Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: UfarG7+pF/E0shnrXXvvDAEwH6Nx/hLjDRWcIgsRSdE=
Subject key identifier: 48:A6:23:CF:AE:DD:49:B5:D0:27:02:C1:E7:6A:E2:30:74:64:83:49
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 01A0D237208FBC1510851DEB9B512B19A2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 14CA
Signing time: Thu 24 Sep 2026 07:00:23 +0000
Manifest this update: Thu 24 Sep 2026 07:00:23 +0000
Manifest next update: Fri 25 Sep 2026 07:00:23 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: zI9tgK5czL5Llo30ozMzT1zcxraj1epWIVLqoKmVcKI=)
2: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (hash: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:20:8f:bc:15:10:85:1d:eb:9b:51:2b:19:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Sep 24 07:00:23 2026 GMT
Not After : Sep 25 07:00:23 2026 GMT
Subject: CN=48a623cfaedd49b5d02702c1e76ae23074648349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:89:19:b6:a3:6b:f4:6f:8f:4d:9f:0d:19:
d4:07:47:e6:a0:69:48:99:53:a3:e7:e2:7b:54:42:
de:14:52:30:e4:ab:a5:bb:4e:07:dc:11:85:73:ae:
17:7e:81:22:20:b3:bb:77:e7:a5:50:b6:7f:9d:4a:
54:66:7f:99:91:9c:ae:c1:01:ea:28:fe:7c:75:c1:
8d:1c:fa:01:d8:22:cc:8d:53:e5:f5:a7:79:b2:2d:
88:c5:c1:8c:40:7c:b1:08:fa:0b:83:e6:84:3f:04:
8c:9d:70:07:84:57:6e:37:f1:94:82:96:57:db:b8:
2d:31:68:a4:8a:e9:c1:75:0f:34:f5:97:ce:62:85:
26:c9:0e:b2:c6:f6:88:c6:fe:64:8c:f8:8a:26:1e:
66:0a:a4:a3:fc:a6:92:08:16:6c:f1:2d:5e:9e:ab:
50:1a:97:6c:d8:09:a3:d2:18:87:77:34:28:8d:69:
54:6f:8b:30:22:49:4e:64:1e:bc:fe:f6:70:70:e6:
2f:10:72:79:ee:3e:32:f2:be:04:40:67:d4:1d:20:
46:eb:a6:e8:2d:4a:cc:2a:d4:88:d6:ec:e5:b5:98:
46:83:6b:90:17:31:b0:3a:e5:df:a0:33:ee:d1:27:
31:99:6e:da:d5:70:72:4c:b4:f7:c0:d5:34:6c:e9:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:23:CF:AE:DD:49:B5:D0:27:02:C1:E7:6A:E2:30:74:64:83:49
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:10:ca:f3:43:18:5b:06:65:79:0c:0d:91:f2:fe:3b:12:3c:
1d:38:bb:88:20:c7:48:b1:9a:bf:23:d5:de:ab:52:86:d1:0e:
1c:c0:35:61:af:41:1b:26:1a:80:af:8e:10:d1:d8:43:94:4b:
72:c0:7b:98:e7:40:eb:1a:31:e1:3f:64:34:50:c6:db:be:2a:
69:7a:8c:13:7b:13:f6:85:b8:a4:d0:fc:ad:eb:7f:f2:14:e1:
d4:9d:60:3d:9a:ed:42:63:23:e1:f0:0c:83:7b:8f:ae:38:57:
cc:91:0d:ed:3a:0c:3d:bb:22:6f:9e:6a:07:74:24:bc:56:d4:
fb:e4:3b:7e:4d:6a:99:6e:b6:2a:fd:7a:85:b5:5a:33:44:46:
41:9b:6d:1b:b0:d4:2e:e1:cc:f9:6b:eb:c9:70:7b:0f:94:6c:
7e:66:9b:95:0e:36:0b:9b:0c:1a:ca:be:2e:d1:d5:c2:4f:85:
59:d7:bf:6f:09:4d:4e:b8:6e:1a:a6:e7:e6:85:d9:1a:81:f3:
4e:5b:d1:31:3a:97:c6:34:cf:62:3a:ad:de:b3:45:cb:9e:cc:
92:9b:da:95:79:74:8e:1a:55:d9:e1:a8:71:56:35:24:68:f0:
e3:fd:91:38:fa:c2:cf:5e:a4:7d:2d:a4:76:97:81:ce:6f:e3:
20:6b:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:47:00 2026 by rpki-client