Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: gKNRXEwBic3rNzjYjQsZzLYBcGWA1DObHyvowCnhkn4=
Subject key identifier: E9:52:15:DD:05:41:37:7D:21:55:2E:4A:17:E8:86:3B:A7:7F:B0:E9
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01A0D426E2A054BF3976C2E2BBD239E84812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 16:01:53 +0000
Manifest this update: Thu 24 Sep 2026 16:01:53 +0000
Manifest next update: Fri 25 Sep 2026 16:01:53 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: JCyqgs+aemQBRGC0gkdshLffPVQBaIV1CPYOnIPD0uQ=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:e2:a0:54:bf:39:76:c2:e2:bb:d2:39:e8:48:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Sep 24 16:01:53 2026 GMT
Not After : Sep 25 16:01:53 2026 GMT
Subject: CN=e95215dd0541377d21552e4a17e8863ba77fb0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:ea:0a:5f:02:ff:98:1d:c3:1f:a3:78:26:
a2:7f:77:f7:99:67:46:a7:5f:44:e1:87:08:dd:f2:
7d:20:25:25:d2:14:06:2a:c3:56:fd:f6:13:17:ff:
93:09:4a:1f:19:51:2b:21:a3:7f:52:4b:dd:22:f6:
9f:e7:07:81:45:94:93:67:89:83:f2:70:65:f9:4d:
90:fd:da:92:2d:6b:4a:70:6b:36:71:73:b7:6c:d3:
71:e0:5d:7e:a6:14:30:68:e9:93:c3:29:07:b7:2a:
93:63:29:62:27:55:24:c7:15:d9:32:b9:29:88:b8:
ed:87:1c:7e:2c:32:fd:95:7c:b4:35:94:11:ec:00:
f5:ea:4f:1e:c2:30:3f:cf:2f:cc:91:4e:23:5a:80:
fb:a3:0d:09:b8:45:f4:9a:00:45:a9:37:ee:80:06:
86:59:6f:9a:61:d0:a2:fa:1c:13:b6:ff:c7:a6:0d:
d2:33:31:4a:f4:49:40:e6:72:bc:f6:44:95:b7:1e:
8d:21:5b:1b:16:7c:dc:74:76:89:a9:8d:f6:79:1b:
c0:59:b0:04:da:0c:20:8f:aa:99:5e:14:cd:96:f4:
49:11:92:43:1f:98:d4:4c:ba:bc:b9:cd:b0:6c:c3:
bd:11:24:df:bd:0a:f1:a3:26:4e:84:c3:69:4d:35:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:15:DD:05:41:37:7D:21:55:2E:4A:17:E8:86:3B:A7:7F:B0:E9
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:20:6b:18:a1:41:f2:a9:f1:0b:80:00:62:ae:97:4f:fe:bb:
82:ba:3e:32:32:ad:ac:00:01:80:7e:35:1b:f7:aa:90:66:99:
55:5a:96:68:25:33:9d:98:dd:da:9e:3e:3e:e0:f8:de:5b:a9:
87:7d:1d:a8:85:01:9e:92:38:4f:77:90:a7:ff:c3:c9:dd:ec:
6c:6b:19:99:41:91:3c:5c:5d:3a:fb:d1:8f:37:fb:c8:4d:ff:
35:d3:bb:46:05:e6:f5:35:ae:a7:0a:af:96:50:fa:e2:33:66:
ce:2e:ee:00:c4:b6:d2:b4:6a:30:0f:96:d8:cd:fd:a5:aa:93:
e6:82:69:c2:43:a7:e9:4e:93:cf:b7:23:92:68:b8:8c:1d:95:
e0:a7:e1:3c:97:45:f7:ff:43:d6:76:8c:9c:97:08:e0:1f:5c:
9c:52:1a:df:cf:ac:29:c3:f2:16:48:e1:98:f3:d5:d2:a6:4e:
06:65:75:ec:d5:8e:ae:94:ea:61:a0:e4:23:0c:be:97:74:61:
ba:e1:d6:a9:fb:5f:10:35:49:2c:6b:b6:2a:5a:8c:31:c9:5c:
db:42:b3:2b:d5:97:7c:c6:47:ce:18:c5:82:7d:2a:dc:63:a1:
88:66:e1:24:17:c1:c9:c6:b2:6d:5b:16:ca:5b:99:1d:c9:4d:
90:bc:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:22 2026 by rpki-client