Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.mft
File: 2uKEY2gMibGuVJj6GFnnL-u3H2I.mft (raw, json)
Hash identifier: 7n66sfUu/UqRcex/SF9ognfb7ntjxKJb305jF9Vkak4=
Subject key identifier: 44:EC:9F:22:D4:71:72:E8:5A:93:69:50:10:F3:6F:BF:DF:51:69:63
Authority key identifier: DA:E2:84:63:68:0C:89:B1:AE:54:98:FA:18:59:E7:2F:EB:B7:1F:62
Certificate issuer: /CN=dae28463680c89b1ae5498fa1859e72febb71f62
Certificate serial: 01A0CF6D6B75B43B68799552F4172B582445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.mft
Manifest number: 38
Signing time: Wed 23 Sep 2026 18:00:49 +0000
Manifest this update: Wed 23 Sep 2026 18:00:49 +0000
Manifest next update: Thu 24 Sep 2026 18:00:49 +0000
Files and hashes: 1: 2uKEY2gMibGuVJj6GFnnL-u3H2I.crl (hash: ZGupSlYu+RvlijXIofxjTtNl4A7eyJW0t8Z277D/jXg=)
2: TB6AmjrCcDjOma26-EzziML1HQM.roa (hash: 6UMHJAeesLjGOaBB0CVix8TmqtTesC83CO1Nm5pmLBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:6b:75:b4:3b:68:79:95:52:f4:17:2b:58:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae28463680c89b1ae5498fa1859e72febb71f62
Validity
Not Before: Sep 23 18:00:49 2026 GMT
Not After : Sep 24 18:00:49 2026 GMT
Subject: CN=44ec9f22d47172e85a93695010f36fbfdf516963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:b8:9b:fd:5c:ad:15:04:6a:ac:8f:ff:ee:
6c:7f:6c:23:94:95:c2:7e:de:45:84:0a:18:b2:2b:
ca:e4:aa:5a:e5:e4:dc:56:e5:1b:12:f8:64:0e:ad:
c1:b9:e3:ee:52:06:77:91:89:81:ed:b8:a7:4c:ce:
cb:78:9e:c1:60:a3:af:9a:03:ab:83:0c:e9:16:08:
a0:31:4b:05:24:17:58:f7:76:9e:06:99:39:8a:49:
7c:05:06:49:bb:a4:ca:86:35:98:51:74:1d:b2:83:
75:14:1a:8e:ad:2e:1a:82:67:af:a5:61:cc:ef:1f:
53:4a:79:15:ad:c9:49:f8:be:ec:bc:6b:63:eb:53:
23:4e:c3:a4:52:d4:9e:2f:2a:3b:f3:12:6b:dc:99:
e3:2d:15:e4:b4:bd:5b:9f:04:87:5a:c9:bc:df:4c:
3c:cc:22:d6:5a:b1:0a:fa:e1:b9:df:ea:0a:f4:dc:
f3:44:33:5b:88:04:8f:00:5d:72:2b:de:c9:a4:4c:
54:00:e4:71:f3:fb:f6:33:0e:27:55:27:6d:01:89:
f9:d9:f5:80:a2:75:71:3c:74:4c:a1:47:37:05:58:
d5:9b:35:28:49:de:65:71:d3:65:89:c8:42:98:ab:
19:e2:50:8c:3b:57:c1:78:21:06:73:d6:4e:99:4d:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:9F:22:D4:71:72:E8:5A:93:69:50:10:F3:6F:BF:DF:51:69:63
X509v3 Authority Key Identifier:
keyid:DA:E2:84:63:68:0C:89:B1:AE:54:98:FA:18:59:E7:2F:EB:B7:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:4b:42:5a:5f:e1:a3:d6:f4:c7:f5:32:1a:e4:7f:b7:c2:
be:b2:de:2f:47:04:7a:33:9f:03:f0:b6:1b:bd:cf:f8:7c:2a:
82:7e:67:99:65:7f:7c:60:56:63:c1:4a:2c:17:03:77:7a:b6:
c2:67:d5:ed:52:ff:f7:3a:ee:64:61:1a:48:d8:61:34:24:e3:
b2:32:71:be:f6:6e:68:9b:eb:9c:bb:df:b0:0e:31:36:bd:c4:
d2:57:96:48:d4:2d:2c:11:7d:ea:e5:4a:ab:87:d1:3a:07:6b:
a5:80:10:33:f4:12:cf:ca:c3:fd:44:a1:1a:63:34:6a:50:34:
9a:4e:8c:70:32:6c:c0:5d:14:1d:e0:48:1c:01:45:72:c2:6f:
36:f9:5b:c8:f1:c4:f4:3d:05:e4:f7:fe:9f:9b:cb:1a:2d:69:
3e:a9:a2:61:dc:04:30:df:4d:81:5a:25:23:31:6e:9f:1e:42:
f5:a8:63:9f:cb:d3:9c:d2:26:cc:aa:ec:e0:a3:95:f7:aa:88:
3f:83:e6:4d:61:92:08:db:a7:4a:d8:3e:cd:2c:a6:56:d0:07:
78:14:8f:2c:07:78:75:25:e0:a7:0a:aa:c1:5e:6d:92:24:5f:
f6:ee:02:f7:11:fb:42:21:83:8b:46:8f:49:af:36:43:00:00:
55:f5:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:01:06 2026 by rpki-client