Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
File: 2DmRJrYFJVLagB0O5HosfDLnzbw.mft (raw, json)
Hash identifier: yB1KrwkEyO5Ic7+94bqELCDfti6K9XTWApFSFXi1xF8=
Subject key identifier: A1:B1:9F:8D:65:BC:F0:13:54:B5:CA:9D:89:FB:B9:E9:6B:49:2C:7F
Authority key identifier: D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
Certificate issuer: /CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Certificate serial: 01A0D8A8D5534F185BF935065EB593FF0C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
Manifest number: 02BD
Signing time: Fri 25 Sep 2026 13:02:18 +0000
Manifest this update: Fri 25 Sep 2026 13:02:18 +0000
Manifest next update: Sat 26 Sep 2026 13:02:18 +0000
Files and hashes: 1: 0zE3UfEHUEziOBAn5MV-3cMOfAI.roa (hash: C69mVu54AG+KnNmbROi8pSxGo/q1kcnt7UFnI0LaEzc=)
2: 2DmRJrYFJVLagB0O5HosfDLnzbw.crl (hash: kcPNd8ge2YQ4AwXWpFOfdqa9Vg22zKpQAglxv1rGc9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:d5:53:4f:18:5b:f9:35:06:5e:b5:93:ff:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Validity
Not Before: Sep 25 13:02:18 2026 GMT
Not After : Sep 26 13:02:18 2026 GMT
Subject: CN=a1b19f8d65bcf01354b5ca9d89fbb9e96b492c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:d6:fe:44:d2:9f:5a:d2:f0:ff:ce:28:66:
f9:d6:dc:df:78:f2:3e:a3:ab:8d:ed:f9:b6:cc:51:
b5:ea:b6:a7:f7:d4:7f:0e:60:4a:9f:77:d0:21:4c:
05:d8:d0:63:0a:fc:de:82:a7:be:29:4a:c5:81:14:
1f:e8:8a:71:c8:f2:61:8b:d7:af:51:24:78:5b:fa:
23:d3:77:37:58:44:4e:14:a9:ff:aa:8c:a8:f0:69:
77:a4:e1:55:02:8f:90:4a:da:7e:27:b5:22:4a:6d:
65:bc:35:e5:dd:ea:07:96:3b:37:ba:c0:c8:7c:c9:
22:64:d2:e9:0b:82:89:05:72:ea:9b:64:5c:2a:10:
69:e4:56:8c:4e:c1:27:83:1d:40:ab:c3:a1:7f:56:
75:f0:84:e7:ad:79:d0:5e:03:b1:3e:e3:11:08:10:
9d:5b:c9:d4:dd:dd:ca:db:ac:ab:04:b8:05:19:b9:
2f:e6:b7:f0:51:10:c3:6a:7c:bb:aa:b9:91:26:f5:
aa:8a:8f:c4:c0:6a:f1:c6:6e:87:0a:17:8d:89:70:
a3:c3:72:81:fd:6f:4b:b9:39:86:a8:96:b0:e9:36:
15:dc:1f:27:6c:8b:9b:6f:a4:b0:ef:73:4d:f8:5e:
b3:e0:bb:1e:7e:21:77:93:de:48:a5:e1:5f:20:5b:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:9F:8D:65:BC:F0:13:54:B5:CA:9D:89:FB:B9:E9:6B:49:2C:7F
X509v3 Authority Key Identifier:
keyid:D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:bb:e7:ad:7d:ee:7e:10:4a:ee:70:1a:fd:64:8b:12:e2:
83:eb:79:b0:14:7f:c4:d1:08:d8:d6:6a:3f:5e:cf:3c:28:aa:
be:c1:e4:c4:b7:59:c7:fc:5a:b6:95:d4:1a:84:f4:57:75:24:
b6:ae:7b:1d:f3:be:ee:79:44:ea:5c:40:12:b9:ee:fe:d6:c3:
3a:ff:3e:11:02:3d:5a:24:d6:48:f7:ba:96:38:82:9d:26:db:
6e:6e:18:d6:eb:67:3d:5e:cf:8d:bf:f4:05:81:a7:11:0a:e0:
13:8b:c6:bf:f5:ec:1f:d7:54:64:fb:ad:78:24:44:04:b8:9b:
b1:05:ae:26:bb:70:46:58:74:ed:7e:50:89:36:4f:52:a2:34:
e4:de:b4:a3:6e:1e:0f:ff:46:76:51:49:8f:fe:2f:b8:ab:fe:
04:eb:0d:2c:15:d6:8f:4b:62:68:62:44:16:63:e6:65:5d:56:
ed:cc:59:ab:ba:24:5e:73:9f:27:d3:26:b5:4b:63:68:cb:43:
e4:1d:6e:56:d7:31:46:69:3a:1e:0a:4f:8e:3c:bf:58:fd:a5:
2e:5c:3b:90:56:43:57:a1:80:fd:82:75:79:5f:bf:6f:ba:0a:
e2:a9:7f:e8:a2:50:fe:e8:01:63:10:21:6a:6a:84:4b:13:24:
f7:cf:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:19:49 2026 by rpki-client