Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: lJqdhxcBnGCqPyBqs1Wh/qjVY6lWj6dt9STtQlH8wiE=
Subject key identifier: 56:9B:30:25:D2:1D:85:2E:A9:2E:29:AC:DD:35:9D:B9:56:CB:E9:3E
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 01A0CFDB6B1852B89B1770F82E8F8B9DE109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 1903
Signing time: Wed 23 Sep 2026 20:00:58 +0000
Manifest this update: Wed 23 Sep 2026 20:00:58 +0000
Manifest next update: Thu 24 Sep 2026 20:00:58 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: QtBxUsUvlggf3bruboaElyWeXGU/v3A1nUOn5WDGQ4s=)
2: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (hash: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg=)
3: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (hash: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc=)
4: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (hash: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:6b:18:52:b8:9b:17:70:f8:2e:8f:8b:9d:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Sep 23 20:00:58 2026 GMT
Not After : Sep 24 20:00:58 2026 GMT
Subject: CN=569b3025d21d852ea92e29acdd359db956cbe93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:18:8a:39:9f:86:01:1b:2e:ac:00:4c:e7:
3d:1e:cc:95:df:74:46:c2:4a:cc:48:26:a4:6a:b8:
69:01:7c:50:13:46:15:17:f0:ad:bf:33:f2:98:9d:
7d:b7:cc:9f:d4:d7:7a:fb:11:6c:0d:8b:aa:27:92:
24:c2:d5:2d:68:9e:f5:87:f1:85:4b:80:b7:0e:7e:
d0:c4:be:a6:49:b0:fc:99:2b:fa:a7:7f:d6:c4:cb:
02:11:56:a2:d4:31:fc:25:97:b5:92:ca:e4:0d:b1:
99:c8:79:ab:5e:e0:11:4e:13:3b:64:a2:79:af:ed:
34:5f:0c:6f:50:47:dd:a9:82:ca:9d:2a:e1:ae:5e:
90:6a:28:93:99:11:24:c1:0a:3b:db:46:92:c2:4f:
5f:4c:3c:e3:06:ab:fd:fa:da:4a:fa:0a:68:74:52:
00:27:a2:68:43:10:42:e1:e8:1d:78:e9:b1:29:63:
31:90:ef:86:76:ea:79:72:d5:ba:eb:75:fc:e7:33:
be:a6:e4:e4:b6:3b:9d:ed:54:20:dc:ab:8e:93:60:
84:a1:6c:1c:e2:e1:65:15:38:bb:c2:62:45:fb:d3:
e6:af:e2:be:8d:53:22:a6:28:4f:91:f6:51:84:c9:
2e:c0:fc:55:ed:36:a1:53:3b:76:09:44:38:e3:3c:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:30:25:D2:1D:85:2E:A9:2E:29:AC:DD:35:9D:B9:56:CB:E9:3E
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:0c:22:e6:48:7f:5d:d9:35:93:9d:8c:a2:02:50:e2:5a:
ad:d4:77:b8:87:82:bd:22:48:ab:f8:20:1f:21:d1:cf:1f:f1:
82:02:fa:0a:1e:9e:6e:f2:ff:cd:bc:92:5b:4d:b5:97:11:bd:
22:b8:b6:7a:c3:56:ad:a4:af:98:84:dd:c2:be:f8:29:e4:55:
20:01:64:7e:9f:aa:11:66:88:d6:9a:40:b0:99:bb:64:4f:1f:
d6:fe:00:87:cb:50:e0:8c:e2:3b:47:2a:09:eb:83:f3:8e:23:
62:9c:28:04:54:7b:10:fd:f9:7e:a1:dd:1e:f6:eb:52:9c:e6:
f0:75:df:38:b3:7b:61:cd:bb:a0:cc:a3:47:c3:c9:9a:51:d1:
b8:22:43:67:ad:c1:27:68:1e:3f:8b:f5:c8:9b:bb:95:0b:74:
cf:fe:17:e2:29:cc:b1:9b:b8:35:8e:55:28:9c:e1:65:6b:9b:
62:ba:42:e6:2e:a6:45:db:b5:4e:d7:dc:0b:53:4e:ee:07:c5:
57:3f:70:af:25:cb:99:f8:d1:b9:1f:0d:25:76:a7:43:57:f5:
81:4e:b4:f0:d7:ee:60:d7:a4:cf:82:34:93:43:22:12:ea:ae:
77:af:24:64:7c:4a:5a:92:89:43:bf:e1:0c:aa:ac:e8:6f:ec:
1d:11:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:11 2026 by rpki-client