Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: bnFEtM5D/BTd67oFZsrT0uw6GZeGXKhUClKyUYdhXIc=
Subject key identifier: 60:1A:02:02:B1:E0:56:76:35:B4:91:16:DD:8F:59:0F:95:D9:1F:A5
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 01A0D012BE2731E670F87FF9C4194977CA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:24 +0000
Manifest this update: Wed 23 Sep 2026 21:01:24 +0000
Manifest next update: Thu 24 Sep 2026 21:01:24 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: Fl8uYEJN+FYbDbS7nHoQztMBuPtjNH44MtGL1CqRO6Y=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:be:27:31:e6:70:f8:7f:f9:c4:19:49:77:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Sep 23 21:01:24 2026 GMT
Not After : Sep 24 21:01:24 2026 GMT
Subject: CN=601a0202b1e0567635b49116dd8f590f95d91fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:16:43:7d:5a:d6:11:12:64:fa:50:c6:4d:
d4:93:21:7d:92:86:4d:66:84:8e:33:5d:ff:27:5c:
4c:22:e1:35:6e:1b:0c:99:94:71:2e:52:05:5f:34:
ba:d3:6f:ec:11:c8:d5:a5:b3:90:28:a2:d3:86:e5:
48:09:8d:e1:c7:2f:9b:7b:35:3d:8f:67:fb:d1:ea:
bc:83:97:1c:77:90:f6:f3:4e:f7:83:10:98:a8:94:
c1:bd:14:b0:f2:36:92:99:e7:d4:f0:5c:d4:53:56:
6b:5b:3d:55:eb:f7:66:c4:e4:84:8a:93:d8:0b:de:
9a:8a:f4:f9:dd:e9:b6:22:63:0d:2f:5c:90:39:e6:
0f:1e:23:a7:5d:0b:d8:44:d6:b6:57:14:de:f0:0c:
ce:5e:d3:c1:67:e9:0b:bf:4d:85:e9:98:a4:4a:de:
8b:c7:d2:dc:d3:a7:5e:fb:4b:05:91:7e:de:1a:73:
f1:a4:19:e9:d0:44:c2:33:c9:50:bc:89:50:ac:d9:
4b:00:a1:f5:1d:8d:e4:ba:95:dd:4c:44:26:49:5f:
b0:48:52:9d:8a:3b:68:df:ee:91:7f:69:68:3c:fe:
f0:8f:26:b6:a0:b9:48:81:b4:70:2b:9d:95:9a:88:
56:98:11:07:8c:17:6c:f0:a3:8e:95:fb:2b:d2:30:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:02:02:B1:E0:56:76:35:B4:91:16:DD:8F:59:0F:95:D9:1F:A5
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:e1:20:f4:e2:de:9e:5b:24:c1:87:ed:7d:35:bf:bc:a7:
12:05:15:2a:1d:09:27:05:9f:f1:f5:0f:f7:2a:b5:ae:4f:10:
bb:88:f5:be:51:af:23:1b:af:a5:de:a6:d7:3a:4f:7e:4f:48:
b9:24:ea:30:67:e5:3a:19:d5:d6:4c:e7:ff:61:48:04:fd:8d:
57:ee:b7:8b:76:d5:a4:19:be:04:d1:86:c0:8d:20:c3:8c:33:
aa:28:0b:70:fb:f1:03:5f:f5:85:0f:f7:e4:4c:a1:e7:90:25:
4c:26:53:1f:57:d9:e4:ef:21:02:d3:cb:5c:3f:d6:03:fa:64:
43:d7:7b:1e:79:64:d9:52:21:97:db:30:78:b2:8a:d2:05:65:
c7:bd:6e:fc:ee:47:b5:c3:14:71:6c:d4:b0:ab:fa:0d:47:2f:
f7:a6:16:11:11:51:53:ce:f9:7a:29:51:e4:f2:54:6e:bb:2a:
9a:6f:4c:41:59:11:7a:92:50:32:ea:56:dd:5b:a5:f5:14:f4:
e9:89:e5:cc:33:0f:8f:22:e4:4d:b7:bb:12:16:a1:43:11:bc:
10:07:db:d2:65:cf:5d:f2:09:f4:0f:d8:eb:4b:d2:d6:93:b3:
81:87:50:5c:c9:73:c7:e3:84:eb:aa:61:d6:20:0d:cb:37:ca:
dd:ea:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:28 2026 by rpki-client