Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
File: 2KVuLWOsXam-012gHL-tIl8EvrA.mft (raw, json)
Hash identifier: wweciKnPxAgINgz5P+0+dvfAsVckSGwMiUCRu3Xggjk=
Subject key identifier: 3C:B1:B6:65:4E:FC:15:B6:D6:D7:31:4C:38:32:9B:35:06:E9:5A:56
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 01A0D502B0C9DDA783346CEEB6D5CDF2A2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 20:01:58 +0000
Manifest this update: Thu 24 Sep 2026 20:01:58 +0000
Manifest next update: Fri 25 Sep 2026 20:01:58 +0000
Files and hashes: 1: 2KVuLWOsXam-012gHL-tIl8EvrA.crl (hash: WzANYrd9LY7IArzPkVUAUdqfwUGxZEL0FuxsuXq3Xas=)
2: H5rz4CYgzmbUmnfGasi4U65AvKk.roa (hash: TO3cNYf9xWtPGa2S3JS5FwJuRn8xpuHQxouafZFM9ao=)
3: qrZor_4iuHhjWECNHuPoqjZgwRM.roa (hash: jTjQTNz6GwiMBlghpXe7c+6S4Cn1ehIr1K8g9CB/9Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:b0:c9:dd:a7:83:34:6c:ee:b6:d5:cd:f2:a2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Sep 24 20:01:58 2026 GMT
Not After : Sep 25 20:01:58 2026 GMT
Subject: CN=3cb1b6654efc15b6d6d7314c38329b3506e95a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:20:83:b9:fc:7d:03:e4:50:f9:45:7b:79:
6c:7c:f1:48:7a:fc:63:e0:8c:a2:dc:2d:01:85:c5:
98:30:e1:a2:b1:9b:0e:06:22:07:64:a7:f4:ff:82:
82:f5:6a:18:44:5d:26:a8:ec:82:1f:16:61:19:82:
dd:f9:73:d6:0f:90:a7:d4:c4:21:06:52:10:d5:1e:
79:11:b9:8b:7d:cd:d8:e5:a2:2b:f4:90:7b:7e:19:
ba:fb:46:39:da:6a:c9:ad:4a:54:e5:a3:07:26:0f:
62:cd:a2:45:1a:2b:7e:ee:29:99:33:21:82:08:fc:
21:d7:5e:4c:77:6a:06:71:ef:2c:59:f8:b5:9d:74:
4d:14:2c:b7:b3:06:d5:2c:65:84:66:02:87:4f:2a:
8f:f7:83:ee:fd:01:de:f0:bc:60:f2:31:cc:c5:92:
ec:72:cd:e2:1d:a4:2f:a5:aa:06:59:35:07:9d:dc:
d1:b5:ea:47:a7:d7:58:1f:84:e8:07:c4:76:cd:0c:
75:be:64:23:24:f2:65:7a:e1:6d:ed:24:af:36:90:
c4:5e:d2:62:78:28:81:f9:30:24:f4:2b:eb:11:e7:
d4:a1:78:3b:d7:a0:9f:5c:b3:cc:e3:a8:54:98:01:
df:a0:74:98:6e:10:fd:8c:f6:2c:63:69:0c:56:22:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:B6:65:4E:FC:15:B6:D6:D7:31:4C:38:32:9B:35:06:E9:5A:56
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f6:0c:3c:f1:9e:dc:05:91:cc:49:89:4f:45:96:66:de:ad:
b8:59:47:3a:b2:c8:9b:99:d3:b2:b8:12:1f:af:63:32:45:28:
91:e7:86:b3:7d:18:cc:b5:f4:55:f5:b9:53:4b:06:76:fc:69:
6a:a7:4b:77:af:cc:3b:e3:29:78:90:4c:2c:e8:64:f0:62:e4:
55:eb:c3:de:23:8e:a5:ea:60:7a:ac:0b:85:dc:09:9b:cb:ec:
1f:92:1b:27:83:1a:15:df:fd:d8:73:f7:c4:89:c3:4f:9d:68:
9b:73:99:08:d0:7e:de:26:35:8c:13:ff:c2:6d:28:f4:83:98:
f6:41:58:57:68:b7:4e:75:0a:54:25:fd:81:45:cd:cf:29:69:
be:ca:ea:e4:ad:a7:97:1a:5d:1c:0e:90:81:7b:78:0e:7a:31:
7b:52:19:42:a1:7c:2e:e6:89:fd:b7:64:b4:b4:48:b3:15:42:
32:40:55:a0:09:50:8a:6e:30:2c:b9:d6:5f:92:21:d7:a5:ed:
cd:92:3a:30:3a:f2:bb:a3:fe:d6:a1:41:22:c8:86:fa:fc:14:
99:4f:27:a5:e8:5c:1b:72:a0:a5:9a:4b:6f:d8:99:e7:b5:75:
ed:e9:76:a0:83:ae:54:8a:8d:16:15:f0:e6:83:df:12:ba:a7:
54:d9:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:55:01 2026 by rpki-client