Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: rqGvUIYUqbdGEHOucmC0hndwsHe1xPNhfo+5PzQfRQI=
Subject key identifier: 17:D8:09:7F:42:DA:81:D3:4A:BB:59:75:A1:40:45:89:CB:BF:A0:02
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 01A0CA7D7BE6B2C343E407AB803F08F7BCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 1114
Signing time: Tue 22 Sep 2026 19:00:16 +0000
Manifest this update: Tue 22 Sep 2026 19:00:16 +0000
Manifest next update: Wed 23 Sep 2026 19:00:16 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: w7D+/HOtAFyYdaejQcXUjuoZSysk9BVGFsXgeB7ls9g=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:7b:e6:b2:c3:43:e4:07:ab:80:3f:08:f7:bc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Sep 22 19:00:16 2026 GMT
Not After : Sep 23 19:00:16 2026 GMT
Subject: CN=17d8097f42da81d34abb5975a1404589cbbfa002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:8d:16:dd:b8:05:32:b0:25:9f:64:66:62:
e8:f2:42:89:a4:41:e5:df:71:d1:44:af:34:7c:d8:
b0:a6:c2:c7:fb:75:04:d7:7c:39:28:eb:e6:7e:e4:
19:8a:63:a5:49:37:a9:36:0f:59:a3:70:f1:b4:8d:
bf:d8:d6:f7:cd:64:1f:63:2a:b6:be:a0:38:98:bb:
15:f8:1d:d1:3a:4a:24:ea:75:db:63:75:68:b2:79:
0a:f2:b4:ae:2e:b0:c7:35:d5:46:30:39:cb:40:fd:
69:3c:95:4d:b3:b6:7f:51:0c:fd:51:31:a8:c1:c5:
b9:f3:b4:07:38:a8:5d:83:3a:b9:33:40:88:3a:66:
8f:1e:bf:75:cb:0b:66:6e:a7:47:f4:d6:69:19:85:
6c:4f:6f:58:fa:f6:68:88:36:a2:22:31:86:90:d7:
79:a2:06:17:56:d5:cb:af:63:88:e2:36:d3:fb:c4:
af:0e:94:48:e0:11:3a:74:fd:a7:18:b9:6f:a4:18:
2d:d8:a4:d8:4c:80:40:c5:5d:49:be:c4:8e:dc:d3:
68:de:db:32:fa:b9:65:e0:e7:3f:81:cd:52:42:29:
60:34:59:a5:76:34:0f:0c:bb:1e:2d:11:4c:ec:a0:
dd:91:0a:e6:cc:58:25:2a:3a:5a:e6:f9:8a:6d:8b:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:09:7F:42:DA:81:D3:4A:BB:59:75:A1:40:45:89:CB:BF:A0:02
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:24:7d:b1:35:79:16:ce:9c:31:36:f5:f5:3e:23:0d:7d:
57:3e:6f:f9:13:6e:a7:93:bb:ba:8e:13:b8:0c:3f:e7:6c:18:
6b:d4:89:99:ea:82:9b:74:dc:2d:65:1b:2a:a1:03:a8:5f:37:
55:94:19:f6:31:01:cb:96:ba:65:49:92:b7:c8:76:51:bc:fc:
ca:b8:29:69:26:16:0f:30:f4:4b:f6:ab:9f:bc:63:94:f3:8c:
1b:fa:dd:b8:39:7f:6a:03:40:74:77:d4:cc:55:f5:96:18:c3:
a1:34:8e:39:a7:86:a9:8c:35:a6:a4:36:49:d9:ec:81:89:ff:
c3:66:c6:5f:59:d1:b6:e0:85:d5:1e:d3:8b:ff:41:4f:59:b6:
23:41:17:59:17:5e:e2:f4:8d:91:9b:18:64:95:a1:c7:71:8c:
e6:a6:53:7d:9c:73:20:b1:b3:35:59:a0:61:55:b3:f5:67:fe:
85:ce:19:5a:e3:18:81:03:08:6a:4d:21:6f:09:26:73:b6:0f:
8a:49:7b:bb:b1:af:5c:44:f3:d7:82:ec:c1:0f:bf:b0:20:e5:
18:7f:70:3f:b9:19:80:fb:f0:4b:21:95:61:d0:c6:50:bb:a4:
a7:9b:8a:42:f4:94:ae:ac:4d:b2:44:d4:49:30:fb:9d:42:9d:
48:c5:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:52:11 2026 by rpki-client