Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
File: 2iHQJGSziv86MckIeNYnI7nHQqY.mft (raw, json)
Hash identifier: sGtuXJV6yb/5UxPtb1dn2iH7dHIySDOwQoOlBa+LvMk=
Subject key identifier: D5:B2:70:6E:C5:C6:3B:6F:B1:BE:6D:2C:DD:0F:FC:8D:8E:1C:5F:88
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 01A0DE05DF6FDF2EDDFE826BE11C8D95BCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
Manifest number: 0470
Signing time: Sat 26 Sep 2026 14:02:01 +0000
Manifest this update: Sat 26 Sep 2026 14:02:01 +0000
Manifest next update: Sun 27 Sep 2026 14:02:01 +0000
Files and hashes: 1: 2iHQJGSziv86MckIeNYnI7nHQqY.crl (hash: GrIXujoagqAHlGO2+DkSdIzSmKchcoLI09DaxKJTCK0=)
2: ULNyY9ornMb2XkpkkXNvWN1gP2I.roa (hash: r5UnkkjvCogYCq6Zu3PdGG9tZrgdqzPy7q2Pvmc7Y4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:df:6f:df:2e:dd:fe:82:6b:e1:1c:8d:95:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Sep 26 14:02:01 2026 GMT
Not After : Sep 27 14:02:01 2026 GMT
Subject: CN=d5b2706ec5c63b6fb1be6d2cdd0ffc8d8e1c5f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:93:53:cc:c5:6c:20:a6:25:83:af:fe:a1:
da:78:46:e9:74:27:4a:49:08:aa:f7:89:a9:b0:78:
50:96:43:40:1a:78:46:35:9c:9b:91:8e:02:fc:78:
c9:0e:1a:ce:84:0d:af:8c:58:05:67:f0:ce:f5:e3:
9a:19:5c:8a:10:d7:48:9f:29:91:9e:84:12:a7:aa:
7c:f8:56:a5:f4:0d:17:51:63:28:77:b0:94:b1:dc:
ad:e6:a9:c3:0d:af:6e:85:71:a0:5c:fe:7d:cf:1d:
ea:2f:1e:56:c8:5d:7c:f5:c4:c4:a3:ee:ce:a3:db:
92:53:d2:b9:29:31:d5:d8:7d:e3:d3:83:c0:5a:3b:
8d:ad:d8:00:83:6d:71:22:c0:8a:5b:4e:59:48:23:
b5:f0:a7:16:3b:2a:92:c7:36:64:b2:e9:6d:93:73:
85:16:9f:cc:9e:20:9d:49:6f:7d:52:48:24:ed:d3:
e8:a4:bb:92:7e:4a:7e:d2:6a:23:e3:95:3f:f2:15:
d3:51:27:eb:12:6c:47:92:4c:a1:f9:f8:36:75:87:
75:3d:eb:f3:c5:40:c1:db:d8:6a:62:80:70:a4:19:
ff:bc:5f:4d:c3:f5:cd:0f:7b:db:5e:6b:b2:9a:63:
93:b7:c2:8e:ae:11:05:d2:da:33:85:87:0a:d1:4a:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:70:6E:C5:C6:3B:6F:B1:BE:6D:2C:DD:0F:FC:8D:8E:1C:5F:88
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:74:ba:6a:78:24:bd:91:8f:f1:ca:b2:5b:1b:4d:50:78:23:
c6:52:30:2f:36:55:02:15:66:09:44:47:4d:dc:87:b0:d5:a7:
f0:36:e4:4f:b5:a1:cf:98:9d:6a:dc:13:95:1f:2b:9c:b9:2f:
53:b9:4e:ff:2f:18:3d:25:34:77:d8:90:a4:09:ba:39:72:76:
fc:5e:8a:2f:97:19:23:ad:16:0d:7d:59:fb:ae:3c:f8:d8:0d:
5f:6b:a9:29:36:61:30:b1:03:6a:64:77:63:cd:d9:d1:1d:c4:
4f:d5:6c:65:58:15:33:c7:1c:19:da:30:a6:11:3f:88:f3:fe:
97:89:df:16:4f:51:a1:63:b8:8e:0a:9d:27:fa:d2:b6:36:7b:
97:cb:ba:06:c7:ce:92:49:10:a4:4c:3f:d3:ea:80:bb:04:c9:
9a:af:12:16:f2:d9:30:7f:fd:4f:cf:e6:4c:67:60:fc:5c:90:
62:8e:0b:a7:23:d0:13:54:07:10:92:d9:49:dc:62:7f:8b:4f:
b2:77:69:de:00:c1:3a:ea:da:9c:76:98:f3:bc:29:fd:0c:34:
a4:00:b4:ee:63:0a:30:29:3f:ea:fc:2b:90:98:e0:d8:17:dd:
dd:28:02:8d:2e:ed:69:86:e9:05:9b:be:75:30:8b:53:71:98:
ed:82:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:38:41 2026 by rpki-client