Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: v1gOVRJ/MSJ7U8+F4NgR/fsSBhhkvNCp4TpflpfBKJ4=
Subject key identifier: E9:B6:6B:38:85:CB:5D:E8:1D:61:B7:78:39:3C:B2:98:7D:3D:68:43
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 01A0D0B6F144A8D02C6B85BF37B077D853EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 04D9
Signing time: Thu 24 Sep 2026 00:00:45 +0000
Manifest this update: Thu 24 Sep 2026 00:00:45 +0000
Manifest next update: Fri 25 Sep 2026 00:00:45 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: X8IRPrx1J/en6pyQQz/llrhR80fR2jltjfwR2ImTHTg=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:f1:44:a8:d0:2c:6b:85:bf:37:b0:77:d8:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Sep 24 00:00:45 2026 GMT
Not After : Sep 25 00:00:45 2026 GMT
Subject: CN=e9b66b3885cb5de81d61b778393cb2987d3d6843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:0b:a5:37:62:1e:45:3d:2e:8c:33:75:88:
97:fc:21:be:75:11:7f:02:af:5d:32:ed:90:fe:61:
21:6e:8f:46:ae:60:a8:17:d5:02:15:43:8d:06:af:
c2:0f:52:36:88:1b:49:b3:14:12:4e:e2:90:e6:3f:
31:ed:e6:4a:bf:a6:05:86:e1:ec:1d:aa:c8:9b:b6:
30:71:f2:00:a3:1d:6e:9d:7a:ab:05:42:45:34:38:
4c:b0:26:3e:11:c1:e5:c7:bf:16:15:50:9c:c3:28:
09:67:54:68:66:b4:84:c6:56:6b:db:10:63:0c:1c:
05:04:e3:0f:3b:21:16:3f:ed:93:aa:44:d4:3c:74:
e5:a8:64:2e:85:86:d6:c4:20:f3:cf:08:cf:1a:f3:
e5:f1:68:fe:07:12:e7:70:28:32:30:c0:b7:0f:b3:
33:19:c0:8c:d5:8d:a3:7d:67:a9:87:8a:46:ea:3f:
9b:fe:cd:58:47:07:1c:5f:d4:81:ca:cc:db:f6:f2:
a1:58:0d:1e:6f:35:9d:72:3a:bd:8f:71:3d:c6:f1:
f0:5c:44:2d:2a:df:cd:46:d3:34:56:6f:cd:f3:6e:
b7:9b:1b:4f:d7:d0:80:19:13:e8:76:d2:04:bf:9f:
9c:b0:13:12:fb:65:f8:73:3e:66:1e:a7:3a:d7:b8:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B6:6B:38:85:CB:5D:E8:1D:61:B7:78:39:3C:B2:98:7D:3D:68:43
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3e:2c:f4:64:32:ae:c0:63:07:b4:fd:4b:59:c9:7d:a5:fc:
ac:90:2b:8d:de:ff:68:d2:a3:9a:97:17:f2:55:b3:59:50:33:
9d:9c:ff:db:35:74:ee:c3:da:4d:d4:11:55:88:be:16:f3:65:
df:9b:70:44:c1:37:27:da:ac:5b:3b:df:e9:71:19:1c:46:69:
45:a9:7d:bb:05:7e:aa:0e:ec:05:66:c7:b7:8a:50:53:2a:5e:
e3:75:58:db:21:e0:f8:11:b8:02:ee:d7:4e:2d:90:67:52:ac:
44:e3:4a:4c:a2:31:25:45:fa:d7:ab:e7:77:f2:fc:7d:d0:ac:
24:3e:cd:91:d6:bb:25:b6:d4:a5:f2:e2:29:4c:70:40:b8:d4:
ce:56:0e:ae:fe:84:31:82:c0:34:a6:aa:1f:b0:d0:30:1b:2b:
63:76:ef:fb:e6:6e:32:76:b3:d8:77:80:ce:05:43:94:d9:02:
a0:dc:05:e5:8f:da:57:9d:b2:74:bf:36:5d:86:20:61:44:c5:
99:6f:4d:55:28:2a:c8:ff:91:c4:6b:d8:3e:bf:06:91:39:de:
f9:31:cc:a5:c6:5f:44:8a:60:77:da:06:cb:38:fa:b8:0e:7f:
d0:f4:91:58:40:71:33:4d:f4:d7:29:7e:74:51:ae:44:53:88:
90:cb:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:16:56 2026 by rpki-client