Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: kM17GHv66VWBdFip0ERNw/5D45/J2Ve6IeQOKHMj3tM=
Subject key identifier: D7:0D:CB:3D:34:A8:ED:94:D3:A4:B0:ED:C7:9F:E8:6D:8C:72:0B:46
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 01A0DFBC9434BE1C50FF1A9B29CA751488BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 1065
Signing time: Sat 26 Sep 2026 22:01:12 +0000
Manifest this update: Sat 26 Sep 2026 22:01:12 +0000
Manifest next update: Sun 27 Sep 2026 22:01:12 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: LR6wNqSsJooXE6Ns4T+wRfKjrWJyEEmtA3gRGe9Dpvo=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:94:34:be:1c:50:ff:1a:9b:29:ca:75:14:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Sep 26 22:01:12 2026 GMT
Not After : Sep 27 22:01:12 2026 GMT
Subject: CN=d70dcb3d34a8ed94d3a4b0edc79fe86d8c720b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:05:71:70:5e:f4:2e:3c:c0:f3:95:4e:f8:
5b:1c:eb:4d:81:ee:f9:86:8e:25:36:d7:f6:1f:7e:
98:05:87:42:0f:37:49:07:b4:13:37:c8:a4:17:47:
15:d1:16:0b:b4:ef:78:a7:5f:61:86:80:8c:4a:1c:
81:61:4c:ba:80:bf:c6:3e:9a:66:ec:40:18:e0:63:
0a:0a:3a:fc:61:fc:9a:12:c8:8e:98:16:c2:3d:4b:
43:c3:29:3b:72:ac:14:7d:17:25:15:bb:20:ec:6d:
d5:5e:ab:48:03:55:0d:de:41:d6:83:d7:0e:38:51:
16:94:d8:1b:3f:6a:5b:81:e7:4b:08:f2:2e:fa:5c:
ea:cd:1d:1e:6a:fb:a3:f4:d6:68:4d:2b:a2:78:7f:
7c:62:54:67:0f:ed:d3:89:18:aa:ab:ae:8e:d9:5d:
c3:e2:54:a3:f9:22:e1:77:ce:3d:58:0c:ce:5e:33:
2d:53:df:53:f8:4f:b1:3b:33:52:b7:94:58:f6:f5:
f1:5f:43:89:e6:f3:d1:0f:75:41:b4:6e:83:0c:80:
51:80:33:94:2d:99:80:e8:6f:00:9c:ee:b6:6c:cc:
a5:07:ff:93:d3:48:ce:f7:2d:f3:b1:02:32:66:5f:
c4:ba:95:ab:1a:fc:63:37:21:2b:a1:69:72:88:1d:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:CB:3D:34:A8:ED:94:D3:A4:B0:ED:C7:9F:E8:6D:8C:72:0B:46
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:28:1b:09:30:c1:05:e8:45:76:a3:34:fa:bf:44:d7:17:
90:18:87:d7:65:01:f7:e5:ef:99:a6:aa:d5:2c:d4:50:47:4b:
81:6c:71:0f:a8:ec:84:55:65:55:a3:e0:78:20:6a:03:01:08:
96:6b:30:99:28:9d:36:d1:89:fc:e7:c9:6f:60:7b:aa:ac:65:
45:44:6b:07:ac:1c:ba:0b:4f:93:91:ef:80:b6:c5:18:1d:ef:
83:51:6d:81:4d:4a:ed:81:b9:52:9c:02:8c:67:fe:00:93:68:
a5:e1:f6:46:79:ee:1f:42:bb:60:d5:8c:6b:f4:ea:d1:76:95:
eb:09:c3:fc:7c:14:27:13:42:4f:1e:2e:22:55:ad:10:ca:3a:
32:12:b5:83:53:a6:91:73:55:58:c4:bf:49:7d:85:25:3d:25:
a9:e0:01:51:a2:d7:60:0d:23:f8:f0:21:b8:e6:cf:4a:80:4e:
28:4a:50:56:8a:55:e7:b6:8a:24:fd:89:0f:22:d7:ee:04:a0:
31:85:25:d1:53:b5:ec:04:90:26:78:d1:6d:eb:7b:b4:fc:82:
76:69:de:71:84:10:ea:12:25:a1:14:1c:9f:27:1f:8a:87:cf:
eb:c0:9c:14:2f:98:d5:0b:79:d2:91:8c:f4:1f:54:54:d0:65:
20:df:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:34:06 2026 by rpki-client