Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: CLygRNvhdIUCaY/ntiVb44FBJI/SCA5HFFnclpBC5Hg=
Subject key identifier: 82:58:CB:C6:44:4E:E9:28:43:94:5F:44:7E:56:4F:B5:F7:A1:B5:D7
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 01A1DCEFD98242644C2D60F62A517EA2B51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 0F84
Signing time: Sun 15 Nov 2026 02:01:08 +0000
Manifest this update: Sun 15 Nov 2026 02:01:08 +0000
Manifest next update: Mon 16 Nov 2026 02:01:08 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: Xh3GQ1zx4yj/SIjgcMQtbD90af9wSLN5dzBdFlDvJqk=)
2: RHS11XqX5pjtfXZH7I66Gp4Ow3s.roa (hash: 9qk+uC8E6OyhqYxBRe7jo40pbmRAOPPP2eDmccn/Upc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d9:82:42:64:4c:2d:60:f6:2a:51:7e:a2:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Nov 15 02:01:08 2026 GMT
Not After : Nov 16 02:01:08 2026 GMT
Subject: CN=8258cbc6444ee92843945f447e564fb5f7a1b5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:ac:4e:7f:cf:f8:49:48:f6:ef:62:ed:80:
4a:73:51:5c:cf:0d:dc:c1:93:5c:6e:a1:90:77:d5:
30:66:b8:64:fd:da:d0:db:0a:7c:ca:d3:99:a1:38:
a1:28:57:63:c8:64:d6:9c:e4:17:d9:02:1a:4f:0c:
8f:11:91:ea:84:cd:b5:4a:e4:16:cd:1c:f0:87:34:
8b:4a:06:ec:ff:e8:e0:7e:b3:a7:3c:40:d7:23:b5:
d8:23:ed:45:e4:12:13:7b:ab:ee:6c:c4:d7:5e:50:
65:b9:9d:d6:52:cc:93:5f:09:e7:b8:33:66:5e:0a:
d9:f5:be:5e:f1:76:db:27:8a:1f:1f:3a:34:e8:c1:
ba:68:2e:b4:eb:46:6f:b5:b1:68:bc:26:bc:85:12:
c5:27:a3:b2:0c:00:3a:18:a0:f6:45:a2:d2:3b:6d:
b6:3e:93:57:b4:73:59:5c:1d:f0:35:bc:0f:b0:a2:
c9:2d:0e:d0:00:6e:f6:8b:96:19:f6:ab:08:71:e2:
6f:d7:96:43:3a:1a:30:9d:7b:3e:49:e1:8c:c7:56:
0d:a9:da:bc:ec:3d:5f:fe:a2:22:15:df:5e:54:a5:
77:a7:2d:f1:37:07:95:e1:11:eb:26:a0:b4:e9:90:
31:c5:f4:50:05:ac:01:0f:9b:f8:34:65:9b:5c:b8:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:CB:C6:44:4E:E9:28:43:94:5F:44:7E:56:4F:B5:F7:A1:B5:D7
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:fb:46:10:33:c5:25:c4:3a:c7:e3:57:5d:c9:9c:4e:54:
0c:3b:4d:ac:8d:53:81:67:c9:3d:26:1b:c5:bf:d8:b9:e9:4a:
ac:a8:1e:d8:07:d8:46:60:c5:dd:ee:b8:11:bc:49:9b:71:28:
ff:0f:98:1e:77:a0:2f:13:ad:99:b4:a0:33:9a:34:bc:7a:36:
66:3a:56:58:f3:4e:37:76:e6:b3:ab:db:03:1d:48:d7:82:88:
64:1d:6e:03:80:07:82:bc:3d:00:5f:1b:41:69:50:1c:ab:9a:
f7:6c:77:9a:7c:b8:91:75:77:e2:ab:82:95:26:3c:46:a2:cf:
d5:ed:b4:79:51:6e:ff:9f:52:cc:22:79:ef:a1:0e:02:d2:68:
5c:01:52:8c:4c:32:8a:67:9c:93:61:42:45:5d:69:a3:3e:3a:
14:eb:66:3a:2f:34:9e:9a:3e:8c:b8:ec:bb:32:d6:e3:c2:5d:
68:ee:bb:fe:4c:fc:3d:d4:1f:42:e0:2f:b9:59:1e:f6:37:ed:
ed:04:36:02:1b:f5:b7:f6:5a:d0:39:89:b8:11:32:4f:3b:7f:
fa:8e:c7:97:94:1e:82:ca:93:63:e0:4c:e4:1f:d7:d3:a4:a9:
a6:a8:5e:ef:fe:d1:97:e9:4a:9b:6a:c5:2b:42:3a:79:4b:41:
88:7a:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:03:52 2026 by rpki-client