Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: qXZtGitR0Gw09VXdN4BxtGlUC/l7S3zv1xJ+MFh5M90=
Subject key identifier: A0:1D:25:7B:8E:1C:5F:59:7E:9F:5A:39:45:87:3A:85:32:3C:64:DD
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 01A0CEC8658E3AFDADFFAB14412BC4915B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 1934
Signing time: Wed 23 Sep 2026 15:00:34 +0000
Manifest this update: Wed 23 Sep 2026 15:00:34 +0000
Manifest next update: Thu 24 Sep 2026 15:00:34 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: Mx5ExAttuGCDQhKIBPYAPacTaLrm2EO9HCmZGObCN7M=)
2: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (hash: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:65:8e:3a:fd:ad:ff:ab:14:41:2b:c4:91:5b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Sep 23 15:00:34 2026 GMT
Not After : Sep 24 15:00:34 2026 GMT
Subject: CN=a01d257b8e1c5f597e9f5a3945873a85323c64dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:63:1a:d6:f6:fb:1a:09:c3:23:cc:89:11:
30:83:39:4c:94:79:47:7b:01:11:93:f0:39:c4:54:
31:07:b4:07:ac:94:5d:f1:c4:2a:fd:8c:6c:91:75:
e2:86:2a:e8:50:ef:02:a8:c0:9a:5a:8b:a8:e1:6a:
9a:14:bf:3d:6c:f9:37:b1:aa:80:ce:80:52:9b:f7:
25:1c:08:bc:7c:03:92:47:b7:9c:1b:1b:30:3f:91:
31:54:9a:a3:37:cf:98:4e:70:db:99:7d:a3:70:bd:
bd:d0:53:4a:17:59:6d:0d:d4:b9:22:1d:3e:03:24:
1c:ef:d0:ba:b3:22:25:24:ce:cb:27:c1:ca:a5:84:
82:60:4d:4f:98:da:4e:a3:d5:fa:90:0d:11:35:e7:
72:87:c7:70:2c:6f:a9:c2:e6:a7:46:69:c7:05:6c:
2e:0f:94:65:87:72:17:59:62:64:55:b4:2c:36:7d:
6e:a2:b4:23:ce:94:1f:7f:27:a6:af:2f:50:7b:22:
89:45:1f:cb:06:9f:f1:6a:d4:17:9c:34:06:57:2b:
14:b2:30:8b:f6:2b:83:e7:eb:f2:e4:a5:0b:61:15:
52:5b:75:9e:2c:31:ca:44:b3:cf:cd:c5:c5:02:5a:
ab:f3:dd:fd:d8:8a:4f:60:58:42:5f:6a:02:5e:b7:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1D:25:7B:8E:1C:5F:59:7E:9F:5A:39:45:87:3A:85:32:3C:64:DD
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ce:08:d0:6d:80:ba:29:09:73:e7:07:c1:21:25:57:35:21:
21:42:08:1d:f8:2e:f1:69:1e:5b:e0:52:97:c3:a0:72:bc:f2:
65:b4:33:aa:ac:d7:b6:6f:ee:28:bb:22:33:8f:c1:8e:c1:6e:
af:93:21:b9:f2:a4:5c:81:76:1b:5f:d0:67:32:35:39:d8:c0:
6c:b3:f7:7b:1b:2b:98:41:9c:1e:1a:cd:09:c8:d2:50:f9:01:
1a:23:0e:3d:a7:65:ed:4e:0d:7d:50:b5:74:19:a6:b7:7e:bf:
c1:05:4b:cb:61:09:3b:34:d9:e0:6c:4e:47:87:40:b8:4e:f1:
14:28:ff:0d:4a:ad:5e:7e:e6:d6:0f:fb:9c:5d:56:0f:eb:f8:
2d:7d:ab:bb:d3:fa:e4:74:82:91:ae:8f:93:e4:26:95:71:aa:
c2:f5:60:f7:b1:af:1d:57:79:dd:1e:05:16:e7:66:6d:94:ad:
ca:e2:d9:a5:a4:98:84:ae:84:03:96:4e:21:59:54:7e:1f:ea:
49:2d:31:04:52:34:2d:56:b1:d1:d0:a1:bd:91:a6:d6:14:04:
01:c2:07:e9:a8:6a:ac:4c:fb:52:43:c7:f6:6f:4d:65:b5:1d:
cb:5e:29:72:bc:b9:45:a7:ee:4c:d0:4e:cd:aa:65:ef:e9:1f:
88:1f:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:53:38 2026 by rpki-client