Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: DZB1BErJ2W0FftywaMnTkNuDgZ8uMiJranqFUEnPNNY=
Subject key identifier: CC:C6:A2:65:AA:BC:C5:90:D5:DD:2C:6C:B7:6A:DE:02:A8:8E:3A:2B
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 01A0CBFE96F532D8DAF2C7D167CA8237CD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 02AC
Signing time: Wed 23 Sep 2026 02:00:54 +0000
Manifest this update: Wed 23 Sep 2026 02:00:54 +0000
Manifest next update: Thu 24 Sep 2026 02:00:54 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: qyWYyWUD6Xqs6J4ez91A/T7pchGo8K69suhz6fCh+w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:96:f5:32:d8:da:f2:c7:d1:67:ca:82:37:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Sep 23 02:00:54 2026 GMT
Not After : Sep 24 02:00:54 2026 GMT
Subject: CN=ccc6a265aabcc590d5dd2c6cb76ade02a88e3a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:bd:12:7d:6f:1d:7a:32:98:82:24:b8:dc:
1c:e7:2d:b3:3a:59:89:2d:7d:72:6f:9d:0e:ff:bb:
bb:a0:29:01:6f:b8:d3:92:09:01:20:a8:81:d8:81:
73:11:bf:59:d2:b0:fb:c6:be:85:ed:38:03:bb:15:
66:68:33:ab:8d:8a:60:96:e0:bd:a5:a4:51:d3:bc:
0f:15:22:ea:e3:7f:53:c6:6f:ed:2d:1c:ff:b6:63:
64:d0:ee:e8:c0:5a:bb:e7:cc:ae:61:54:e3:5f:55:
85:8d:9f:4c:4d:d3:5a:71:3f:e3:54:a8:8c:60:6d:
50:7f:d3:40:93:6d:88:f6:6c:8e:a9:93:fd:0b:cf:
f2:b3:e1:5c:5c:a3:aa:a1:14:9b:ac:ee:69:31:e2:
4c:69:71:66:26:66:27:1a:30:fb:b1:e0:f3:a1:c5:
00:b0:fc:43:8c:f2:de:d7:36:54:06:5c:9d:98:97:
37:2a:98:b0:4c:f0:12:d6:e1:94:a7:db:ff:44:6d:
99:69:2b:0a:08:49:8b:b2:bb:a5:83:58:81:8c:5c:
ea:ce:8d:8f:65:c6:06:2f:eb:f0:af:ce:92:8e:4b:
84:e3:d9:24:39:68:1e:69:b5:22:b3:e5:7e:b3:91:
8d:05:02:f6:b6:45:c1:f0:47:6d:56:0a:ee:18:c3:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:A2:65:AA:BC:C5:90:D5:DD:2C:6C:B7:6A:DE:02:A8:8E:3A:2B
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3b:5b:32:46:89:51:37:13:3c:7b:79:9d:66:40:6e:ce:c3:
98:34:e5:a5:3c:83:4c:0c:7e:e9:2b:7f:79:cd:08:aa:06:31:
38:79:6f:8e:3a:21:82:fc:46:9f:87:85:b9:f9:1e:a0:ce:7a:
56:2b:81:ea:6c:27:e8:e9:b8:5c:a0:b4:ef:36:d5:c9:4c:6e:
5f:9b:97:d5:1a:83:69:c2:f9:69:3a:5c:9c:17:77:a0:7d:2d:
76:18:17:2c:10:d4:c8:dd:56:e1:60:ee:5e:f9:1d:90:80:8e:
e9:49:ac:ae:76:b6:9d:ac:7e:aa:e0:2d:b2:cd:8f:66:7a:68:
5e:c3:38:91:7e:5d:80:08:7f:ca:e9:44:5d:9c:08:ba:b9:47:
97:79:f3:f9:0b:23:b5:36:59:79:c1:4d:df:15:14:bb:e7:71:
36:75:f2:e9:75:bf:36:f3:30:99:3b:86:76:f4:1e:2d:4e:29:
99:43:d1:e8:1b:06:71:eb:2d:b3:47:42:90:a0:15:4d:9c:99:
d4:5b:00:10:0d:66:6b:08:a2:fd:01:25:41:e7:c6:09:97:fe:
c4:61:a0:78:cc:47:05:e9:78:53:69:e1:7b:53:cb:3c:5b:20:
df:62:fa:ce:44:c3:bf:ec:ca:08:c2:63:6a:92:cb:31:02:af:
42:13:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:16:01 2026 by rpki-client