Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: B89a1hX7IxSsBQ6ofyKpi02MhWMn2C6HDLsyJgEty8g=
Subject key identifier: 80:24:24:3D:10:C9:B5:95:D6:02:0B:D7:8E:E2:80:98:9F:48:C8:D4
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01A0CD7E6EC9211B8A45D7BD02FC875DDD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 09:00:10 +0000
Manifest this update: Wed 23 Sep 2026 09:00:10 +0000
Manifest next update: Thu 24 Sep 2026 09:00:10 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: QSYJPgSDitW3wstrUR1zPRyy1cN2XH1azo2iHyuAYuA=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:6e:c9:21:1b:8a:45:d7:bd:02:fc:87:5d:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Sep 23 09:00:10 2026 GMT
Not After : Sep 24 09:00:10 2026 GMT
Subject: CN=8024243d10c9b595d6020bd78ee280989f48c8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:36:e1:c0:23:40:3b:d0:7c:66:2c:0c:fe:
c4:5c:1a:c5:fd:ad:ec:81:13:6d:76:ec:b6:23:ee:
16:59:5c:84:53:b9:4d:85:a0:cd:cd:7d:dc:97:5b:
88:d0:af:4f:16:3b:1f:a2:e7:40:a7:29:50:53:6a:
0e:ab:4a:0e:2b:c7:2f:eb:9e:02:24:47:bd:70:ed:
00:9a:76:07:19:fa:6d:88:da:4b:09:1e:48:18:8c:
e9:5f:14:52:56:85:a3:16:22:3d:b4:c3:48:80:a8:
c8:29:45:f3:08:02:c7:9b:7f:f2:40:b4:b3:26:a1:
c0:0b:13:d7:32:f6:4d:96:6b:05:85:bf:65:42:50:
41:60:9c:ac:d9:cf:0c:d0:5c:0e:b7:b7:65:74:86:
fc:2b:d8:37:11:50:1f:f9:a9:e5:76:fb:6b:83:95:
19:e9:fc:ec:a4:96:c1:3a:2a:5a:3e:85:5e:6a:90:
97:69:38:d7:46:53:98:e0:38:df:cb:b7:42:33:af:
ca:32:36:98:96:e3:7d:a1:ae:c7:04:20:31:39:ee:
84:be:a9:25:93:f7:b8:5c:10:1f:74:a9:59:37:84:
91:b2:3a:12:6d:a2:7c:8d:e5:d0:aa:38:86:5d:4a:
b3:b1:90:c6:7e:2f:89:7e:1d:5b:ab:cc:cf:b9:73:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:24:3D:10:C9:B5:95:D6:02:0B:D7:8E:E2:80:98:9F:48:C8:D4
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e1:85:e4:6a:c6:66:6c:9f:45:73:a4:46:4c:2c:d6:bb:b2:
a6:c2:e7:35:2b:ac:74:34:ca:9b:98:d5:ab:c6:54:fa:c6:06:
93:5e:e8:65:2b:64:88:28:ea:f0:9c:0d:8c:2d:7b:b3:b6:c5:
8a:23:5c:3a:32:d2:70:b4:98:70:54:4b:7d:17:75:68:6e:a3:
20:8f:dc:e7:81:10:dc:5f:ca:19:89:97:61:88:e7:e0:4d:4d:
c1:fe:9f:30:f4:66:4a:7e:ca:10:a6:bf:8d:f3:cd:09:cc:9e:
89:ee:c9:d3:e2:a1:59:fb:5d:c7:80:62:6e:48:8c:8e:37:d4:
f6:c3:81:09:5e:bd:a8:16:77:3d:81:52:73:5f:d9:ab:97:fc:
bb:76:4a:d2:1f:1d:9a:c2:28:f8:e1:cd:35:19:1d:06:8f:b7:
f5:a8:4e:fb:23:e4:cb:fe:a3:bf:df:2a:4d:56:8b:f5:a4:cf:
ea:d3:e4:a9:90:b0:84:0a:df:5c:54:ab:9d:12:47:75:57:1f:
6a:85:ae:48:00:7e:9f:f0:ed:6f:15:b9:8b:7a:8f:8d:35:16:
7f:6e:b2:0a:f1:3f:c2:b5:8e:83:16:6b:8c:7b:21:db:08:e3:
b9:19:d0:fd:19:08:66:d3:a7:e5:d6:06:45:2c:e8:36:4c:17:
36:7e:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:35:34 2026 by rpki-client