Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: H9wDo2eNdgx27jfab+4i3soJfSZ5muz4OZq6p30DJo8=
Subject key identifier: 00:A8:A5:F5:11:04:4A:6C:81:E9:0D:0E:03:97:60:AC:EC:58:14:59
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 01A1DD5E16BB80563BFBDE7B43D50EA05632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0AB7
Signing time: Sun 15 Nov 2026 04:01:33 +0000
Manifest this update: Sun 15 Nov 2026 04:01:33 +0000
Manifest next update: Mon 16 Nov 2026 04:01:33 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: aUu02/8czwfxbcDtl/S92Pv6P7AdtJf27ZhdEn+3TBo=)
2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:16:bb:80:56:3b:fb:de:7b:43:d5:0e:a0:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Nov 15 04:01:33 2026 GMT
Not After : Nov 16 04:01:33 2026 GMT
Subject: CN=00a8a5f511044a6c81e90d0e039760acec581459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:ff:88:0f:58:60:64:6d:97:a7:d3:bd:5b:
2f:b4:3b:07:55:8c:45:29:54:64:ec:24:43:88:7a:
22:ce:a8:67:97:66:d7:44:bc:e6:b7:de:05:ab:41:
ff:4d:a7:a2:78:62:9a:2a:6a:ec:97:7a:9c:50:ee:
8e:fc:74:26:ba:d9:64:37:05:ba:1f:6a:ff:78:35:
38:9f:1f:04:f4:b5:3d:4e:95:47:fc:1c:b9:e3:bf:
2f:83:e1:b4:20:ee:66:7e:bf:f0:4a:b7:95:f2:ba:
ce:05:3d:55:c1:18:2e:f1:20:8f:e7:8f:6d:88:57:
8b:e1:d7:da:0f:11:03:b0:13:cc:2c:b9:4d:16:14:
99:74:41:e9:eb:22:0e:42:d3:4b:92:50:87:40:df:
3d:9a:fb:6a:39:ca:2b:66:ea:71:02:e5:e8:f4:68:
35:bc:34:b5:bd:41:3e:50:12:96:e1:4b:83:fe:cf:
24:ec:9c:51:cc:d3:70:4e:b0:bd:36:c0:1e:8c:6b:
a5:ae:bf:c3:12:14:44:19:fa:9c:f9:12:d7:75:40:
a5:fd:13:37:3c:25:8d:cd:50:b4:cf:30:2e:f9:c8:
72:25:be:3b:20:f8:80:41:b8:00:9a:ba:04:7d:da:
9a:32:b6:d8:1a:41:72:db:68:ba:bf:85:85:06:81:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:A5:F5:11:04:4A:6C:81:E9:0D:0E:03:97:60:AC:EC:58:14:59
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ef:81:9a:0e:0b:4f:ac:0e:58:7a:c2:a7:03:09:7b:40:f8:
d4:5c:b1:be:95:41:c3:58:de:d9:e4:96:be:12:7a:af:52:28:
e5:24:42:ec:ae:31:3d:74:47:e2:15:0d:5a:06:d0:70:f1:07:
dc:dd:b5:bb:97:54:fe:9f:81:78:f2:08:d1:da:d4:5a:36:50:
f5:98:3b:51:55:37:a9:54:e5:a9:78:0e:42:7a:e3:f9:d5:06:
57:a5:95:64:a4:a7:f4:b5:04:26:77:ab:a7:30:30:a5:89:92:
33:4e:9f:62:a5:e5:40:64:c1:d5:4c:2f:0d:83:ae:26:cb:9b:
46:fa:1e:67:90:39:a1:63:f1:22:78:b6:08:fa:3f:7a:6c:37:
cb:f9:32:c1:57:0f:48:72:68:d0:a5:6a:32:cd:70:8f:17:4c:
df:22:7b:c6:61:8e:63:82:d1:b4:41:e7:35:69:e6:22:68:47:
7c:07:93:cc:99:41:4b:1e:4f:eb:41:bd:22:92:0e:50:c7:fd:
80:7c:c1:32:7a:0c:9e:bc:40:9e:aa:55:92:08:29:13:fe:8b:
58:b5:31:cf:50:5a:92:38:5e:72:3b:51:ab:32:82:b9:02:72:
1a:32:fa:54:02:fd:e6:f6:50:33:43:76:fb:31:86:bf:d4:b3:
9d:80:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:03:38 2026 by rpki-client