Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: It1sLVBmfOwe0B8T3xGKlXbW2EawhZ2XQwgbWe+3nNg=
Subject key identifier: EC:6C:71:54:67:18:71:49:2C:2E:70:C3:1D:B3:01:D8:9C:C4:43:A4
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 01A0CE91DCC04342D1B2AB74556D10E0954A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 14:01:00 +0000
Manifest this update: Wed 23 Sep 2026 14:01:00 +0000
Manifest next update: Thu 24 Sep 2026 14:01:00 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: oPsGYo1fQWcJm9NYoPXFlLK74pc48o67U285dcuuIs4=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:dc:c0:43:42:d1:b2:ab:74:55:6d:10:e0:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Sep 23 14:01:00 2026 GMT
Not After : Sep 24 14:01:00 2026 GMT
Subject: CN=ec6c7154671871492c2e70c31db301d89cc443a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:65:7c:b7:05:b6:b0:fc:69:06:0d:28:d8:
e9:d2:29:e7:54:77:79:4c:87:3a:62:ce:2f:fd:b4:
6a:1e:57:20:06:62:a2:95:6b:2b:a0:bf:f4:e7:42:
ed:c6:89:b8:bb:79:96:65:93:d3:a9:1f:df:bc:7b:
23:b5:42:7d:f1:fd:d8:41:da:e5:af:9d:27:92:95:
b1:ce:f6:15:a7:7f:78:67:a9:95:c7:31:ef:da:49:
40:0d:bd:a7:67:16:9a:68:b4:68:8a:7a:f9:93:ee:
a2:df:c0:0f:9a:0e:80:ea:0d:64:d4:ae:f2:3b:a0:
a7:4d:d6:73:73:9f:d8:6a:a0:c9:48:35:b0:02:df:
01:28:08:bd:6c:99:c7:00:84:d1:61:93:52:e7:ca:
b4:1f:fe:f6:95:8d:b0:00:e4:8c:8a:ca:41:73:b3:
d3:d3:8c:98:29:d0:38:fc:d5:c6:64:1c:4d:f3:94:
98:08:4e:37:20:bd:13:4c:46:38:a6:10:47:a5:54:
53:0c:e2:06:f2:a2:a7:4a:11:03:01:95:54:1c:48:
25:9b:25:a7:d4:3e:11:2b:2f:a9:e8:8d:87:fc:92:
d4:fb:aa:d2:c8:06:be:5a:86:23:dc:18:ce:6f:e0:
2d:fc:0d:1e:f3:ca:5f:ca:bc:37:a2:de:17:6c:ff:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:71:54:67:18:71:49:2C:2E:70:C3:1D:B3:01:D8:9C:C4:43:A4
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f5:a6:f2:9a:a9:dc:67:d0:7e:89:e4:6c:29:af:e5:a4:03:
4b:58:93:50:86:30:d0:0d:bf:f4:b3:f9:32:76:d5:8d:d0:7b:
30:1a:92:58:11:19:68:47:6e:e3:2e:83:61:45:87:e7:4c:2a:
dd:a7:17:77:de:f5:ac:6c:8c:0e:dc:f6:98:e8:42:ff:70:3b:
2b:b7:ad:68:21:cc:c7:dc:e7:2e:aa:4e:30:85:ee:36:f8:3b:
b2:e6:c6:b9:fe:ed:a8:9d:c6:76:fb:32:15:30:ef:18:74:d5:
07:0a:18:02:ab:19:56:66:77:51:0c:2c:1c:05:6f:a2:c4:56:
7c:70:e8:8c:79:1c:88:b7:ba:e0:7f:6a:e8:4d:c1:f4:17:86:
df:b3:78:7e:15:fd:6b:d6:d1:3b:aa:e5:79:2b:de:43:2e:7d:
91:27:e2:0e:5b:9e:56:30:57:41:54:98:e5:1f:50:53:d0:d7:
fd:1c:2a:20:e3:73:74:67:37:e6:45:e4:93:de:d3:26:c3:0a:
2d:ed:18:a9:f7:68:cf:1d:26:9d:40:b8:bf:1d:04:dc:14:6a:
fd:7d:02:65:49:44:7a:b8:02:e4:5f:eb:6c:8f:ac:6e:29:79:
e6:bd:95:da:de:e3:d6:ec:60:a5:fc:10:80:36:1b:7c:84:e5:
51:a2:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:41:32 2026 by rpki-client