Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: 3Gvj0X59UbvQ/wDrprcUFxrTrZRqRHcTNwgMbCRzORQ=
Subject key identifier: 94:00:B1:BF:60:72:6F:5C:C1:B3:D8:49:D5:81:D4:3A:BE:0C:7B:A1
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01A0CE236EDDA99A3A16ECA7B389E27FA3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 140A
Signing time: Wed 23 Sep 2026 12:00:23 +0000
Manifest this update: Wed 23 Sep 2026 12:00:23 +0000
Manifest next update: Thu 24 Sep 2026 12:00:23 +0000
Files and hashes: 1: 1-pGUh5eoM3ZeUskzeaaKM7PLY6M.roa (hash: yFYmsEHjskSi49uzOqgkpPy9RGM1shgkNOzvgFJ7/8o=)
2: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: XBv6dP8i4D0xJqiXSGq/U8fbh8MFK0oGZZ4M+Ua/xNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:6e:dd:a9:9a:3a:16:ec:a7:b3:89:e2:7f:a3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Sep 23 12:00:23 2026 GMT
Not After : Sep 24 12:00:23 2026 GMT
Subject: CN=9400b1bf60726f5cc1b3d849d581d43abe0c7ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:da:d7:18:3e:60:53:eb:8b:81:e8:51:5a:
20:d7:be:9e:04:61:11:49:fa:0c:22:ba:1a:79:a1:
c1:85:a9:0b:b9:ec:c0:62:c0:21:e9:61:45:f8:dc:
46:ee:3c:32:c0:4f:66:5a:59:08:16:16:55:04:a5:
5a:ae:38:2e:4e:f1:6d:81:63:10:c3:19:6a:05:49:
c5:cd:85:8a:01:5d:e1:3d:be:6b:47:15:33:d7:a0:
9f:72:66:68:3d:f6:05:da:2e:03:aa:c0:09:4a:a1:
16:9d:97:4d:12:82:da:cc:ff:f7:9f:4c:72:90:4a:
f0:72:67:ad:04:87:48:02:52:60:1a:b2:d5:90:e8:
cb:2d:18:ae:2f:f8:82:2d:98:f7:e8:45:af:b2:d0:
5b:ce:ce:5e:d0:d9:c0:98:db:da:8a:43:54:a9:66:
a4:50:b4:25:c3:b6:8c:75:f2:f8:5e:8a:4e:85:98:
54:66:fd:f8:22:8b:11:7d:77:f1:24:9b:39:85:76:
6c:66:76:ba:8b:47:b5:7b:ba:49:5e:0c:86:b4:7f:
29:e0:85:96:71:9e:07:2c:3b:8a:1d:cb:f8:fb:be:
7b:7a:85:a1:ed:5a:d4:72:94:43:cb:07:f8:cf:69:
87:f0:bc:21:08:34:bd:1d:9f:05:cf:3b:ae:1a:4a:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:B1:BF:60:72:6F:5C:C1:B3:D8:49:D5:81:D4:3A:BE:0C:7B:A1
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5a:1f:59:39:b6:ee:bf:a2:9c:9d:a9:f9:9e:76:9d:b0:a8:
0c:1e:31:14:81:6f:b1:ce:f3:9f:bb:a5:06:10:a8:39:5f:52:
cd:08:cb:3d:ec:b3:eb:f3:6c:4d:e9:f2:0b:5c:41:aa:5e:fc:
8e:db:86:e8:4f:3c:f2:e5:8c:4e:0e:85:cf:80:23:ad:f5:1d:
f5:b7:c1:0b:43:8e:3f:93:8e:80:85:e2:29:e8:5d:72:d6:18:
6d:81:d6:58:76:cd:76:42:80:b3:34:cd:88:4b:9a:21:46:31:
45:c6:58:fd:a1:d0:83:99:e6:75:30:7c:55:6e:a2:6f:f0:07:
1d:c2:30:7d:96:7c:70:03:24:06:26:fe:f4:75:58:7b:e4:30:
7a:76:2a:44:9d:38:68:f5:38:36:22:f3:c2:0e:b2:f6:75:f6:
6a:bb:c1:6d:14:b9:85:d4:b1:ca:35:1f:1f:77:15:f1:1b:fa:
96:b7:e7:ff:a8:d3:11:dd:33:a5:b1:4b:23:fb:16:8d:8b:1e:
0b:06:29:60:26:04:d1:89:d6:1a:3d:81:d2:9b:70:32:bd:cf:
6d:98:2a:cb:3b:ce:8a:10:cd:d6:b1:a1:39:07:46:b8:4a:a1:
5b:81:9a:00:0f:6a:c5:b2:4a:00:d9:1a:63:87:b8:b4:56:64:
bd:e4:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:04 2026 by rpki-client