Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: t4BYqUfFxGPAnTNSg/9wf9o4dn40sd+U9zsBofXMk8o=
Subject key identifier: F4:B1:AD:F2:BA:BA:90:5E:1D:D5:2F:FC:65:4E:40:CC:35:B2:A7:FE
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01A0DDCDFAAEBDC3F19154F530E7E766B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 13:00:58 +0000
Manifest this update: Sat 26 Sep 2026 13:00:58 +0000
Manifest next update: Sun 27 Sep 2026 13:00:58 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: EzUwcrYspeZCyV3/fqJ8keAWcvGyyhmVj8VZLQ7hkiE=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:cd:fa:ae:bd:c3:f1:91:54:f5:30:e7:e7:66:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Sep 26 13:00:58 2026 GMT
Not After : Sep 27 13:00:58 2026 GMT
Subject: CN=f4b1adf2baba905e1dd52ffc654e40cc35b2a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:5b:f0:92:c2:9c:d9:e4:e4:17:c6:d5:9c:
cc:4c:43:b8:a0:88:4e:b0:68:11:36:74:0c:d5:16:
c5:1c:7f:ec:b4:67:43:53:8e:7b:49:b0:39:83:21:
11:ea:74:2c:62:f5:12:ff:09:e6:65:19:8d:49:64:
15:4c:43:ea:0d:a5:77:d8:34:cf:54:61:02:d9:06:
ae:5a:72:81:45:0f:bb:2e:46:ce:65:04:c5:fb:cd:
0e:df:2a:bf:54:59:a0:50:36:7e:d2:6c:f6:e9:c7:
55:6d:f2:71:fe:9b:d1:8f:06:d3:6c:8e:de:52:69:
11:18:13:94:a6:41:3e:69:af:17:4b:60:8c:a9:66:
f4:bd:a6:27:4a:86:ff:bb:75:86:7c:58:01:38:3c:
92:4c:6b:f3:02:f0:f5:76:c5:0b:ec:63:be:f9:e8:
a9:26:cf:74:91:ab:9c:cd:e7:e0:4b:d8:cf:3b:b6:
72:a1:55:5f:e0:f7:7f:3a:26:cd:21:db:bc:ea:dc:
5f:37:7c:7a:3e:85:73:f8:dd:db:bf:d0:a5:2d:74:
bb:b1:fb:ab:94:33:6f:74:6f:78:ec:4a:dc:8e:64:
6b:12:65:54:85:73:02:33:7e:4b:78:34:d0:ac:1a:
9e:54:86:cd:13:db:e9:f2:1a:36:8b:84:90:5f:f5:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:AD:F2:BA:BA:90:5E:1D:D5:2F:FC:65:4E:40:CC:35:B2:A7:FE
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:4e:60:17:17:7d:6f:8d:2e:1d:f0:c9:2c:bb:3c:a1:d6:
6e:f1:68:b1:f3:df:d9:8c:3a:f8:43:ee:c5:c8:86:af:dd:67:
39:59:8f:28:c5:53:e6:6c:6d:8e:d1:e0:08:52:6d:7d:56:07:
48:db:68:32:6d:54:ec:29:ae:b4:1d:d0:a8:7e:8a:54:91:61:
22:7a:15:06:36:ae:fc:5b:1d:ae:01:8b:c2:2a:45:0a:26:8c:
b7:43:43:a3:2e:ab:42:20:ea:44:ed:e3:30:36:36:be:81:0c:
3c:cd:59:92:d9:4c:eb:f5:7d:13:0c:49:37:37:0e:c9:e0:3e:
c4:c3:17:eb:02:0f:cf:40:58:5b:7e:a5:e4:53:d4:2a:7a:d4:
7d:a2:93:fd:0f:91:f3:e2:66:6b:90:11:e7:4d:c7:8d:54:7a:
39:e7:61:40:10:01:d4:a7:a8:3b:05:0b:98:81:ff:21:40:95:
ee:ab:54:66:82:34:a5:a8:f0:20:5d:0a:e1:c5:0d:12:66:a8:
7f:9e:89:11:96:0f:3c:2f:e2:9d:66:46:2e:64:d3:77:75:9c:
24:a7:7e:7c:e9:df:3e:2a:a9:d1:2a:f0:af:ee:c4:b8:7d:08:
d4:af:90:1c:75:f2:a9:a5:9a:b1:6e:6a:6c:7a:0b:74:b0:bd:
59:77:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:16:37 2026 by rpki-client