Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
File: 2PDDRgpyhimVO1uoZcPQDBdsWYA.mft (raw, json)
Hash identifier: +uJiCB2edAVSLG1aWMRF4iozVHFiXJVRRYxFJChC/p0=
Subject key identifier: 30:C4:02:82:CE:37:3B:D1:82:B3:82:6D:99:DA:EB:EF:B0:FC:98:35
Authority key identifier: D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
Certificate issuer: /CN=d8f0c3460a728629953b5ba865c3d00c176c5980
Certificate serial: 01A0CB22B096FA7BBC6F721C765FBB7B36D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 22:00:43 +0000
Manifest this update: Tue 22 Sep 2026 22:00:43 +0000
Manifest next update: Wed 23 Sep 2026 22:00:43 +0000
Files and hashes: 1: 2PDDRgpyhimVO1uoZcPQDBdsWYA.crl (hash: C9QB5uCjOB9J0GQoN+Vya/ybp5NC0lxufRGM//ZvJQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:b0:96:fa:7b:bc:6f:72:1c:76:5f:bb:7b:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f0c3460a728629953b5ba865c3d00c176c5980
Validity
Not Before: Sep 22 22:00:43 2026 GMT
Not After : Sep 23 22:00:43 2026 GMT
Subject: CN=30c40282ce373bd182b3826d99daebefb0fc9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:c0:e7:af:5b:8c:7c:0c:dd:cf:44:e6:7d:
db:d2:9e:0e:60:15:d9:21:38:b3:0e:6d:58:a3:01:
2c:27:21:ef:4a:12:22:4d:40:06:0d:d3:da:cb:6d:
e4:50:c7:b9:63:a2:67:b9:1f:66:f0:0c:3d:24:c5:
9e:5b:30:a8:fe:93:e9:ed:a5:06:4d:0f:7b:99:c0:
46:f7:cd:e0:12:8f:bd:98:39:6f:6c:84:af:90:5a:
90:fd:8e:2e:2f:7b:b2:e3:98:ed:e4:26:d1:2c:78:
29:2e:2b:6b:2b:b6:e0:5c:14:e9:1c:1c:f8:70:9f:
a9:df:fa:ce:58:c8:dc:93:e1:8c:ac:8a:4b:e2:ff:
39:16:2d:e2:53:66:fc:b9:4c:c2:40:40:58:fd:16:
56:43:bf:b7:b5:7f:57:de:b2:50:a1:73:c8:62:f8:
34:35:93:24:d5:5a:65:c6:09:f7:08:51:a4:ed:22:
88:64:e2:df:88:97:02:03:d0:24:f4:50:d2:5b:3d:
7d:4f:b1:a0:47:1c:06:9c:84:96:9d:53:ab:cf:c2:
6a:de:62:3c:47:11:91:0d:87:c9:3d:e8:e1:4d:0c:
e8:4f:e7:a6:b5:09:dd:51:a7:05:90:00:7d:31:d4:
c1:d6:9a:fb:c2:c2:48:f3:29:10:eb:46:de:85:56:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:02:82:CE:37:3B:D1:82:B3:82:6D:99:DA:EB:EF:B0:FC:98:35
X509v3 Authority Key Identifier:
keyid:D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:28:ee:23:34:da:65:f8:1f:65:95:e9:c1:d0:ac:22:50:
8e:7b:a9:cd:3e:d5:18:c1:e1:32:91:e7:0e:ba:be:bb:92:c6:
a0:8b:d1:9d:75:11:8d:98:2d:0a:01:41:34:27:cb:ad:54:6b:
8f:e9:f5:22:ce:e6:fd:95:91:80:11:94:83:70:62:6c:a1:a1:
dc:c0:a3:9a:e3:68:e1:8d:bd:9c:a4:dc:40:b2:ea:d2:b2:1b:
a3:d0:63:06:44:af:c8:3f:34:86:66:35:27:40:b4:2c:df:e0:
81:7b:39:b7:ad:1c:1c:ac:07:52:bc:3a:f0:56:a8:be:0e:08:
25:45:a0:1e:03:1a:ab:55:1f:5a:0e:6f:8b:78:0e:66:23:1d:
8a:82:ab:6b:e9:a9:56:f3:88:3f:70:34:12:cd:cd:02:ab:8c:
f9:a0:aa:e3:5e:45:f0:ed:54:7a:26:59:47:4b:d3:27:cb:b2:
05:11:f5:f6:16:44:d7:13:1c:e0:0c:f0:f0:49:fd:cf:46:33:
ec:44:05:1d:f8:c7:8c:ee:d4:34:a2:08:f5:e1:5c:c9:02:25:
98:c4:9d:a0:d3:17:b3:36:82:bb:5d:e9:46:9b:dc:b3:e1:6e:
07:7c:ee:59:ce:2f:cc:a5:7c:b8:b0:c0:5f:22:58:d8:6a:2b:
cc:f3:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:57:09 2026 by rpki-client