Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: 9p03z4MoWMX7tZHK49/pEFqBNDE8+YchkN4h8Ma/WPk=
Subject key identifier: DC:2E:B1:EE:00:2C:E7:0C:9B:C0:2D:BD:17:9A:0A:B7:35:21:D6:57
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01A0CAB52ADAB17267B46DA4955B6BAC7D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1A7E
Signing time: Tue 22 Sep 2026 20:01:05 +0000
Manifest this update: Tue 22 Sep 2026 20:01:05 +0000
Manifest next update: Wed 23 Sep 2026 20:01:05 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 2kYB0lyNbnTCCYGSdamVMSU7XwYvAi/ldlKj18s8HfY=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:2a:da:b1:72:67:b4:6d:a4:95:5b:6b:ac:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Sep 22 20:01:05 2026 GMT
Not After : Sep 23 20:01:05 2026 GMT
Subject: CN=dc2eb1ee002ce70c9bc02dbd179a0ab73521d657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:e1:13:24:fe:91:6c:cc:d2:bc:56:0d:ae:
c3:41:cc:fb:43:07:fd:91:84:9a:c3:1b:e6:0d:4e:
dc:c3:8d:3a:85:12:c3:4a:89:84:1b:0d:65:e2:ee:
46:62:42:5f:e1:de:04:09:5f:64:be:7c:11:ad:eb:
72:70:ab:a3:ff:2c:cd:40:96:25:76:48:3b:94:15:
7e:c9:fb:1c:b4:db:f2:a4:5b:d7:7b:e2:df:7a:a8:
e9:83:e8:c2:40:9f:9d:d0:b7:6c:6c:f7:17:2f:3f:
f9:30:66:df:e1:29:60:e8:87:a5:3b:39:ec:6e:09:
69:1c:46:07:64:19:9c:24:5e:bb:25:78:fd:3f:7e:
9a:41:a2:37:3a:aa:3f:dc:c7:ab:bf:6a:e5:aa:01:
a8:98:09:8c:c0:71:ca:80:d5:67:2e:dd:73:b0:62:
7a:6e:e6:e1:71:f5:24:cd:72:43:e1:33:6e:1f:96:
77:cf:8f:a7:db:17:6c:77:6b:b8:4f:40:11:59:77:
ae:c3:5c:62:81:29:f7:4e:79:1c:f2:c9:bc:b3:70:
a1:15:b4:26:0f:22:76:6a:e4:5b:7f:a0:a4:f8:d9:
ae:c7:67:61:4e:ca:d2:94:8b:c6:b0:d4:0d:13:fa:
17:35:63:3e:32:03:85:65:35:2a:0c:80:c3:59:bd:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:B1:EE:00:2C:E7:0C:9B:C0:2D:BD:17:9A:0A:B7:35:21:D6:57
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:36:5b:37:ad:eb:ff:c7:1d:26:56:6d:24:5e:9a:f3:d6:
05:5b:a6:b5:32:51:32:2b:b9:44:a1:f6:1c:30:d4:7a:f4:aa:
3f:0e:87:0f:13:00:25:75:47:07:2c:c7:f3:88:65:59:35:41:
e0:39:f5:ef:cb:04:6c:af:4c:93:50:79:48:fb:91:d0:69:d9:
53:66:0c:65:b9:18:6a:9f:91:40:e5:55:dd:6d:8f:5f:7c:04:
63:63:27:08:66:cf:03:42:ed:6d:7b:59:83:8d:87:d8:f0:c6:
97:30:6b:a8:08:0f:ca:5b:16:19:ca:0c:b9:c8:79:2e:2c:54:
1d:c2:5e:88:72:b5:08:d9:f9:c8:2e:44:a7:46:96:0e:38:fd:
b4:de:48:eb:85:0c:24:f7:20:97:9b:e1:e3:23:7e:fd:9a:e1:
d8:48:a7:f5:b2:01:9f:aa:9a:a4:91:4d:80:2f:14:a2:98:0b:
eb:96:1b:9c:e0:01:45:19:47:c4:84:df:c3:fc:cb:1d:c3:73:
87:0f:f7:c9:fc:5c:83:3d:f0:7e:4b:37:e5:5d:b0:49:9e:1a:
ce:41:f5:8f:38:94:f6:bb:ab:05:22:0f:49:99:c5:d6:1b:99:
df:53:ef:e5:eb:ad:16:17:26:1b:a2:b6:72:b8:27:bd:cb:04:
3d:00:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:53 2026 by rpki-client