Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: 1AJZCvDOcmi0ZmKGgXbp+CBTnyWAk/kCU5gsC7ooAyc=
Subject key identifier: 76:96:56:6D:C1:4F:90:39:B8:75:D4:D3:2F:D4:71:34:15:35:3D:FA
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 01A0D9839EDB1A4AD9E811ABD96882947BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 0326
Signing time: Fri 25 Sep 2026 17:01:16 +0000
Manifest this update: Fri 25 Sep 2026 17:01:16 +0000
Manifest next update: Sat 26 Sep 2026 17:01:16 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: N1MSwFrAhl7XOEJDa5OjrQ8jMTNCp0mr9s697z14Pmw=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:9e:db:1a:4a:d9:e8:11:ab:d9:68:82:94:7b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Sep 25 17:01:16 2026 GMT
Not After : Sep 26 17:01:16 2026 GMT
Subject: CN=7696566dc14f9039b875d4d32fd4713415353dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:a3:40:18:17:e1:a9:25:e3:16:5b:da:27:
d5:dc:d8:37:8a:fb:cc:b7:0e:2d:fb:39:6c:1b:ff:
70:9a:c6:4d:1f:3a:46:f2:62:a9:70:12:0d:b3:b1:
78:86:5a:c3:5f:0e:3a:d6:67:a8:38:46:e4:9d:f7:
ec:7e:07:a7:ec:9b:37:52:69:88:66:e6:dc:60:f1:
20:c0:e5:20:e5:e0:cf:14:98:1c:f1:f8:ac:ca:f4:
af:f2:f0:10:0d:0e:6f:a7:1c:f3:61:69:7b:c2:cf:
7a:a2:fa:64:5e:a8:e0:a6:b7:39:74:13:d4:18:23:
3b:e1:01:14:54:44:2c:64:cf:65:ba:54:a2:10:5b:
4b:6b:ec:de:a9:5a:77:8b:a5:ba:d0:31:98:8c:15:
d1:6e:0c:11:1c:cb:32:09:ae:03:31:b5:59:bf:7e:
93:62:2d:e5:ba:02:88:b3:40:a7:1f:c4:93:1f:69:
a5:b7:05:f7:b7:1c:a5:bb:43:79:06:9c:61:7e:b1:
e4:e4:26:e2:56:0e:51:62:1f:7f:dd:50:ab:6f:18:
b9:d0:bd:66:e2:71:ac:3d:fb:11:fb:ca:96:cf:63:
cf:8e:5e:17:c5:1e:19:96:5a:12:ea:d2:b4:f8:68:
ab:15:ad:ee:3c:d4:0f:de:ff:29:bd:b7:61:33:4d:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:56:6D:C1:4F:90:39:B8:75:D4:D3:2F:D4:71:34:15:35:3D:FA
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d9:6c:35:01:ff:cc:28:e0:9b:50:98:ab:d0:70:38:cd:4e:
b5:a1:26:7e:41:a8:d3:64:96:fa:f5:c3:4e:2f:12:f9:2b:f0:
6d:99:70:f9:73:d9:69:04:a6:29:6d:6d:87:9b:18:49:9d:24:
30:79:10:ed:03:0d:5f:bd:15:8b:66:d2:2a:c5:e4:d9:b7:13:
1b:16:27:c3:f3:bf:30:9f:e7:a6:db:e7:d8:85:f3:73:32:31:
8b:ff:6b:71:e6:29:96:c9:91:8e:d5:54:de:d8:6e:d8:2e:f1:
00:54:59:4f:8b:fb:c8:29:ea:e5:fd:f4:21:73:6e:72:91:01:
dc:2d:6f:55:5b:7b:2e:78:d2:79:58:33:2c:9c:a8:b0:57:3d:
85:82:66:18:5e:de:c0:f9:36:99:8f:88:0d:6c:be:e5:78:ff:
33:97:6d:51:2c:ad:bd:3e:01:26:fd:60:dd:2d:fb:dd:3b:48:
ea:ca:8f:ab:0d:cc:55:3a:2e:86:2c:73:4b:77:cd:a3:62:c6:
1a:1c:b1:3e:55:48:98:fa:60:a2:fb:96:94:63:e5:69:79:c3:
01:d0:1c:f6:22:be:77:f4:0b:17:3a:30:6c:21:2a:5b:5a:51:
c0:9d:f5:23:2c:ba:6a:d8:b2:e5:44:23:50:80:39:45:4e:bf:
08:2b:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:56:40 2026 by rpki-client