Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: +Fuww4Xtj6WGPu5vqzRtjQgN20RkkggzFPmW2jkTR5Q=
Subject key identifier: 3C:96:5D:D3:C7:3F:92:A4:2B:8E:87:AE:5E:48:C0:4A:91:72:23:33
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 01A0CB231213F9BAA4C4FF8B9FD4624DD323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 22:01:08 +0000
Manifest this update: Tue 22 Sep 2026 22:01:08 +0000
Manifest next update: Wed 23 Sep 2026 22:01:08 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: 6sma0Y2n3Cj7MpURunPx65NOIhRlnzqnhKYgY99XraY=)
2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:12:13:f9:ba:a4:c4:ff:8b:9f:d4:62:4d:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Sep 22 22:01:08 2026 GMT
Not After : Sep 23 22:01:08 2026 GMT
Subject: CN=3c965dd3c73f92a42b8e87ae5e48c04a91722333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:e2:b7:28:2e:e8:ff:10:be:a6:6f:69:e4:
e1:55:a0:1f:06:8b:ca:0e:a8:2d:48:4f:de:59:69:
48:d4:94:28:24:ff:b6:20:12:d9:ae:85:8f:92:5a:
95:ee:92:b8:f6:de:49:b0:b9:4a:18:3d:fc:77:cb:
5a:3a:fe:c7:db:af:40:89:51:0e:9e:e6:31:72:f0:
e5:e4:55:98:8a:de:4f:85:0a:f0:21:61:ab:d4:09:
2d:8f:50:c0:0e:79:54:af:06:d2:13:c8:e1:fc:7d:
e0:c3:76:73:e6:79:83:67:a0:88:b9:3d:d1:94:d3:
29:64:3b:1b:9b:6f:e1:81:ee:22:d1:fd:36:a7:cc:
6d:66:d6:08:55:ce:c7:ea:f4:a4:15:69:d8:6b:9b:
ee:97:e5:ba:51:22:9c:78:83:6a:9e:65:42:96:27:
e2:bf:e5:5b:9f:b5:72:88:29:45:bd:bc:06:2c:0a:
fd:90:f8:bb:5d:33:41:a6:06:3d:11:ad:ca:4b:ad:
b6:ba:4e:0f:30:77:7f:56:c8:5b:77:76:d7:01:fd:
8c:27:f5:2b:af:de:32:64:15:aa:60:aa:17:48:2d:
ee:f5:8e:62:fe:36:68:15:84:2e:20:52:f9:bf:09:
47:92:15:a1:e1:ac:1b:37:cb:48:16:be:ae:a5:b0:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:5D:D3:C7:3F:92:A4:2B:8E:87:AE:5E:48:C0:4A:91:72:23:33
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:33:ba:7b:2e:b6:6c:93:36:c4:77:e2:e9:55:70:14:bd:57:
c4:90:09:9b:33:32:05:51:b2:07:2a:1a:de:53:e0:44:82:28:
e5:f8:b2:f3:95:d2:e0:49:e2:db:5e:b1:50:91:4d:d8:b7:a7:
d7:50:66:14:26:7d:fe:7d:80:44:f5:40:8b:f2:49:e8:6c:68:
28:ba:4b:1e:e8:55:4e:74:eb:4d:89:df:1c:12:3c:60:c2:47:
a3:d9:1e:83:48:90:e5:ff:dc:8b:eb:33:6b:af:ce:88:73:e8:
42:89:66:03:3d:1e:b2:f1:28:5e:7c:8e:89:6c:98:c3:58:d8:
41:15:7b:d8:9c:c9:4b:28:90:f2:bc:02:07:15:6b:68:fc:92:
07:e3:6a:c5:1c:e2:e3:56:03:cb:c0:ef:a1:38:ec:7e:8c:59:
df:09:e3:d0:db:79:74:4a:1a:c1:73:30:c5:91:1e:8f:17:2f:
e1:9f:3f:81:09:9a:2a:ca:b2:5f:a9:c8:2e:e1:61:f8:81:61:
4b:32:9f:6c:8a:8b:95:89:37:66:54:ce:e9:32:a6:97:0f:1c:
7f:04:17:f9:b1:0e:08:88:44:90:bb:69:f8:89:2d:69:3c:f5:
0f:32:a0:f3:9f:d4:65:bb:83:1b:33:d9:5a:ad:3d:79:e0:c5:
09:9c:db:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:27:50 2026 by rpki-client