Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: u2YGz1i6cKqFtv3hfTlTIzq8z70jOxjLbUKf/AW1Kcg=
Subject key identifier: 61:B0:D9:38:C1:6F:13:93:F3:4E:7C:5E:D6:4D:CD:09:12:DA:D1:3A
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 01A0D0B6FCEED12D38793F617B686FECFC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 00:00:48 +0000
Manifest this update: Thu 24 Sep 2026 00:00:48 +0000
Manifest next update: Fri 25 Sep 2026 00:00:48 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: /amTBeIlpF7upTZLjiJ98IqwAJjsB8Sd4uhF0FGLL5c=)
2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:fc:ee:d1:2d:38:79:3f:61:7b:68:6f:ec:fc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Sep 24 00:00:48 2026 GMT
Not After : Sep 25 00:00:48 2026 GMT
Subject: CN=61b0d938c16f1393f34e7c5ed64dcd0912dad13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:e6:78:c4:cd:e0:b9:d7:36:96:42:f6:36:
52:25:26:5b:bf:ed:f5:84:36:e4:9e:27:97:d2:27:
13:c2:4e:7c:57:45:b8:f2:80:96:5b:98:bf:3f:a3:
f4:ee:e1:33:98:1e:8b:02:e8:4d:58:31:e7:9b:2f:
a8:58:dd:e1:85:82:bb:d8:20:d8:17:6b:59:07:bb:
f4:b8:25:6c:d4:63:06:72:ba:d6:ab:5f:6c:df:8a:
ae:f4:23:51:10:34:61:1d:d0:49:6b:64:65:70:01:
8a:2e:27:7f:88:6c:91:da:f2:83:2f:1e:a0:f1:70:
5d:1d:51:55:af:1f:f0:bb:55:73:e7:60:82:2b:86:
83:48:1a:d7:a2:c2:6c:08:41:17:7c:e7:33:7d:79:
7b:b8:e3:81:13:19:af:28:6d:34:cf:ce:8c:08:e4:
25:91:b5:65:12:c1:d6:1f:de:53:c8:78:24:13:77:
0a:da:97:7c:08:e8:a3:df:63:4f:86:8a:7d:61:5f:
9d:ab:bc:68:77:ba:85:e9:67:66:2c:91:37:e1:4b:
c4:16:61:1b:07:bd:ad:e4:23:cd:38:f6:87:67:d9:
83:8b:f8:bd:08:b5:f1:97:da:f6:f5:e7:42:e3:7f:
e9:d0:1b:0c:ee:fa:bd:3d:d6:5b:12:48:0a:08:67:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:D9:38:C1:6F:13:93:F3:4E:7C:5E:D6:4D:CD:09:12:DA:D1:3A
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d8:21:d9:eb:42:e2:d7:20:8e:73:fa:eb:52:de:d4:4c:34:
1e:18:b2:4e:98:46:0e:f7:88:dc:59:40:06:d3:bf:b5:19:d7:
4f:6b:06:30:f0:6f:8e:ed:f2:58:d5:06:7a:b0:05:19:6e:4e:
13:fe:1f:29:e0:5f:0e:71:ea:20:96:73:53:8a:8f:e0:7b:d3:
3a:e9:3e:60:fc:7c:5e:50:12:78:63:01:f4:1c:92:08:09:ad:
77:34:1a:a0:e5:0c:a8:27:79:2f:fe:37:5a:35:2d:f1:0d:f9:
c9:14:0a:15:00:74:9b:77:c7:21:b0:20:c7:25:4e:6d:31:b7:
d8:ff:e7:8f:89:f8:f5:ee:d9:d5:37:1d:a6:c2:a1:a9:8b:bf:
59:f9:20:15:85:c0:f6:1f:89:b4:ae:b9:f6:ba:62:cb:65:1d:
05:00:89:72:e3:d7:ca:52:f0:2f:60:17:0e:26:8f:3f:e3:c2:
91:c8:26:06:7e:f9:f4:bf:51:e0:9a:7a:ce:5c:5d:02:86:a8:
21:39:c7:d8:38:78:9f:21:82:ed:1d:75:3c:50:16:32:9e:ee:
81:b6:e2:6a:4d:ce:d8:9a:8c:03:69:e2:45:c7:70:e5:85:e0:
2b:bb:41:a2:e5:d3:03:7d:a2:87:38:db:13:d1:7f:5c:c8:57:
f6:ea:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:12:01 2026 by rpki-client