA46A855C5F2D8FF6A5B176CAA5953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 091B
Signing time: Wed 23 Sep 2026 06:00:51 +0000
Manifest this update: Wed 23 Sep 2026 06:00:51 +0000
Manifest next update: Thu 24 Sep 2026 06:00:51 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: LbPbPVvQKvZBfimPDW7V7NTRAG5Tmt+7EVwuG8CmG9s=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:46:a8:55:c5:f2:d8:ff:6a:5b:17:6c:aa:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Sep 23 06:00:51 2026 GMT
Not After : Sep 24 06:00:51 2026 GMT
Subject: CN=2ca652df86429a14684770780fa2966629c3baaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:af:d4:74:29:81:84:ac:c5:84:60:d1:b7:
a4:dd:91:41:8f:b4:22:ed:c0:54:cc:52:f0:f9:7d:
b6:7b:78:85:70:bc:f8:7b:6b:47:40:c0:77:04:2b:
de:ed:76:9b:77:45:a9:c8:0f:a8:2f:7f:03:8a:32:
5a:d2:59:a7:60:24:54:89:92:8b:b6:7e:20:e3:0c:
d5:56:bb:8d:ab:ac:ff:70:ad:55:a1:7f:43:41:ff:
7f:8f:cc:2e:62:3a:ac:73:7d:27:4c:7d:02:98:9b:
e9:05:a1:31:5b:7f:6a:ae:23:aa:65:12:8d:14:31:
27:ec:4c:7c:c0:b4:8d:84:b3:16:45:ad:3b:f6:dc:
fc:71:33:83:b7:b4:64:8e:aa:a3:89:87:d9:cd:4d:
15:43:ea:c9:73:e6:80:e2:c8:a7:08:e0:89:5f:5a:
ec:d5:1c:08:e6:4a:51:f8:66:72:f6:34:94:05:21:
4f:d3:a2:07:22:c0:4c:5e:06:8b:97:94:7e:b7:a4:
7a:17:4d:bd:98:e5:20:d1:e7:e6:6c:2a:53:11:b2:
2b:06:21:56:be:b2:79:03:db:0e:f9:11:b3:17:48:
21:02:c2:44:57:45:98:c4:38:61:4f:31:62:44:a6:
00:c7:7c:d2:05:2c:d8:53:c2:ef:e7:d9:13:1a:a2:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:52:DF:86:42:9A:14:68:47:70:78:0F:A2:96:66:29:C3:BA:AF
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bc:ec:61:aa:8b:a3:45:7d:04:11:03:d6:fc:ee:ce:7c:c4:
0a:6e:1a:17:3d:63:19:13:d7:d3:36:76:0f:71:c7:e8:e7:7d:
b2:b2:cc:dd:da:f7:61:f4:d0:77:2c:08:d8:61:5b:09:d0:12:
e1:d6:b5:52:5b:a6:8b:86:b1:37:36:35:33:af:8e:0d:4f:65:
84:90:1e:dc:5c:41:99:74:f6:d9:54:dc:3a:55:39:6e:ed:43:
f3:2c:e7:9c:c6:24:5a:56:e6:fe:b7:6e:f7:b3:a2:4d:39:46:
41:b9:6f:f4:f3:fa:51:13:e0:a7:37:e0:86:fd:24:64:46:fb:
6a:47:dd:f7:f9:c1:49:73:8d:2f:21:ff:dd:7a:93:2e:6c:11:
c4:8b:96:10:c1:ea:68:68:e3:f9:9a:90:a8:14:31:07:fd:49:
8b:22:36:53:6c:7a:0e:de:e9:90:6a:36:6e:6e:cf:e0:f4:e1:
46:f7:e9:52:0a:27:c2:14:b8:f0:4d:ee:11:de:68:89:86:31:
87:2e:da:b0:aa:71:75:86:7e:d3:da:00:e1:60:9f:d4:40:6e:
e0:a4:78:bc:22:9b:29:4e:13:2f:18:42:65:9d:fd:45:17:55:
91:f4:df:ba:12:08:c4:42:03:ce:c4:c6:03:cb:b1:26:0a:02:
23:d6:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:03:34 2026 by rpki-client