Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: MuqrN37FAwXjzVY0gI0hO9sphZ+oc2qHjPiaRFTocxE=
Subject key identifier: 5D:23:9A:38:D9:63:3C:2E:A4:6D:BD:D5:DF:0F:77:41:F0:EE:5A:E1
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 01A0D26EB48B201E2B392F10C8D3B23BFCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0BCC
Signing time: Thu 24 Sep 2026 08:01:05 +0000
Manifest this update: Thu 24 Sep 2026 08:01:05 +0000
Manifest next update: Fri 25 Sep 2026 08:01:05 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: 28unQYKNLPCG2T9S0lGJl9Akxtsa5/UMghUP2PJY4jg=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:b4:8b:20:1e:2b:39:2f:10:c8:d3:b2:3b:fc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Sep 24 08:01:05 2026 GMT
Not After : Sep 25 08:01:05 2026 GMT
Subject: CN=5d239a38d9633c2ea46dbdd5df0f7741f0ee5ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:ee:13:73:22:a2:97:7b:3e:80:6c:b5:17:
e4:6e:0d:81:6a:ac:7c:7c:ed:e3:81:9d:81:0c:1d:
61:92:51:7a:77:3e:af:82:8d:0e:10:26:89:2a:0b:
e3:a9:c0:3a:18:b9:66:8e:f6:80:f5:61:be:8a:42:
e4:f9:cd:34:4a:d6:22:44:ec:2f:84:c2:51:c7:84:
1d:d8:ce:d9:7f:32:d8:06:40:73:32:40:11:ea:10:
47:97:77:46:77:19:cf:70:f3:a0:88:b1:08:36:9b:
1f:eb:f5:92:ce:58:49:9d:c6:a0:98:31:53:66:07:
4b:61:ed:8d:2c:00:89:13:87:75:4e:95:25:94:bf:
87:6a:d0:33:c3:48:42:b1:a4:3f:1e:1c:8a:90:22:
fe:8a:55:63:24:15:40:72:84:c4:d2:2d:7c:f0:07:
60:3e:5c:f5:c7:23:1e:32:0f:f9:a5:99:95:04:f3:
ff:ac:6a:7e:ea:42:9c:52:99:f8:14:9d:f3:83:d3:
07:6e:3b:29:f0:69:1c:09:d6:84:a9:29:4f:28:cb:
71:c1:82:34:3f:8e:a4:9e:d6:f5:8c:f7:38:3d:57:
75:65:8f:0f:34:5b:0f:34:76:4e:52:3b:eb:ff:b2:
3f:07:8d:6c:58:9d:6d:db:26:45:90:0f:cb:f6:9c:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:9A:38:D9:63:3C:2E:A4:6D:BD:D5:DF:0F:77:41:F0:EE:5A:E1
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bc:49:53:e9:f3:aa:22:2d:d4:2b:e1:79:0d:b0:a9:a0:4f:
81:de:e6:e8:7b:4e:d5:90:68:4e:3c:b8:69:8f:51:50:31:f9:
ca:d7:6c:37:f3:2d:56:1a:a2:b7:41:92:38:ae:c8:69:08:35:
5b:e4:43:46:0f:d3:8b:d2:cf:79:4c:d4:e8:84:56:09:25:d9:
a2:1a:d5:e6:a0:8f:20:24:02:18:c1:79:49:8a:9f:a5:c2:64:
61:28:84:fd:6f:44:7b:93:91:eb:e1:43:9a:e8:87:e7:2c:81:
e8:0c:74:04:55:c4:1e:0b:06:4c:99:24:04:8a:d9:bc:6c:ab:
28:f6:26:49:2a:44:8a:02:12:20:c9:70:d7:32:49:cf:17:60:
b8:fa:ed:cb:da:a4:63:09:bf:70:0e:aa:e6:ba:f1:fa:3f:c8:
0f:bd:6c:a3:12:f5:80:6b:4d:b6:47:d3:89:61:94:b1:ba:eb:
84:8d:0a:e0:ae:cc:fb:ac:52:68:d9:56:bf:9f:d0:41:60:ed:
3a:22:55:42:18:11:1a:e8:3f:34:fb:7c:02:6d:c6:e3:6d:05:
71:c8:95:cb:39:ae:5c:d6:e6:d9:33:3b:84:d3:5b:b1:30:3c:
5e:19:48:1e:49:14:13:26:ec:fd:0f:2f:36:85:81:a5:96:bc:
6a:b2:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:53:31 2026 by rpki-client