Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: CrFbaZ/VJcFRn8EgcgP2qTfBXg++x6v4pqYLH6YgiIg=
Subject key identifier: DE:C4:71:15:CF:6A:D1:E0:0E:F6:76:0B:86:27:D4:56:7C:83:34:E1
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 01A0CD1129BAC440692C9B57D8F33D35691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 07:00:49 +0000
Manifest this update: Wed 23 Sep 2026 07:00:49 +0000
Manifest next update: Thu 24 Sep 2026 07:00:49 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: YXCEDToyQ0pzes2UoNxO6LRsKMCdz6INizuupGZUO3k=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:29:ba:c4:40:69:2c:9b:57:d8:f3:3d:35:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Sep 23 07:00:49 2026 GMT
Not After : Sep 24 07:00:49 2026 GMT
Subject: CN=dec47115cf6ad1e00ef6760b8627d4567c8334e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:0f:b7:8b:b2:34:4d:ca:bf:4e:45:03:0c:
74:e6:15:a1:3c:ab:f3:6b:40:1d:1a:21:ea:38:44:
6f:ca:70:64:69:4c:f2:99:3c:ef:0a:f1:7d:df:18:
2a:df:db:a7:91:65:b6:f9:12:2a:e7:bf:19:13:31:
23:ad:00:e8:e5:fb:cc:07:19:83:76:b2:13:42:e4:
5f:c7:32:30:b9:95:cf:fe:4d:39:c6:88:91:27:c0:
84:5c:54:63:ec:72:11:bc:48:d3:d8:48:fa:56:f8:
88:81:0a:1e:ca:91:fd:7d:3e:d9:ef:74:e7:ce:55:
96:fd:46:6f:60:90:e8:1a:77:9a:7b:0d:16:56:f0:
60:55:1d:d8:3d:cd:9f:ef:ce:5f:0c:70:05:54:47:
03:60:1b:b0:4d:8d:99:a5:24:94:d2:e2:1f:42:a9:
51:9f:3c:50:90:53:7c:57:cb:11:4e:4a:dd:7f:51:
fd:a4:10:ae:ce:58:b2:83:d9:2b:9a:b5:f0:9d:68:
56:ea:8f:3e:71:2d:d1:b4:81:4b:f3:64:ed:52:12:
ee:78:bc:e2:0d:4d:6c:6c:52:81:e5:22:1b:61:be:
06:aa:c2:76:e7:ed:b7:57:6c:03:a1:15:6d:3e:a0:
8b:15:1d:19:a3:f7:07:b8:2c:b2:a2:a2:0a:71:9b:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:71:15:CF:6A:D1:E0:0E:F6:76:0B:86:27:D4:56:7C:83:34:E1
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:11:41:b3:f3:0f:ee:38:75:fa:a2:86:05:b7:5b:97:97:
5a:31:02:9d:cf:da:5d:c4:c0:5e:e5:74:d1:a7:b1:88:99:20:
80:80:8b:0d:9a:d3:7a:d4:6e:90:24:5e:59:ef:bf:bd:3c:e7:
ff:7b:fd:eb:2b:45:e8:01:26:b6:b7:de:8b:ba:0c:18:f4:e6:
88:cf:ab:9a:a9:0d:71:23:93:af:0b:09:d6:a9:11:08:42:74:
34:ec:d5:d7:c5:88:fe:ad:52:dd:12:86:96:d6:59:1c:fd:0a:
01:1c:8b:ad:de:e5:66:a7:6e:fc:22:db:b7:6b:f2:dc:14:33:
db:eb:78:2c:a2:c9:55:60:58:13:0f:85:55:7e:14:db:0e:c5:
5d:24:2f:bf:8e:88:b6:be:47:ea:34:f5:24:13:13:b2:32:8c:
60:75:bd:3d:2a:e7:5a:cc:70:b3:78:eb:f1:44:8c:3c:12:6a:
0e:db:5f:64:31:2e:79:f7:ad:43:26:be:d2:73:81:39:f9:76:
fa:e9:6b:0a:00:f4:f2:e8:6d:a4:52:66:a6:5c:8b:15:be:a3:
57:e3:48:c3:aa:cf:ae:fe:64:87:66:86:33:8a:86:76:12:61:
15:a6:b3:cc:6b:28:3f:0b:e9:69:3c:57:03:ac:b2:ba:ce:6d:
d5:47:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:38:58 2026 by rpki-client