Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File: 2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier: vIJd/D8zqqLUfIyG/8HFCZD7+oSuep9RMCIFdHUMY7M=
Subject key identifier: E8:64:5E:BC:96:9A:03:89:DF:6E:87:21:C1:C0:B2:1E:2C:3F:9F:EA
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 01A0D3B8C1082FE856319124D0152371B848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number: 0893
Signing time: Thu 24 Sep 2026 14:01:35 +0000
Manifest this update: Thu 24 Sep 2026 14:01:35 +0000
Manifest next update: Fri 25 Sep 2026 14:01:35 +0000
Files and hashes: 1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: 23L+VV0xtssSpOCsUf0I5AfH7Ajda/x/j6aVj+SAymE=)
2: bkcUPSVyK1GtBOw35C6fpsJHCPw.roa (hash: 14nbBDwXuaYsul3Mhzz1OYQgsUX4OxdsMQADV56Zhh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:c1:08:2f:e8:56:31:91:24:d0:15:23:71:b8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Sep 24 14:01:35 2026 GMT
Not After : Sep 25 14:01:35 2026 GMT
Subject: CN=e8645ebc969a0389df6e8721c1c0b21e2c3f9fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:54:d7:30:26:e3:3d:19:71:e9:af:de:a2:
5b:65:62:80:cf:98:ef:7a:e9:33:74:59:04:e8:99:
6c:29:ed:2f:35:59:f8:62:8a:d0:ea:0c:04:1e:c3:
00:c1:82:83:ca:3b:b6:fe:c3:55:ff:85:87:51:79:
b2:cf:a3:e6:98:5e:18:63:68:a9:b2:34:fe:13:2b:
39:aa:88:9b:ea:dd:ed:05:22:07:3f:60:b8:c7:42:
c1:33:b8:60:8c:84:57:8b:0a:cc:2b:fd:a7:eb:89:
b5:3c:5f:28:ca:46:c0:57:b1:e6:99:02:20:3b:ce:
45:8f:c1:a7:05:23:82:80:18:86:7a:29:f8:6a:f1:
a2:d9:72:65:39:39:8c:22:e2:11:cb:57:d9:74:6b:
56:65:ad:64:7f:6e:ee:fa:d6:bd:fa:db:3f:eb:ad:
09:a7:fa:1c:db:aa:3b:41:75:06:cc:01:a2:9a:44:
2c:30:e5:72:b0:57:ba:77:2d:96:27:2f:13:cd:eb:
fa:7a:2e:73:6e:cd:b1:6b:ea:c0:6c:f4:e3:74:8a:
ea:54:38:2d:18:6e:a8:6b:67:5d:be:0d:e2:ec:80:
cb:49:de:5e:9d:32:6d:06:b4:cd:50:d6:06:f3:b1:
d1:c2:7e:2d:86:88:ee:85:2b:0f:87:cf:46:89:ed:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:5E:BC:96:9A:03:89:DF:6E:87:21:C1:C0:B2:1E:2C:3F:9F:EA
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7e:59:3d:5c:87:27:05:54:e1:14:fe:85:22:53:34:47:37:
bb:4c:52:f2:fb:5d:b9:49:fa:47:1b:73:cf:1d:40:8a:b1:0e:
47:7d:22:0b:15:50:31:11:31:f6:95:92:a5:c5:03:8c:df:fc:
b7:96:07:74:be:69:db:21:87:c0:e2:43:d1:27:63:5a:3a:bc:
f6:1c:96:fc:12:77:c1:12:2f:aa:56:fa:76:98:cb:d8:97:78:
3b:81:6a:24:6b:7f:15:d4:f6:43:cc:bc:ff:9c:dd:9f:ff:90:
6b:71:26:a8:e1:81:ee:41:8c:de:3a:f1:29:71:cf:c0:60:6b:
0e:54:b3:4a:ec:61:bc:a1:f3:f2:ac:77:d7:15:84:15:15:07:
88:2e:59:4d:fc:4c:9c:61:d6:30:4f:92:3a:ba:6b:6b:2a:3b:
8f:00:0b:a0:89:71:96:0e:f6:42:91:a5:74:82:03:aa:1b:36:
78:75:57:28:57:5e:2b:1f:80:37:62:d1:25:74:71:4e:79:a1:
a6:6d:93:80:cb:83:10:e0:9f:bc:08:14:b7:2c:2a:d5:1c:65:
b5:ae:f6:ce:a6:29:cf:f3:f0:e1:ce:85:93:2a:7b:d9:62:17:
6c:e3:9b:17:6f:17:e8:85:09:80:31:13:50:57:43:3e:52:3d:
96:3c:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:46 2026 by rpki-client