Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: 35IhKC7lLATQFc2BF8k/B8JiZebAAScWPosSogkri+k=
Subject key identifier: DB:A8:7E:22:7D:E7:28:80:D7:33:C1:FC:B2:69:A7:C7:6C:35:71:71
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 01A1DD5DE875643EF2085D774B62922034D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 04:01:21 +0000
Manifest this update: Sun 15 Nov 2026 04:01:21 +0000
Manifest next update: Mon 16 Nov 2026 04:01:21 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: B5qWwDvNg1x86rbO3IOHC1KKwc91rC5RPiHN5iJiVxE=)
2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:e8:75:64:3e:f2:08:5d:77:4b:62:92:20:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Nov 15 04:01:21 2026 GMT
Not After : Nov 16 04:01:21 2026 GMT
Subject: CN=dba87e227de72880d733c1fcb269a7c76c357171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:38:4c:b5:f5:22:4f:03:2d:a4:ef:63:eb:
ec:21:4c:c3:9c:ac:22:4c:ba:83:b8:2b:13:21:fb:
cf:cd:0b:89:06:20:af:76:f0:22:38:b3:1d:26:88:
d9:db:29:f2:68:b8:1a:c8:59:76:d3:59:84:d5:d6:
8d:e7:cb:b3:af:58:17:ce:54:46:a5:5a:58:f9:22:
42:4f:fd:ae:d2:40:71:36:a4:0f:a5:cc:e8:7b:fb:
00:88:9a:1e:3d:1d:cd:39:1c:ae:13:fa:9f:67:16:
63:4d:2f:b1:4c:33:fd:62:75:12:4f:f8:04:4b:ce:
ee:5d:89:bf:c9:88:c2:27:71:98:c1:25:4c:84:05:
bd:3e:1a:b1:9d:09:9c:2d:3b:ca:92:e6:4f:db:e4:
98:11:6a:fc:f5:e4:15:1b:62:be:44:48:21:f8:01:
6a:ee:66:a4:50:25:c6:02:0c:7a:8e:3c:cb:a8:2b:
b8:f3:d4:b0:f5:97:dd:da:bc:60:a2:63:a9:36:77:
42:1d:1c:ab:87:79:16:9f:de:c8:cb:d8:71:07:d0:
fe:a5:48:38:dc:41:4b:c7:8f:19:c3:5e:c1:5a:01:
0f:c1:15:1e:41:97:47:c1:26:72:08:04:47:55:88:
fb:d1:90:bf:bc:86:56:8b:71:9e:66:ae:fc:68:9a:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:7E:22:7D:E7:28:80:D7:33:C1:FC:B2:69:A7:C7:6C:35:71:71
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:6f:4f:f6:13:67:b7:c6:fc:c3:f7:85:8f:03:e0:ed:d3:
7f:32:91:bc:8a:44:f5:9d:07:38:20:35:3c:a0:fe:79:57:f3:
37:5e:1b:c2:41:8e:a7:11:56:cd:72:f2:38:b2:92:a1:d8:60:
b5:c9:6a:e9:41:9a:42:57:df:2e:8e:df:2f:45:5c:e2:2c:97:
28:ee:f9:c4:bb:15:c8:ca:7d:fa:05:64:76:49:e4:f7:3e:c2:
93:4a:96:18:f1:2b:54:08:43:4e:02:1e:c0:f7:8b:bd:f7:ab:
9f:33:3d:f8:5a:92:7d:ed:ff:f4:12:71:61:2d:63:e1:f8:46:
16:92:59:4b:3a:d3:00:48:3a:50:53:78:68:19:db:9a:ae:32:
4f:60:67:0d:59:17:89:99:b7:e2:d4:55:d3:8f:de:82:99:85:
03:74:16:45:22:e5:7c:8f:22:88:cf:90:ce:f0:f5:1a:0f:80:
5c:db:c4:1e:7e:02:e0:63:0d:f9:7b:d1:e6:4c:b6:3e:c2:cb:
f2:1c:43:8f:20:1a:13:79:0e:52:c3:e5:43:3d:76:ea:41:50:
e6:40:ea:e0:b2:a8:d3:90:fb:a6:9a:0b:d5:c8:bb:a9:af:fb:
de:a6:43:06:c6:86:21:9a:d5:39:7e:fa:02:e3:3f:83:4e:8f:
15:f1:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:18 2026 by rpki-client