Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: lD/Q8CF4FA3a6TF1xUvrUd1OZl6woA5dS/FXDxT4GXs=
Subject key identifier: C0:15:04:C3:FB:EA:42:CF:CD:6A:FC:3C:DC:BE:C3:A5:1A:AB:71:28
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 01A0D07FEB2C9E52E2D863D00F7446E98DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0C14
Signing time: Wed 23 Sep 2026 23:00:39 +0000
Manifest this update: Wed 23 Sep 2026 23:00:39 +0000
Manifest next update: Thu 24 Sep 2026 23:00:39 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: y2RPg7Epn5KVPlXG0lnwKO2Q36pLz1R9lpMiOMFz8Ys=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:eb:2c:9e:52:e2:d8:63:d0:0f:74:46:e9:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Sep 23 23:00:39 2026 GMT
Not After : Sep 24 23:00:39 2026 GMT
Subject: CN=c01504c3fbea42cfcd6afc3cdcbec3a51aab7128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:2e:51:91:c9:0a:75:23:bb:42:51:40:4b:
1f:e9:a7:8f:8b:ad:08:0e:57:51:86:d4:71:12:8c:
7b:49:66:13:90:13:78:70:94:60:50:96:42:46:16:
6f:7c:1b:5a:c5:ff:08:3d:53:46:b1:96:23:c7:34:
f9:4e:31:a1:b2:82:dc:f5:63:2f:36:47:9d:5f:3b:
60:8a:12:f0:35:2f:53:87:20:1b:5f:d1:75:5b:da:
d6:62:9e:a3:9f:b8:d7:2c:ce:cc:9a:bf:47:0d:d9:
5c:bf:28:18:a1:a9:75:2d:a0:2f:90:33:4c:04:7e:
23:10:75:7b:01:75:7d:ca:c6:9f:88:77:df:3b:4c:
e2:54:4e:5b:0c:34:c6:c7:7a:d0:63:b4:26:bd:45:
e1:1c:5e:76:cd:57:bb:58:28:45:44:6c:3a:91:99:
fa:ca:e7:d0:c1:82:d0:07:f9:f8:5a:74:b0:df:37:
da:7e:51:39:22:0b:ee:e3:53:b3:a1:8d:dc:82:50:
7b:e0:97:01:c6:56:9d:01:36:08:4d:71:90:c2:a1:
8d:13:0f:76:bf:71:c0:42:e5:f4:b2:b7:bf:fc:f4:
73:52:7a:23:7a:89:66:ad:ce:e1:f3:49:c9:dd:c8:
98:f2:42:e7:89:7c:16:7b:c2:77:60:8a:f3:9a:94:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:04:C3:FB:EA:42:CF:CD:6A:FC:3C:DC:BE:C3:A5:1A:AB:71:28
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:79:9b:2d:76:0b:c5:7d:21:78:44:b8:75:21:72:56:11:
7b:07:7a:7e:38:fd:cb:3b:f6:d9:1f:63:b9:ca:79:5a:e0:72:
12:b0:d8:70:c3:d1:ce:ce:b6:ad:08:36:ae:97:73:8b:ce:16:
43:cc:cb:fb:60:4a:4b:9b:17:ec:04:33:0e:d5:91:17:98:4b:
82:a1:57:f1:6e:e6:59:c5:2f:e0:12:6c:d0:0d:7b:3d:36:8a:
4f:76:fc:de:06:82:97:4d:72:30:05:8b:ef:63:94:17:a9:ed:
c8:ca:e9:a1:20:56:c2:39:4e:4c:d6:9a:bd:ce:bd:16:02:bf:
8a:67:42:75:35:16:bf:cc:49:66:a8:89:d7:ab:ae:3a:6b:21:
8e:09:9f:35:3e:b3:c9:8e:63:b8:8d:dc:13:30:ed:2e:93:ef:
49:1c:6c:c5:80:c6:32:5c:e3:ab:d2:28:8b:52:42:34:d1:bf:
2e:1a:00:b3:ce:35:c7:4d:cd:e4:06:f5:74:9a:42:fd:02:9d:
ff:c8:f2:ce:77:7c:2c:15:dd:13:a8:8a:1c:68:31:8b:06:9d:
9c:cb:7d:f2:05:e6:24:fa:e3:ce:66:54:73:99:4c:d3:7e:6b:
79:0a:2c:a7:6f:8c:c7:78:56:55:50:f2:63:88:0d:67:95:96:
e3:b6:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:07:55 2026 by rpki-client