Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.mft
File: 2MPLRqsVea0TiqRII1KugVlCoqw.mft (raw, json)
Hash identifier: xrkAMPDcHZiDO7cnHiVrx1Vs9B1Qne1AQU/fWfCLTjk=
Subject key identifier: B9:83:6D:8A:98:7C:89:56:A0:88:B7:FF:FF:26:B4:01:3A:DB:76:05
Authority key identifier: D8:C3:CB:46:AB:15:79:AD:13:8A:A4:48:23:52:AE:81:59:42:A2:AC
Certificate issuer: /CN=d8c3cb46ab1579ad138aa4482352ae815942a2ac
Certificate serial: 01A0D2DE2752EC439D76500BDD6CAFB3CB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.mft
Manifest number: 48
Signing time: Thu 24 Sep 2026 10:02:49 +0000
Manifest this update: Thu 24 Sep 2026 10:02:49 +0000
Manifest next update: Fri 25 Sep 2026 10:02:49 +0000
Files and hashes: 1: 2MPLRqsVea0TiqRII1KugVlCoqw.crl (hash: V9/mo9yosJRsYePsHUImzjbvKGidaoxP3LQpbWAmscM=)
2: NLlGo6DdKA7C93no6keKJ94004Y.roa (hash: QZsXb9jdR1jBKP/8aiveWpCxsd14GJ26upiQwwUi+tk=)
3: U_CQLm976eOWkhFjxR7xxSiKhqs.roa (hash: yaWzmBRZMeVvtjOmgIwk9zSeuI6xjE+/RYygOa36EjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:27:52:ec:43:9d:76:50:0b:dd:6c:af:b3:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c3cb46ab1579ad138aa4482352ae815942a2ac
Validity
Not Before: Sep 24 10:02:49 2026 GMT
Not After : Sep 25 10:02:49 2026 GMT
Subject: CN=b9836d8a987c8956a088b7ffff26b4013adb7605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:fa:7a:48:3d:c6:f6:c3:2c:71:44:bf:6d:
c3:2e:f1:2c:4c:61:52:46:65:2d:91:ba:71:f1:bb:
ed:6b:d8:80:52:c5:76:cd:00:b5:a1:0c:63:92:e4:
fc:0e:62:01:25:55:6b:8f:f9:5e:c8:4b:aa:59:87:
51:35:d6:b7:29:eb:13:15:06:07:00:77:b8:8a:67:
f8:1e:98:89:2e:8b:a0:54:08:df:32:c3:28:49:19:
06:2f:97:00:e2:5f:ee:67:0c:8d:c0:51:1b:dc:ff:
50:d8:fb:8a:7b:c4:c3:76:bb:5d:06:f9:33:81:a1:
5f:25:02:e6:dd:34:e2:f8:b2:79:06:61:ad:c9:0d:
65:bb:a0:de:7d:7b:7f:28:cb:c7:15:4f:b4:ae:a0:
d3:79:fa:00:a5:2f:83:a1:cc:aa:82:d5:27:bf:7c:
cc:40:f8:c2:39:1e:ee:fd:e3:bc:bc:08:66:0f:c9:
b1:08:3b:02:a3:ec:90:0d:e9:1b:d7:02:30:1a:1e:
17:15:53:ff:18:ca:9d:9e:6b:1f:4d:f1:96:5e:8d:
b5:b9:1d:29:33:d9:d1:91:cf:e1:ba:28:f4:14:b1:
0e:20:54:e8:00:11:a5:63:9e:ba:83:02:6e:93:ec:
7d:26:eb:42:94:8d:bd:4b:4c:96:88:a4:b6:24:5f:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:6D:8A:98:7C:89:56:A0:88:B7:FF:FF:26:B4:01:3A:DB:76:05
X509v3 Authority Key Identifier:
keyid:D8:C3:CB:46:AB:15:79:AD:13:8A:A4:48:23:52:AE:81:59:42:A2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:d5:e4:8a:df:c3:6f:26:4c:da:a1:48:f6:30:b0:ea:49:
56:95:a9:62:36:d6:1b:27:d6:39:da:2e:92:bd:c3:ca:6e:70:
f4:88:b8:5c:d8:28:82:b6:9e:2a:cb:22:a3:d7:57:4c:e8:d3:
3d:79:8f:9c:21:9e:e7:cd:be:e3:e8:50:1d:77:9c:99:fe:b4:
00:aa:8f:94:6f:f8:4c:4d:85:b0:1e:94:b1:2a:c6:77:7b:da:
09:93:df:e4:b8:6a:c7:a8:0f:02:63:bb:b7:8d:4b:a4:2c:52:
50:05:07:ed:48:0a:1f:8f:b9:e6:4c:3d:07:0f:eb:50:cc:2d:
d7:97:6c:2d:85:70:1d:b6:92:f1:8a:ff:5e:47:8b:34:6b:fb:
f8:6e:0e:eb:b1:5b:a1:97:93:9f:7f:58:3d:44:33:39:fe:1f:
97:11:15:53:de:ef:fd:36:53:a4:cb:e7:44:27:da:b1:85:51:
f1:24:a8:96:1e:d6:c3:42:7b:3d:21:96:c9:0a:02:25:40:9d:
3b:b2:69:26:e0:71:12:c5:46:f5:92:9a:07:8e:ef:44:99:15:
47:e1:0c:b3:35:5b:50:f3:7b:6d:1a:eb:8f:2c:b1:fe:b8:37:
73:f1:00:8c:2b:cc:f4:0c:e5:04:e8:63:cd:29:ec:8d:8c:14:
e3:91:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:56 2026 by rpki-client