Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: 8iQtoaSb/5Ce15iuqBwBqxuPngig4fdb6cXKjfFHN2o=
Subject key identifier: BF:98:9D:60:5A:63:7A:06:2E:44:60:52:3F:4D:49:B0:19:1E:27:F1
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 01A0C9A1DAB3223C093AE2679CFF8A83A978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 0258
Signing time: Tue 22 Sep 2026 15:00:22 +0000
Manifest this update: Tue 22 Sep 2026 15:00:22 +0000
Manifest next update: Wed 23 Sep 2026 15:00:22 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: 7WJdhvGGZQN5Gjg8hdjkh+SOsF6157+ZLisel105ngU=)
2: JC6UtmVBO8VJzjh22JEE90WPBsE.asa (hash: p4seOistkJnJ4dooR7tbwqr+TdgvspSEDiOOuu1HEBs=)
3: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:da:b3:22:3c:09:3a:e2:67:9c:ff:8a:83:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Sep 22 15:00:22 2026 GMT
Not After : Sep 23 15:00:22 2026 GMT
Subject: CN=bf989d605a637a062e4460523f4d49b0191e27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:42:1a:c8:03:ab:75:c9:91:81:a3:8a:c7:
9c:eb:4b:f1:6a:50:5c:aa:29:69:e4:83:d9:be:67:
78:85:e3:ca:b3:8e:6b:16:4a:9e:e0:7f:6f:92:28:
4d:79:c8:a3:18:e1:3d:17:26:80:52:6e:76:f4:1b:
a2:13:48:e2:90:44:13:80:2a:9e:55:8d:87:4c:23:
a3:40:4c:45:1f:84:9a:fb:96:33:05:84:a6:e7:f4:
84:ed:22:e7:43:f6:1e:e6:24:52:1b:aa:99:af:92:
29:c0:44:61:78:ac:df:68:02:2d:26:95:fb:a8:64:
18:7b:8b:94:fb:7b:6a:aa:99:46:da:18:fe:ff:3a:
16:fa:60:7d:df:cc:d8:d6:fc:49:52:8e:7c:7a:2b:
38:71:fd:1c:37:f9:d5:e0:c0:7b:65:fb:3a:3e:e5:
a2:89:b0:d0:8c:cb:b4:3b:e1:34:e7:89:ae:10:4e:
a9:cd:2d:43:4d:fa:f7:2d:bb:e5:e0:9b:cb:f7:a5:
af:e7:af:4b:97:39:87:bb:1a:b1:b6:6a:9f:85:50:
54:09:d7:e3:6d:9f:90:1a:06:53:93:a0:bd:c7:bf:
9c:57:68:3a:bd:92:de:b6:56:42:0b:9f:56:6a:9d:
eb:2a:33:3f:d4:35:51:5f:8b:39:0a:17:7d:47:26:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:9D:60:5A:63:7A:06:2E:44:60:52:3F:4D:49:B0:19:1E:27:F1
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5a:b9:57:cc:bf:11:0e:20:97:54:62:6d:94:83:03:83:b1:
e9:21:c0:17:1f:10:85:36:25:0d:56:d7:4f:47:44:3b:ae:bc:
aa:ac:8c:50:82:57:7a:1e:ab:9d:b6:14:cd:a2:31:1e:17:d0:
7f:70:0a:96:21:2a:28:36:50:01:90:bf:12:5f:ea:b5:1b:ee:
1e:50:8a:79:13:b5:00:d8:c9:45:8d:d2:d7:9a:e6:02:e2:d9:
24:9b:8c:d2:f0:21:d3:d9:04:b2:20:1e:5b:58:74:a7:44:15:
96:8c:bd:0e:53:8e:8a:bf:8a:73:67:29:fa:e1:30:f2:e9:67:
ee:e8:28:76:e6:14:ba:ea:09:e8:70:ef:a6:a1:3a:49:77:aa:
25:8f:ca:72:d5:ca:f5:4a:6c:61:69:18:97:a9:c9:8f:3c:46:
f2:aa:2d:c5:d1:fe:d7:cb:5b:77:eb:49:2e:79:06:77:e7:83:
8d:db:08:09:3c:31:ac:3e:98:b9:db:b7:58:56:a2:ab:a5:30:
a6:d2:44:5e:bd:16:2d:b2:20:4c:3e:15:0d:11:40:88:14:4e:
da:68:f8:38:43:dd:54:cb:f5:02:d4:8f:40:5a:f2:eb:98:69:
41:e5:4e:e3:e6:cd:18:57:27:02:7d:da:1d:4c:e4:f5:47:78:
32:b8:79:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:32:11 2026 by rpki-client