Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier: 4n9ge9CrLMElTtHUAJRPV8EQjJHTqgjvU/uN32BLgGY=
Subject key identifier: 94:47:A2:22:AE:9B:0A:E1:88:68:31:C3:5D:6C:3D:66:0C:9A:F8:85
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 01A0D0123E1E18D5FEF5A33768B90A74C84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:51 +0000
Manifest this update: Wed 23 Sep 2026 21:00:51 +0000
Manifest next update: Thu 24 Sep 2026 21:00:51 +0000
Files and hashes: 1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: ISMJIU2bp20Kh+BH8j/kCD1UZh2+i/DixxPb9qMRvkI=)
2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:3e:1e:18:d5:fe:f5:a3:37:68:b9:0a:74:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Sep 23 21:00:51 2026 GMT
Not After : Sep 24 21:00:51 2026 GMT
Subject: CN=9447a222ae9b0ae1886831c35d6c3d660c9af885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:6b:08:c5:70:be:06:e7:00:b6:9f:44:65:
cf:da:35:3c:85:5f:7b:cb:ba:de:2f:cb:af:0a:08:
a1:a8:0c:a7:12:80:38:d0:a6:71:df:7b:9b:75:cc:
77:68:56:26:03:c1:3c:c7:bd:2f:f5:6b:b4:b4:a9:
d5:3e:d3:f4:b1:3f:0b:2b:53:ac:53:b5:6b:80:30:
41:0d:d4:9a:ed:9d:84:93:81:2a:71:49:d3:98:11:
ba:8d:22:4e:61:33:83:aa:08:45:0f:3f:b3:50:1a:
57:b5:08:e9:ba:4f:25:05:a1:0e:82:d3:06:e8:d9:
80:a0:a4:32:e5:d4:7d:f4:82:f7:95:9c:a8:2b:af:
31:d1:9f:cb:d4:1c:bd:b3:fa:f8:c3:fe:6c:66:52:
7a:29:ef:64:67:45:fe:9c:9e:79:21:54:2e:e4:3e:
25:14:1b:cc:6b:81:e5:ae:0e:90:37:5b:41:ce:13:
37:59:5d:ad:90:9a:1c:74:39:4f:3d:8c:ba:a4:4f:
d6:69:ee:f3:56:58:21:25:f6:7a:8f:ba:04:6d:25:
58:fe:5d:ac:6c:80:74:74:90:ad:f2:ef:77:95:69:
f4:9c:c7:e0:2c:ea:c5:cf:ad:ec:9b:2f:d6:03:79:
5a:cf:78:75:10:c3:95:33:ca:75:49:5a:a9:74:33:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:A2:22:AE:9B:0A:E1:88:68:31:C3:5D:6C:3D:66:0C:9A:F8:85
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:9e:23:45:60:38:f9:51:bd:ed:6f:a7:76:9b:42:4e:75:
27:67:9f:00:7f:1b:6a:4a:b7:c4:cb:be:0a:fe:19:7a:3c:ec:
84:55:1a:8d:fe:c2:f7:aa:a9:aa:3e:25:24:2f:dd:1d:52:dd:
f3:b5:c0:76:b8:b4:78:f0:84:35:39:af:c5:db:89:5f:1a:58:
32:36:09:76:f7:42:fb:0f:18:92:25:b2:93:70:5b:92:1f:3d:
be:0d:1d:e0:18:fe:01:7a:88:7b:76:f9:2c:69:ea:86:c4:68:
f9:95:a6:2c:68:de:c6:db:bd:af:56:c2:5a:35:64:39:0b:8f:
44:3d:a0:16:26:e9:79:95:cd:49:da:d7:56:c8:31:4b:b8:c0:
2e:03:1a:33:40:43:c3:53:c2:16:c0:3a:40:6b:eb:27:63:43:
ab:5d:04:6b:c9:70:7c:6b:8d:12:c5:9c:fc:73:e7:fb:5b:1c:
c3:74:c6:26:10:84:3a:1f:87:e9:53:10:b9:f7:8a:da:f2:38:
a1:d2:cf:6f:53:c6:37:85:6e:30:80:db:b1:3a:1c:93:04:b8:
92:d9:8d:7d:b1:97:77:43:68:c4:6c:90:42:82:4f:9e:13:11:
f7:d7:90:c1:9c:84:74:57:4a:c5:8f:e3:d7:c5:31:b6:7c:a1:
a2:b1:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:20 2026 by rpki-client