Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: IlX6l8GbEmdOFCKyhLjJLYCa4o8PN3vMhekCVtVKO5k=
Subject key identifier: 52:43:4D:BC:F0:47:30:3F:06:DA:6A:30:7F:FC:8A:ED:E8:C1:71:E5
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01A0D5DDAEBA4B956235A3FC10142C996D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 00:01:10 +0000
Manifest this update: Fri 25 Sep 2026 00:01:10 +0000
Manifest next update: Sat 26 Sep 2026 00:01:10 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: fCVz4JOL6rsIAPsrsc14MMasdumUnGy5BTkzACr3rsI=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:ae:ba:4b:95:62:35:a3:fc:10:14:2c:99:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Sep 25 00:01:10 2026 GMT
Not After : Sep 26 00:01:10 2026 GMT
Subject: CN=52434dbcf047303f06da6a307ffc8aede8c171e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:d7:7a:14:e8:ee:3c:e5:9e:65:da:d3:8b:
52:5d:2f:54:ec:3c:e6:f7:ae:20:31:15:39:b3:d3:
86:b4:98:2f:1d:ef:cc:22:82:3b:94:68:29:f7:0e:
07:e2:d7:bf:cf:1d:37:b5:88:7e:e9:f2:d9:e4:0e:
83:b1:51:c3:96:9b:2e:b7:46:67:0f:5d:ec:d1:35:
ff:61:32:3e:1d:ba:df:a0:41:4e:7a:5b:27:fc:7b:
dc:10:9a:2e:2f:d0:21:fb:e9:fe:09:c7:47:8c:0b:
27:87:2e:77:11:73:64:9b:4d:95:1c:45:d3:2d:64:
dd:47:01:83:0c:45:13:64:f1:e6:5a:d5:49:46:70:
f2:24:29:cc:07:74:38:3f:17:c5:af:db:5f:eb:4d:
c0:97:c4:24:1c:06:d0:9e:1e:fa:72:6d:0d:c0:84:
4f:6f:8e:69:a2:b0:a5:55:e0:0a:9e:e9:b8:26:8a:
be:8c:01:b7:f2:bd:01:23:6d:0c:11:bd:90:f9:e9:
bf:59:0c:4d:c2:c8:a6:50:c3:46:72:5c:9c:ab:93:
e9:f3:bc:d4:76:23:71:87:f1:de:84:21:0b:1f:98:
26:1c:04:38:ae:b6:b6:2e:33:2f:9e:91:25:6c:92:
54:a5:04:c9:fa:e8:b7:41:1a:09:77:f2:c6:3e:28:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:4D:BC:F0:47:30:3F:06:DA:6A:30:7F:FC:8A:ED:E8:C1:71:E5
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a0:6d:d1:72:4b:2c:79:c0:72:ef:75:21:61:76:8f:37:7d:
ac:f4:0b:77:df:8e:86:3b:01:a0:e2:c5:20:43:b1:f8:da:ee:
1b:3e:00:b8:df:78:89:ee:77:26:70:0f:5e:0d:29:4f:5d:04:
be:43:0f:31:be:52:66:9b:9a:85:b2:e8:9f:d8:55:92:4f:a9:
4f:af:d1:de:f5:da:a1:80:d7:50:57:aa:c8:92:71:9c:61:77:
fb:07:91:5b:d0:49:f7:db:e3:b8:07:bf:48:34:d9:f9:6b:ca:
c7:26:46:bc:85:b5:2a:83:21:24:7a:0f:3c:78:70:8e:8a:9b:
df:7b:be:34:12:80:ce:7f:9a:7c:87:24:02:9b:51:c3:79:9a:
00:29:a9:ae:b6:d8:b1:ab:8b:df:24:6f:1a:f7:af:6b:c4:73:
ca:e2:c8:ad:94:23:bf:48:ec:fa:67:33:0f:88:c9:9c:69:7d:
18:d8:dd:39:14:74:3b:b2:a1:92:58:c1:33:d0:90:1d:1b:ed:
a8:b6:d1:57:9d:12:bb:09:3c:9a:0e:6b:22:ee:20:c1:5a:94:
95:5c:b6:75:b5:27:cb:7f:7a:4c:87:af:c9:ef:ed:a9:3b:8c:
c3:2f:ad:bf:2a:44:d2:16:69:7b:01:f0:ea:d1:bf:08:24:9f:
e3:f0:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:00:03 2026 by rpki-client