Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: O9pZed+zOpZwnN0xlXdmnFpnB0GSZbI1qZeSUfa6fno=
Subject key identifier: FB:1C:8D:DF:41:B9:97:C1:4D:4F:19:6D:EB:89:A6:B5:F4:FF:F4:2E
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 01A0D425FD558171636123EA7BA0AA8CCEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 16:00:54 +0000
Manifest this update: Thu 24 Sep 2026 16:00:54 +0000
Manifest next update: Fri 25 Sep 2026 16:00:54 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: Rgu3doC/76y4rSAgfsftL1Mc6OPyKTbnCw4xvkqjqb8=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:25:fd:55:81:71:63:61:23:ea:7b:a0:aa:8c:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Sep 24 16:00:54 2026 GMT
Not After : Sep 25 16:00:54 2026 GMT
Subject: CN=fb1c8ddf41b997c14d4f196deb89a6b5f4fff42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:2c:35:b6:76:5d:3d:c0:57:9e:dc:cf:95:
0a:85:74:8d:a5:e1:ae:bc:74:31:a6:70:89:46:10:
04:79:83:87:d8:e2:49:39:16:74:3b:45:6d:35:9c:
77:dc:bd:9f:7e:12:ca:47:ea:de:c0:a0:e3:02:f7:
f6:12:0f:db:ca:b2:87:93:a8:08:0b:a6:ff:7b:5e:
66:61:03:a0:31:84:6a:04:5d:f5:78:18:44:e3:15:
c1:91:ac:54:23:aa:29:17:fb:8d:39:2a:6e:ff:8d:
c3:05:72:bf:e7:6d:00:5b:8c:84:f5:11:0f:36:b9:
a9:13:83:18:f1:a7:34:38:5e:46:97:c4:5a:14:82:
d4:3a:20:17:4a:05:78:4c:20:5b:dd:cf:6c:cf:66:
e1:7e:30:a5:5e:a7:3c:0d:d7:94:be:fa:5b:0b:c9:
65:8f:de:a7:37:0f:73:4a:43:98:ee:3b:43:bd:07:
d9:54:ec:a1:ef:f2:42:99:7d:f5:07:98:f9:92:5d:
3a:ce:e7:83:09:49:0c:c2:4c:6e:d0:bb:25:59:34:
ae:a1:fe:45:43:cf:1c:2e:cf:ab:13:d8:61:5c:bf:
da:f1:62:91:d8:5d:39:76:bb:a3:be:52:fe:74:6d:
6c:ac:64:74:17:a3:84:b7:6e:74:9c:9a:71:57:63:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:8D:DF:41:B9:97:C1:4D:4F:19:6D:EB:89:A6:B5:F4:FF:F4:2E
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:56:e0:fc:6d:5c:b6:b6:47:0b:68:6a:47:5c:d3:71:b1:76:
e8:2a:72:c2:29:32:c2:90:4e:dd:ed:d3:3a:ea:fc:1d:27:65:
cd:09:b7:b4:72:06:4b:6b:53:62:9b:7d:89:5d:52:1a:41:18:
eb:8b:7b:11:6b:e7:66:8f:ac:02:49:73:94:b1:22:d0:f6:3d:
74:c2:2d:55:17:e1:49:d7:5d:80:30:47:0e:bc:5c:76:30:fe:
9f:3a:f1:f9:21:b7:65:af:a2:e1:80:1b:a7:a9:4e:98:8a:38:
00:01:35:c0:70:3f:ab:fb:c8:48:f9:e2:b5:ac:56:59:f7:3b:
5d:ef:54:65:81:64:87:87:4d:27:c5:9b:34:1e:b3:6d:3c:73:
0c:80:e9:c6:b2:bb:46:71:4d:19:cd:8b:c4:09:06:b8:ca:9c:
37:77:da:76:e6:9c:00:98:92:a3:8d:ea:b4:0a:7f:35:ec:96:
61:56:25:5e:f5:39:ef:9b:4d:37:34:65:ac:e1:5c:8b:c5:57:
3f:00:dc:31:f5:61:fe:ac:32:b3:b9:0c:55:3b:43:6a:ae:f7:
60:28:4a:7a:12:c5:35:07:43:43:0a:8c:6c:d3:a9:bd:34:d4:
a1:f6:f6:7a:d3:2a:3e:11:b9:6a:13:7f:8d:b6:18:17:5b:5e:
fd:4a:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:12 2026 by rpki-client