Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
File: 2UivxK9I3Sso6FSZZFe04qhDTWE.mft (raw, json)
Hash identifier: l4iSY/IlPaL7hR0Pmry67bpdPD4YyWsFw+EYd9sm7ok=
Subject key identifier: A7:C1:AC:67:B4:29:78:30:0E:58:D1:65:D2:15:D6:9A:56:0D:45:BC
Authority key identifier: D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
Certificate issuer: /CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Certificate serial: 01A0D7600E660D71BC2BC122E02156705423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
Manifest number: 01FC
Signing time: Fri 25 Sep 2026 07:03:11 +0000
Manifest this update: Fri 25 Sep 2026 07:03:11 +0000
Manifest next update: Sat 26 Sep 2026 07:03:11 +0000
Files and hashes: 1: 2UivxK9I3Sso6FSZZFe04qhDTWE.crl (hash: Gz852kHzvq0Y+1EAJSRTYJuDoMm4timPVCG0/UCLC+0=)
2: UO5esvuscm_Muh0KmfgSRLz3jvA.roa (hash: Eg2xdzCBLccjbkg/73TIkrnL2S4mi3j1eD98e/h7Rpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:0e:66:0d:71:bc:2b:c1:22:e0:21:56:70:54:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Validity
Not Before: Sep 25 07:03:11 2026 GMT
Not After : Sep 26 07:03:11 2026 GMT
Subject: CN=a7c1ac67b42978300e58d165d215d69a560d45bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:2b:3b:c0:f5:48:a3:c0:c6:ac:47:33:91:
ee:ba:59:11:27:af:d6:09:0b:3d:9e:b9:f6:1c:08:
f5:6d:50:ee:e9:a5:fc:5f:ab:8e:6f:31:05:9b:43:
0a:42:1f:72:18:37:b0:35:85:b9:e0:5f:30:50:23:
ee:c9:e8:66:d0:b5:6b:16:53:d6:23:89:eb:43:f1:
4d:5c:ec:8a:04:42:29:bd:d6:7f:33:e9:df:41:1d:
b3:30:a4:75:51:55:90:6c:69:3d:b4:fb:7d:8d:0a:
23:6e:02:11:2f:32:ff:e5:c2:ca:ad:6b:13:ff:0a:
9a:5b:82:e1:df:30:55:33:73:6f:be:56:98:20:02:
e3:45:71:20:56:a5:1c:cd:e8:59:00:31:94:98:b5:
00:b7:55:c0:a8:91:4e:f4:8c:72:7e:65:4f:c2:c4:
ed:94:6c:90:96:a3:38:0e:42:d0:9b:4c:9f:50:9c:
75:84:5c:96:b3:b3:74:3b:dd:c0:11:94:19:07:9b:
c0:a1:46:85:40:6a:87:2e:74:77:a6:f4:eb:41:6e:
fd:05:e1:5a:ec:14:78:45:f2:ee:f9:f0:2a:4e:7e:
43:b3:df:0d:41:15:65:7d:c7:13:b0:ec:3c:3a:94:
86:fd:9d:a6:6a:9f:b1:69:f6:a7:4f:28:a1:bf:25:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:AC:67:B4:29:78:30:0E:58:D1:65:D2:15:D6:9A:56:0D:45:BC
X509v3 Authority Key Identifier:
keyid:D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:69:59:7c:ba:6e:98:8b:13:ab:a3:84:ca:f7:5e:cc:80:e1:
8d:b2:ac:28:ea:b2:24:b1:19:7a:06:50:b6:45:c3:1d:bd:ea:
36:40:95:08:82:9d:88:6e:89:29:91:1d:e8:70:14:7a:9d:0f:
b3:e3:b2:19:41:e0:c0:6f:37:90:d6:87:ea:35:e6:f2:6f:cd:
ab:13:66:32:2b:aa:62:be:a0:92:63:e0:2c:f9:10:62:3a:07:
9b:59:73:8b:91:08:47:ed:81:fa:fb:e7:22:ed:a8:91:68:0a:
9b:df:8b:11:ef:87:50:f4:ba:70:cc:4b:59:11:4a:53:99:35:
7e:e2:9e:92:bb:5d:72:ca:8f:5d:48:15:1a:42:46:1d:69:5a:
ad:f0:cf:31:4c:36:76:5a:ea:19:04:06:a1:1f:d4:f4:ff:3d:
9b:1e:f7:50:53:86:ad:b9:5e:cc:5c:1a:49:c3:b6:8a:3a:53:
53:86:db:81:c2:ff:1f:83:0f:70:a5:09:d6:72:9f:ad:4b:ed:
8c:f8:86:22:ff:c9:4e:dc:f1:19:d4:a4:88:13:c4:07:4b:fa:
15:32:00:da:e6:17:dd:df:7a:8e:05:be:54:64:24:15:4f:70:
34:55:73:32:fd:dc:89:d2:89:15:13:58:18:ec:cf:a9:0f:4f:
0a:72:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:57 2026 by rpki-client