Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: nJkRr9cQY30MWRCZuRdgqCUaeb1PyiNJSD7oeR6mlw4=
Subject key identifier: 8A:9A:9A:19:F8:22:06:4F:74:F6:AB:81:38:D5:D3:1A:93:D6:1E:31
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 01A0D9F14B3232E0D3D5F62583100D7F739D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 11B7
Signing time: Fri 25 Sep 2026 19:01:04 +0000
Manifest this update: Fri 25 Sep 2026 19:01:04 +0000
Manifest next update: Sat 26 Sep 2026 19:01:04 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: dVsc13Pcy+nbif2cDY8yv9wtCIqUghMkZmncfk9xS60=)
2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:4b:32:32:e0:d3:d5:f6:25:83:10:0d:7f:73:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Sep 25 19:01:04 2026 GMT
Not After : Sep 26 19:01:04 2026 GMT
Subject: CN=8a9a9a19f822064f74f6ab8138d5d31a93d61e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:d6:f9:b3:f0:3a:8b:2a:a3:5c:08:78:b8:
93:77:c2:22:6e:70:53:ba:69:a4:ed:c8:f0:55:27:
3a:85:67:91:9b:df:24:ea:70:bb:ef:d8:78:c8:16:
e5:50:b4:54:b7:be:77:a7:ee:7d:55:8b:e4:b7:2a:
1c:65:5b:d3:ed:a9:7b:b9:f3:ed:1b:89:44:99:c3:
2a:c2:83:6c:fc:51:31:17:6f:32:ab:98:4d:18:3f:
44:4b:47:b4:3f:be:48:16:1f:8d:6b:56:fa:8c:9a:
9d:df:8d:21:81:b0:d9:22:1c:a6:eb:5e:0c:0b:5b:
5d:3b:7a:a8:c9:fe:92:13:33:18:6c:c9:44:71:8d:
e1:62:8f:00:83:9a:ca:7b:53:a7:fe:74:42:e3:46:
69:9a:aa:e2:09:e3:73:a6:cb:19:92:78:83:90:af:
e6:b4:e8:02:60:3d:cf:90:4a:1f:6e:1c:d0:e2:30:
1a:7a:e8:7b:e8:74:76:bd:3d:1d:2c:b1:99:99:60:
73:c4:ec:5b:b2:bf:06:e3:4b:b0:7b:31:eb:68:f6:
0b:71:d6:59:c7:f1:e1:c1:83:68:89:e8:5c:71:ec:
70:d7:85:26:8f:6e:00:93:9d:ba:4a:08:77:36:eb:
51:65:a7:f4:7f:55:28:fa:e7:f3:a7:46:d1:04:d2:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:9A:19:F8:22:06:4F:74:F6:AB:81:38:D5:D3:1A:93:D6:1E:31
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:06:ea:a6:e5:82:61:7f:fd:b6:26:71:33:05:04:b7:b2:
04:ee:f0:12:72:6a:de:27:5f:e3:74:f5:56:ff:07:1f:b9:4c:
6d:14:0e:44:6b:ed:8c:bb:08:eb:43:bd:6b:b5:82:45:ec:6b:
2d:e8:5a:c6:9d:57:b5:94:0f:01:e9:00:c5:fd:02:44:06:a6:
fb:59:84:41:fe:5e:77:da:ba:a3:33:b9:8c:af:17:52:76:da:
3b:9b:0b:60:1d:f5:10:ef:b4:f6:2d:32:c9:5f:ae:ae:7b:39:
f1:1e:67:e3:02:9f:e1:9d:05:c6:21:c6:26:03:e2:4b:b7:11:
7e:f1:7e:9b:99:7e:24:62:d9:11:8f:f4:b6:0f:e3:d7:2b:4a:
c8:c0:50:16:2c:2d:44:af:4b:34:e4:9c:5f:67:18:35:33:ec:
8f:46:8b:f9:c1:37:08:e9:26:df:fb:d6:0b:b2:df:21:9b:58:
ac:bf:9d:b7:57:a1:22:cb:69:c9:e6:83:d1:f4:15:e9:03:c6:
58:7e:0b:57:aa:ed:00:8e:6a:1f:81:de:37:76:af:45:fb:98:
e9:22:9f:4a:19:ec:08:b6:d3:10:3a:52:9f:e4:a1:23:d0:a8:
ef:95:5d:ba:49:44:9c:bd:98:e3:39:04:28:29:2f:c7:0d:df:
fa:bd:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:44 2026 by rpki-client