Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: OnCVzmVEEhBdkoFSnHEBrtaN2WSQbRbKy4jOUoAZ1+c=
Subject key identifier: A1:D2:30:DD:AA:61:C5:07:38:8C:C6:96:85:7D:5D:CF:DD:42:17:13
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 01A0C8FD3F4E1E6F2F67CD5A197C9ADFAE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 16CF
Signing time: Tue 22 Sep 2026 12:00:35 +0000
Manifest this update: Tue 22 Sep 2026 12:00:35 +0000
Manifest next update: Wed 23 Sep 2026 12:00:35 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: f3/mU8RhglY0h83BuYN9KnDhibBL/YunsryyKA4dk4M=)
2: Mvg3Mo5WSYjcX-Icj2bidj2_crQ.roa (hash: vVq/Mz8wGpzyBjkk9cQ+W/VRqd2BvaRyhDgc817bfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:3f:4e:1e:6f:2f:67:cd:5a:19:7c:9a:df:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Sep 22 12:00:35 2026 GMT
Not After : Sep 23 12:00:35 2026 GMT
Subject: CN=a1d230ddaa61c507388cc696857d5dcfdd421713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:1f:a6:56:80:b2:4a:be:ec:3c:98:23:4c:
df:f6:47:94:b5:88:82:7f:d2:f4:59:79:7f:8c:24:
2d:b9:ab:4a:66:cd:fc:71:92:09:21:be:bf:7d:b6:
7d:c2:74:e9:84:ec:3b:bf:18:43:1b:7e:34:50:89:
f8:be:fd:e3:c1:b1:b8:09:58:c1:a3:e0:d9:6a:51:
f1:38:be:80:94:89:4c:4a:ae:67:7d:f1:98:ff:83:
a1:0f:95:47:c7:40:f1:36:7c:f9:b2:12:84:e1:b1:
5a:40:35:e6:15:ee:dc:d3:44:84:f2:1c:65:b4:b2:
03:cc:45:27:eb:9b:19:6d:8f:68:ee:b3:c2:48:df:
ae:8a:62:80:de:0f:60:61:99:fc:b6:c8:ae:21:74:
68:91:b3:95:16:f3:21:92:a9:7d:cd:a4:fb:10:03:
a5:b7:aa:51:f9:6f:50:da:84:0e:96:0f:27:2b:ea:
27:2a:3e:6f:c7:8a:e7:c1:aa:84:e9:39:65:60:c2:
cc:53:bf:6e:b8:59:94:01:f6:1a:66:20:d3:27:67:
ae:8a:03:eb:18:4f:5d:1e:85:58:03:55:27:13:2e:
50:ff:0e:fc:2a:a5:d8:f3:67:d0:6c:8e:93:05:b6:
b4:b8:ed:e4:9d:87:a3:66:8c:5c:bd:66:20:fe:40:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:30:DD:AA:61:C5:07:38:8C:C6:96:85:7D:5D:CF:DD:42:17:13
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:27:ca:c5:0f:6f:a3:81:7b:fa:d8:94:24:a5:07:2c:ea:50:
5b:18:0f:23:4f:20:7c:52:8a:9b:29:c9:e9:2c:25:81:8c:81:
1c:38:d0:86:de:6b:ba:18:e1:a5:ad:bf:4c:69:2f:d3:c1:ac:
98:9f:6e:b1:1b:b7:91:b1:3a:8f:8c:19:19:95:a2:4e:36:ef:
97:d4:2a:39:66:72:00:ef:5b:34:29:39:10:19:e5:fb:d7:87:
4b:41:57:1b:dc:2a:70:94:dd:77:2e:bd:19:12:c9:6a:5b:57:
47:50:06:33:c0:8f:8a:bc:97:4a:33:c9:b7:ef:b0:ba:99:19:
6d:1b:ef:23:51:54:f5:96:b9:01:3e:d5:5f:c5:d1:b7:60:6b:
42:f3:3e:40:85:45:06:b5:e5:15:7e:e9:22:9f:43:7b:a6:5d:
e2:40:0f:92:1e:29:6f:a2:0e:10:3e:01:83:6c:1d:48:21:d2:
95:e9:b0:97:e7:4c:8e:8f:c1:dc:32:78:ce:d6:b2:bc:31:0f:
e2:04:2a:05:08:9a:6e:ef:94:7f:4d:81:7d:77:e6:26:e2:6b:
73:b5:1d:09:1f:3e:a7:de:a6:9e:f4:db:23:d9:14:28:b6:86:
d4:83:64:12:91:eb:6a:ea:e1:df:fc:26:cc:8e:33:65:c7:0a:
5d:56:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:55:40 2026 by rpki-client