Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
File: 2geeQ_xybhZVyKdVVPX7wYsgRUU.mft (raw, json)
Hash identifier: N2DqdhbMZxd11NBcUTRpK9BNxVkdongaBW9JikzJHBo=
Subject key identifier: FA:9D:6C:EB:CC:32:00:AE:F4:92:0A:D2:7F:BA:E1:5B:B0:47:C5:FB
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 01A1212EE066685798D0FFC742AA105A61ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:22 +0000
Manifest this update: Fri 09 Oct 2026 15:01:22 +0000
Manifest next update: Sat 10 Oct 2026 15:01:22 +0000
Files and hashes: 1: 2geeQ_xybhZVyKdVVPX7wYsgRUU.crl (hash: SC+nHh8O8AL5Nqvb/S8m1tHKqMRynCMQEYJeYUj4C1k=)
2: FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa (hash: 36QLoZ8Ws2gB6YZ/mvzOniygiDV4ui/NvR252z7lSOc=)
3: a0n0eRt_zXRSqiGHwwetMEUhQkk.roa (hash: Iq1Hfa0PK/01Z2qiRH7cJQnXiwjnNSuA2bLHyqY6DfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:e0:66:68:57:98:d0:ff:c7:42:aa:10:5a:61:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Oct 9 15:01:22 2026 GMT
Not After : Oct 10 15:01:22 2026 GMT
Subject: CN=fa9d6cebcc3200aef4920ad27fbae15bb047c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:1e:1a:51:f9:cf:df:70:bf:e0:cc:ab:86:
c0:17:af:54:2f:55:6a:58:3c:3a:cf:ab:58:06:6f:
57:15:45:94:aa:10:a8:c5:9e:84:66:7d:75:c1:9f:
5b:63:75:f2:cb:54:23:19:91:01:c6:f1:de:95:ef:
de:e5:0e:65:9f:e4:54:c5:e5:55:1b:de:86:c6:f8:
70:6d:c9:72:71:3e:17:24:c6:bd:e6:14:b2:26:d9:
6d:c3:6c:2e:d3:c2:bc:0b:cf:a7:45:e2:ee:5e:97:
9c:03:4f:12:50:e4:f1:bb:4a:59:07:e2:eb:ee:cc:
1e:dc:89:be:6d:14:44:4c:5f:36:ba:0c:5b:9a:b0:
fd:43:cc:b4:c6:4d:9e:ba:37:b3:c9:39:04:b5:a0:
31:e5:d4:11:8f:e7:f6:f1:3f:51:2f:e3:9d:d7:04:
2a:ef:30:8c:48:1c:ee:47:4a:3a:f6:90:fe:97:31:
c2:55:6e:0d:de:50:42:72:ab:01:c7:49:d4:c0:86:
c2:c7:07:aa:6d:25:e3:9e:bc:d2:af:82:6f:85:da:
35:08:7d:73:d1:e1:8c:32:ab:02:a3:27:44:50:da:
44:4c:20:ba:de:0f:42:78:71:aa:10:93:e0:6f:6b:
8d:47:d2:ed:18:04:13:37:0a:0c:d2:b8:8e:af:b0:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:6C:EB:CC:32:00:AE:F4:92:0A:D2:7F:BA:E1:5B:B0:47:C5:FB
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:dc:ca:24:42:ff:11:89:f2:12:7c:1f:c7:f4:df:6d:65:77:
a9:ce:68:eb:68:bb:6f:0c:74:a3:c9:20:50:41:13:a1:e4:d0:
2f:a1:b8:63:fb:d5:8e:19:86:c7:1a:86:3f:66:bf:46:67:d8:
84:64:6e:c4:10:da:c2:74:e3:4b:ab:78:c9:f1:c4:dc:4f:bc:
bb:35:f1:1d:31:80:eb:15:61:86:45:cb:12:fb:20:95:60:d3:
15:1b:bf:9c:f2:93:aa:e8:cd:9d:48:76:1b:87:0a:e5:f8:f2:
8f:0e:39:0f:a5:36:36:26:00:c8:f9:16:03:43:69:ec:7f:80:
a9:c4:b7:1b:51:13:53:9e:d8:40:22:85:63:f0:a4:11:a6:56:
3f:45:d3:f0:e1:59:33:52:6a:6e:42:91:54:1e:78:90:3e:67:
c0:1a:a7:d3:dc:d5:34:cf:41:28:4b:72:0f:27:bc:b0:85:bd:
dc:b4:30:62:88:0c:7d:dc:6d:9d:a8:cd:07:53:bf:56:a3:17:
f8:6d:a8:f2:1e:f3:fe:6c:14:65:5a:d3:28:e0:34:98:60:30:
a7:d5:d3:f7:d6:25:0c:f3:b9:a6:52:c0:94:0c:51:86:86:fa:
62:f3:34:21:2c:39:a1:37:c7:6c:f5:da:4f:d8:30:29:1e:13:
40:c6:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:41:50 2026 by rpki-client