Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: erCs+5v3F9NeaHtOeg19/yIib2zMtVmqVVYv/wNoiZ0=
Subject key identifier: AF:D2:3B:A9:60:AB:18:DF:10:F8:47:2E:9E:40:9B:9E:5D:21:E8:65
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 01A0D3F06EE0CD1F11522E1E7CA85806DAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0CBC
Signing time: Thu 24 Sep 2026 15:02:24 +0000
Manifest this update: Thu 24 Sep 2026 15:02:24 +0000
Manifest next update: Fri 25 Sep 2026 15:02:24 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: OVTiAq1TbWhA77d1OcczXyuJSWN4PEJPTDG3qlxd8hE=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:6e:e0:cd:1f:11:52:2e:1e:7c:a8:58:06:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Sep 24 15:02:24 2026 GMT
Not After : Sep 25 15:02:24 2026 GMT
Subject: CN=afd23ba960ab18df10f8472e9e409b9e5d21e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:73:72:5b:fa:f6:b8:ba:98:a7:2c:11:3e:
95:8f:b9:ca:c0:1d:84:c0:d0:da:7b:23:ac:5e:48:
3f:63:db:a5:0c:5b:5b:b8:17:58:e5:c5:84:22:8c:
39:30:ca:86:5f:66:15:fc:3a:e5:43:24:97:30:e3:
8f:77:ee:1b:af:7b:6f:b4:e5:97:b4:5b:b6:a9:73:
96:78:fb:fd:4a:1b:6e:a5:f9:09:c7:f5:23:9e:5d:
3a:a6:31:7c:26:86:a1:d9:61:b0:af:a5:bf:5c:4e:
02:9d:85:87:ef:58:8d:16:4c:18:f5:70:62:9e:e0:
c3:e7:10:2a:d2:5c:7b:b0:f3:41:92:50:6f:44:9d:
dd:a1:db:54:ff:e8:09:da:ff:ec:4d:77:f2:4e:03:
ed:9b:e2:10:78:80:c5:ce:1e:bb:c2:b3:5d:9e:8c:
51:04:e3:e3:fc:95:e6:d0:0f:b8:d0:d0:85:71:16:
2c:12:09:50:11:91:0f:f3:ae:72:0d:aa:23:72:c3:
fb:be:7d:0a:97:cf:58:67:e5:7c:6e:2f:c3:e5:f3:
ab:08:7a:30:6d:e1:d3:80:9c:18:9e:ec:1f:ee:ed:
e5:1b:6b:ba:16:fc:19:d0:34:5a:a1:c8:5d:49:33:
da:ea:18:fe:65:2a:44:e3:e7:47:f7:ef:16:61:76:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:3B:A9:60:AB:18:DF:10:F8:47:2E:9E:40:9B:9E:5D:21:E8:65
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b3:7b:22:8a:90:33:55:9b:b5:da:73:64:ad:82:15:99:14:
d1:e3:37:bb:c6:b1:26:2e:3d:c3:3d:e1:30:8d:e0:7a:78:5f:
be:0d:d2:43:2b:f3:64:95:5f:49:68:15:33:6a:dd:9e:ef:1e:
bb:42:ee:00:f8:8e:52:9f:02:20:5b:b1:46:66:7f:f0:6e:b8:
7c:57:e3:d4:3c:ae:4e:d3:0f:9a:af:44:70:e7:82:b3:8b:60:
80:0b:76:9c:3b:b5:da:5b:2f:48:3e:fe:7c:e7:b4:b1:92:39:
2a:77:5c:0a:cd:00:11:84:7e:1d:63:8e:ba:c4:d8:e9:7c:fa:
ca:4e:a8:20:bd:0d:08:c8:64:25:13:c8:8b:37:00:22:d7:83:
4a:3b:32:0d:97:6e:c6:68:5e:02:74:9f:06:3f:13:a3:6d:9d:
df:f6:42:03:8b:2a:e9:e4:4d:0e:6e:45:7c:d2:5e:db:b5:ef:
47:d3:e6:91:69:35:ed:d8:2b:d3:59:bf:2e:59:94:04:f8:07:
e6:da:09:fa:e5:49:66:88:c6:5f:69:18:dd:1a:21:93:67:10:
90:98:9a:ab:0f:d3:d9:fa:32:cb:b5:9b:69:24:c3:10:fa:f7:
19:ed:b0:51:65:19:12:51:f0:bb:3a:9e:47:9e:23:91:3d:ab:
9a:09:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:09 2026 by rpki-client