Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: PY2QcDlHqGkUKTNTQ3syasMFONE924hOL7Q46GFveP4=
Subject key identifier: CB:32:84:ED:B1:62:DC:2B:F4:54:73:9C:DA:33:66:E0:77:4F:16:DF
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 01A0CEC846C8B6434032E43176220C7C474E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0DEE
Signing time: Wed 23 Sep 2026 15:00:26 +0000
Manifest this update: Wed 23 Sep 2026 15:00:26 +0000
Manifest next update: Thu 24 Sep 2026 15:00:26 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: l1VeEub6UrJxGrwCxZw3joWJWFMvNkIeOaQMZx9FYBQ=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:46:c8:b6:43:40:32:e4:31:76:22:0c:7c:47:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Sep 23 15:00:26 2026 GMT
Not After : Sep 24 15:00:26 2026 GMT
Subject: CN=cb3284edb162dc2bf454739cda3366e0774f16df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:9e:ed:c3:d3:e3:c0:db:a8:78:ef:e8:15:
86:dd:fd:79:a7:24:79:fe:e0:1b:17:38:33:65:a4:
7e:f6:00:af:8c:bf:2f:5b:ad:2f:1b:0c:a9:76:c9:
13:01:21:85:40:56:83:02:a4:0f:3c:ce:e0:e5:91:
f7:d6:4d:96:05:0a:13:c0:0a:0c:2d:dd:19:05:3f:
db:57:6c:33:31:07:6a:9e:f0:db:0c:b9:b2:0c:ae:
5b:1a:b7:c3:5b:0e:6f:ab:00:d6:41:0d:b4:54:72:
70:0b:9e:f5:60:a3:d8:74:b7:36:0d:0d:a8:2f:18:
94:ee:74:60:78:a4:1d:30:09:51:c0:1f:0f:1b:9d:
9f:39:92:ea:57:1f:26:41:c6:48:9c:e0:e4:a0:f1:
43:52:84:fb:e5:f1:29:ff:b9:20:6d:95:b8:2c:fd:
01:3c:39:28:d4:b6:bf:d1:8e:9f:96:3b:f5:47:8a:
af:4b:d1:bc:e0:d6:6f:0d:f6:33:31:2a:1d:92:e2:
e4:a6:fe:71:83:d3:e9:4f:44:c5:83:41:55:06:36:
fc:8d:79:8c:86:15:f4:00:23:d5:ba:d3:2d:15:97:
27:45:6d:59:c7:82:5f:c6:a4:e9:df:96:3c:f2:c8:
1f:66:7e:3b:40:5d:8f:21:92:e6:06:a3:7b:d5:c4:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:84:ED:B1:62:DC:2B:F4:54:73:9C:DA:33:66:E0:77:4F:16:DF
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:70:18:3a:2a:8a:38:c0:57:ff:09:93:76:97:0b:cc:01:
7a:11:3c:bc:cb:1d:45:ea:b3:1c:5d:18:83:92:11:3b:73:1f:
09:9c:6e:67:50:49:36:e9:dc:43:a1:fc:09:9b:22:40:5c:f3:
34:5e:fa:61:d0:5c:26:0c:c3:59:34:fa:38:24:b2:45:b8:5a:
7f:b8:a3:d8:70:85:b9:9d:57:b7:a0:bf:9a:cf:d6:c8:5e:32:
7e:6d:1f:be:a9:7f:e6:ac:b8:f7:5c:1d:c6:0d:de:35:3c:6c:
57:51:35:09:ed:0b:1a:71:6b:14:a6:da:f4:a0:86:cf:56:8b:
b3:94:97:f4:21:12:da:14:ad:f1:41:44:39:4e:2d:c0:b6:07:
d6:e5:a3:b7:a2:37:54:46:99:c6:de:6b:2f:b0:f0:5b:91:39:
ac:e7:5c:b2:19:4a:ee:bf:ed:8b:1c:48:33:68:24:7c:0c:0e:
fe:f1:db:7d:69:20:ea:d9:09:38:5e:9f:33:22:de:63:e8:a3:
68:f9:6b:a8:55:8f:fa:b3:78:a6:b5:bc:4d:57:0f:7d:65:79:
93:8f:a1:5e:59:61:b6:d2:7b:2f:23:84:31:af:89:e6:c1:59:
9f:d5:5e:01:bd:0d:c7:df:12:8e:48:5c:6a:02:05:c2:63:b4:
0e:e1:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:58:12 2026 by rpki-client