Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
File: 2IS_vbMjVA5ckMAJ495sA9a_zNM.mft (raw, json)
Hash identifier: eBWZjanXnksz2c7WXmpraWMgJCuye5wrBIU1+Yv98xc=
Subject key identifier: FB:0B:AB:55:F3:21:48:55:D2:31:BB:F2:D4:98:19:4B:8D:D3:7E:E3
Authority key identifier: D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3
Certificate issuer: /CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
Certificate serial: 01A0D07FEB5035BD74BBDF6C55506595BF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
Manifest number: 018A
Signing time: Wed 23 Sep 2026 23:00:39 +0000
Manifest this update: Wed 23 Sep 2026 23:00:39 +0000
Manifest next update: Thu 24 Sep 2026 23:00:39 +0000
Files and hashes: 1: 2IS_vbMjVA5ckMAJ495sA9a_zNM.crl (hash: OfGRt4huNGTeb7ETJcEx14Tw2z6nff9KQLAKflSi/rs=)
2: 4Qc-yn1UzAkfErKkrOplIM1TXXc.roa (hash: c+WtB+oW1ahwXZOb81bw0sgcuUJbYdw60b7M9e0cWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:eb:50:35:bd:74:bb:df:6c:55:50:65:95:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
Validity
Not Before: Sep 23 23:00:39 2026 GMT
Not After : Sep 24 23:00:39 2026 GMT
Subject: CN=fb0bab55f3214855d231bbf2d498194b8dd37ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:52:99:1d:bb:fb:ff:32:05:81:92:40:6e:
ef:b4:e6:c9:71:4a:a0:00:e4:ac:79:ad:f0:d7:f9:
45:f2:e2:8b:05:72:e1:ec:cd:f1:a4:d4:d4:48:63:
34:a5:44:9a:08:3b:41:20:cf:b9:10:02:2e:46:4c:
d9:55:34:41:c5:59:1e:c9:dd:05:24:1c:48:6c:dc:
51:0e:8c:23:50:f3:2b:48:ae:a0:3c:60:99:a9:ff:
55:7e:a8:83:48:26:de:cd:b1:10:c6:a9:b1:0a:77:
10:58:55:94:5f:ea:85:ef:4f:0b:11:6d:1d:42:86:
04:72:98:7d:af:7d:f5:50:f2:8e:58:d5:51:b5:a5:
5a:64:fe:1f:3b:6f:51:95:eb:50:91:e3:04:47:e1:
1a:78:3a:19:75:05:be:49:c9:26:dd:64:9f:d0:ed:
47:7a:72:f8:8b:dc:bd:36:12:c2:33:79:16:14:b3:
c2:80:9b:c7:f4:67:db:27:49:01:37:13:ff:3d:3c:
d0:e9:42:69:37:66:e6:cb:da:b1:39:f1:24:f6:b3:
34:8d:27:16:0a:db:9d:58:9c:81:d6:b0:44:4c:2a:
31:65:82:30:48:bd:0b:54:20:db:9e:3f:f0:b9:a6:
28:15:6f:40:0e:fb:23:a1:f5:bc:d6:53:9b:e1:54:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:AB:55:F3:21:48:55:D2:31:BB:F2:D4:98:19:4B:8D:D3:7E:E3
X509v3 Authority Key Identifier:
keyid:D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d0:8b:3f:5c:f4:39:6e:20:93:cd:07:b7:8b:6f:b5:0f:26:
a4:4e:1e:5e:fd:4c:93:33:1c:5b:e8:af:60:16:40:96:99:35:
25:42:e8:4b:8b:bf:17:6f:26:43:e0:89:52:f8:56:40:05:33:
ef:e1:d8:6e:12:2b:a7:20:fb:cd:b0:41:c5:81:0f:36:1e:e2:
24:58:c7:ab:81:5b:fb:94:2c:da:75:33:7f:20:26:4f:5e:e2:
f5:9f:3e:d8:6a:7d:2e:f4:4e:f3:ed:8c:bd:66:98:1d:19:b0:
60:8e:d9:70:28:4e:75:4f:69:00:0f:bd:66:4b:59:74:30:21:
38:8f:81:65:01:42:07:b5:57:7a:0b:21:30:25:98:56:14:5f:
58:49:ec:ed:b3:c5:08:f1:ea:3b:66:5f:89:25:7d:31:68:43:
03:b8:78:33:b6:5e:16:29:73:18:c6:1d:91:b8:5b:1f:6f:c4:
46:47:9e:0f:32:cd:b7:3a:57:3c:b1:3d:0f:bf:63:18:f9:ce:
f1:93:2e:27:06:2b:f7:0c:fe:41:f6:d2:63:f2:56:51:bc:c8:
2f:47:4a:2e:04:4c:b5:05:7f:c4:93:cc:58:92:a7:1d:bc:08:
15:6a:43:c4:b3:71:86:1f:94:ad:06:66:6d:8c:e5:21:df:5e:
00:cb:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:56 2026 by rpki-client