Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: aQULOhvCoMC1veMnNnVe94XO16s6JQ9DJ+jHV5dqGXo=
Subject key identifier: B5:1C:EA:01:44:44:4A:CA:EF:AB:DD:19:BA:B4:EC:D7:49:D7:87:2A
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 01A0D07F942397A7FC2AFE39E997103E5EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 14DD
Signing time: Wed 23 Sep 2026 23:00:16 +0000
Manifest this update: Wed 23 Sep 2026 23:00:16 +0000
Manifest next update: Thu 24 Sep 2026 23:00:16 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: BgplZKu83Z+8JzWychVUJfsj5XLQyOPvk8pty0H6mes=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:94:23:97:a7:fc:2a:fe:39:e9:97:10:3e:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Sep 23 23:00:16 2026 GMT
Not After : Sep 24 23:00:16 2026 GMT
Subject: CN=b51cea0144444acaefabdd19bab4ecd749d7872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:1f:d8:65:ed:84:d7:53:86:28:15:fd:4c:
8a:c9:cd:11:a6:45:ce:13:15:56:64:09:ca:9e:f5:
4f:09:1e:1e:f4:fe:41:eb:4d:c2:be:13:0a:0e:42:
90:d3:68:9c:99:b8:57:dd:9c:68:68:6b:db:b6:00:
d5:ed:da:0d:b5:aa:5c:76:a0:d5:8e:3e:26:05:81:
4f:76:fa:d3:26:3c:5a:98:ca:8b:d5:c4:ab:5c:5d:
9a:9b:e4:d1:86:13:59:50:97:fd:c3:23:68:32:da:
69:a0:0a:10:f9:b9:b2:c8:6d:1d:be:9c:a3:3b:42:
e6:54:e5:3b:be:d9:b2:83:ea:04:f9:5b:79:71:c9:
3a:75:18:66:a9:1f:fd:91:ba:62:1f:45:71:fa:2a:
bd:08:8b:54:80:6a:06:8d:bc:cb:7e:43:a5:3a:70:
8f:8d:e9:82:c5:eb:00:6e:fa:48:06:72:08:d9:08:
fd:6d:3d:71:51:89:e8:de:9f:18:3a:60:05:58:a9:
cb:4b:a6:06:f3:e8:dd:22:ef:4c:84:8b:6b:ab:c1:
e6:08:90:50:84:46:6c:4c:9b:bf:bc:ef:02:7e:b8:
ac:e0:d9:1a:fe:ef:a5:69:e4:38:60:60:63:e2:ca:
f1:e5:76:d8:cf:19:ae:75:09:10:1f:8d:8b:be:fb:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:EA:01:44:44:4A:CA:EF:AB:DD:19:BA:B4:EC:D7:49:D7:87:2A
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:0b:b4:77:31:30:94:e2:df:9c:70:89:fa:6a:97:6b:54:
ca:92:5b:45:de:40:64:0d:3c:3b:85:0d:f2:68:3b:62:21:4a:
6f:ef:5a:e0:40:d3:7e:c1:22:89:ba:fe:ec:60:e3:83:30:92:
2f:b8:6b:90:e6:49:30:17:bf:b2:cb:de:b0:e3:87:af:08:a6:
b9:99:68:9d:f9:72:37:9b:eb:77:f8:b3:01:f6:d6:14:ed:e1:
9c:2e:44:33:be:b4:f6:27:fc:3d:05:71:51:f4:2e:b2:3c:46:
ef:5f:98:57:1e:a6:6c:5a:ac:e1:1e:cc:b9:6b:5a:d5:d3:dd:
a7:6a:d2:1a:7d:ee:41:d9:9a:60:fa:f9:28:9b:58:8f:03:0c:
de:84:e5:41:ee:7e:64:6b:cf:13:c1:0e:ba:c2:95:f7:60:f6:
42:4e:be:c3:e4:eb:d2:96:ff:67:71:86:ea:e6:63:a5:32:ca:
1f:22:cf:44:2c:be:ae:57:c5:7a:1d:e2:78:2a:b8:90:f4:60:
df:41:28:ff:78:1e:ab:44:ef:72:b7:0b:5e:0a:27:c4:56:f8:
8d:ab:c0:28:fd:43:f1:a7:e8:03:15:da:01:62:4b:91:e5:78:
df:1e:35:ca:94:92:8d:bf:7e:08:6b:ef:b0:65:ab:ec:35:be:
58:bd:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:53 2026 by rpki-client