Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: qK65w8uWsHo1K3JGCWERX/1D4fKCyBgdnhNYUsWOfHU=
Subject key identifier: 4F:87:97:4C:79:11:6E:55:CA:99:5B:FF:58:1B:15:30:BA:DA:07:42
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01A11A199A65281A7D8837A996209895D24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 06:00:47 +0000
Manifest this update: Thu 08 Oct 2026 06:00:47 +0000
Manifest next update: Fri 09 Oct 2026 06:00:47 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: /G8HWjR3KE54YeD/En2SzK2v9UiT3md0P3QsO1GjC+Y=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:9a:65:28:1a:7d:88:37:a9:96:20:98:95:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Oct 8 06:00:47 2026 GMT
Not After : Oct 9 06:00:47 2026 GMT
Subject: CN=4f87974c79116e55ca995bff581b1530bada0742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:cb:9f:73:b0:d5:ee:45:2c:02:3e:10:e5:
7c:59:f4:55:04:37:7a:7d:99:a6:b9:cb:92:7a:69:
cc:21:66:ce:18:c1:b6:fa:95:6b:19:c0:89:15:4f:
de:da:33:1b:28:e7:09:2b:1e:3a:83:8a:cf:3f:f5:
92:da:f7:1b:36:32:3b:fc:42:76:4d:ed:a7:04:99:
e7:c2:cc:df:8d:8c:5b:64:cd:ec:16:c9:0d:47:b5:
02:eb:91:6c:e3:fd:c0:e5:c5:38:34:e3:9a:3b:2a:
7d:fd:1c:e2:71:43:09:15:c0:59:e3:b2:67:54:32:
a1:92:75:35:21:50:d9:58:7f:2e:1a:96:28:6b:69:
b2:e8:76:8a:03:f6:f2:ac:cd:9b:07:bf:d9:45:ec:
fd:e2:79:db:7e:d2:a0:5a:ad:d9:48:e1:81:f3:03:
c5:0a:5d:23:01:fb:2c:a7:a7:9f:d5:19:3a:a6:a4:
5c:ae:8c:6b:99:02:10:af:65:90:e6:72:58:59:cd:
fe:63:c9:c2:0c:14:f0:54:35:fe:72:af:a4:91:8e:
87:24:59:93:55:28:dd:26:b0:d3:5a:b0:59:21:9b:
b0:8f:41:db:1e:d1:f0:46:a6:d2:a5:f0:7f:b2:7c:
82:4d:14:16:85:65:d0:bc:da:5a:52:59:40:e9:87:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:97:4C:79:11:6E:55:CA:99:5B:FF:58:1B:15:30:BA:DA:07:42
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:49:61:39:58:05:e1:03:91:c7:2a:6d:19:96:0d:46:5d:0c:
f0:a4:f3:e7:31:5e:f5:1c:84:bb:29:09:d1:6b:b6:1e:73:36:
a5:a5:24:65:9c:cf:93:d2:31:a2:70:b5:21:39:cc:f5:08:6b:
ad:72:f1:05:d5:4f:55:bc:c3:9d:85:2e:06:95:2a:b9:70:03:
aa:01:8a:ea:07:0c:53:de:e7:b3:5c:ba:ef:96:bd:eb:59:aa:
3a:27:d4:63:de:13:4c:e5:a3:9a:ff:6f:fc:64:a3:6b:b4:10:
fd:f9:63:a7:f3:1f:41:31:5c:ee:63:6c:c5:13:97:a5:f2:30:
39:a4:cf:97:43:bc:ed:ba:25:f5:f4:93:fa:d2:59:15:86:02:
d5:ec:73:7a:b2:b5:d7:4d:c3:1c:cc:f6:c8:a1:92:0f:a3:10:
cb:65:35:a4:41:51:ee:64:f5:69:76:29:d6:ce:5b:0e:8c:3b:
f3:26:1c:88:7e:5e:0a:60:fd:05:b3:73:19:0d:7b:2f:e4:de:
08:fd:59:9a:39:12:64:f9:e2:37:1a:a0:f1:a9:9a:49:c4:77:
ba:e6:0b:03:16:4f:ca:3e:99:4d:06:a6:d5:80:7e:48:a5:89:
a7:56:03:71:92:51:be:2d:91:b0:65:13:1f:99:85:d5:9e:b7:
7f:2a:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:29 2026 by rpki-client