Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: TrmyasO8jIYUMftqB/zyttVNjXTIoOnh8U3Y3+K7vo0=
Subject key identifier: CA:38:F5:23:3A:22:5C:71:77:FF:D8:9C:28:5E:04:20:D2:7F:76:6A
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 01A0DF86AF121AF1375AA0CB909AE1C69B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0E3D
Signing time: Sat 26 Sep 2026 21:02:20 +0000
Manifest this update: Sat 26 Sep 2026 21:02:20 +0000
Manifest next update: Sun 27 Sep 2026 21:02:20 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: JOX9VhG+fBnfM+qzotP5LT9lu2+zpD/3sj5S3QSHsSw=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:af:12:1a:f1:37:5a:a0:cb:90:9a:e1:c6:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Sep 26 21:02:20 2026 GMT
Not After : Sep 27 21:02:20 2026 GMT
Subject: CN=ca38f5233a225c7177ffd89c285e0420d27f766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6d:73:58:79:b2:b4:a9:af:bb:54:07:9b:f2:
d7:d9:db:5b:1c:2f:6f:14:e8:e9:82:c0:4f:79:6c:
7d:67:e6:d3:56:34:b6:42:f5:18:e7:18:2c:61:b2:
06:4a:ce:86:b5:f8:46:96:c6:9e:80:f8:28:19:cf:
d9:78:56:20:dd:c1:78:9e:b7:a6:56:3a:0e:64:f5:
6d:83:84:34:b3:ba:14:29:d9:6f:86:71:b2:dd:8e:
bf:25:8c:16:57:35:8d:38:97:1c:d7:93:4b:4c:55:
ec:fb:8f:91:ba:8c:c9:a0:91:d4:f9:1a:9d:c2:a8:
1d:a4:ee:a3:35:2b:59:68:73:94:dc:79:d0:be:2f:
f4:c4:f2:55:62:49:64:39:27:88:fd:c4:75:7e:81:
30:df:3d:62:db:ce:b7:d6:ae:aa:c6:b6:84:bd:5f:
48:b8:12:dd:be:62:75:d8:a5:bc:6a:54:fb:62:d9:
59:29:b9:f6:a4:87:8c:06:06:a8:02:db:e9:cb:33:
42:93:f9:e2:f7:3e:c6:58:6b:64:48:cb:ee:9e:c2:
4f:ef:4d:ac:fe:ba:f4:d6:19:c9:46:d9:64:f5:47:
40:5c:9b:cb:bf:59:e1:fe:a7:a4:53:48:c7:7d:fa:
85:f4:92:78:83:8a:8d:17:da:7a:30:53:8b:06:0b:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:F5:23:3A:22:5C:71:77:FF:D8:9C:28:5E:04:20:D2:7F:76:6A
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:68:fa:27:32:63:6c:9d:1a:6f:b0:66:47:e4:41:44:bf:
fb:99:b7:7b:e9:85:fb:7c:eb:3a:11:67:48:41:0a:1b:ff:ee:
44:bb:79:5b:d3:79:f4:05:6f:45:23:2f:4e:1c:99:08:1a:dd:
62:f7:5e:57:8c:36:c6:c2:ae:da:6e:67:65:51:d2:df:ef:da:
69:c5:69:7f:e1:cf:63:09:88:2e:34:52:72:4c:17:11:cb:ab:
47:6e:b2:87:59:db:1b:b6:af:14:c8:d2:ae:67:6f:29:01:98:
2f:4d:81:f9:b8:d3:6c:13:27:12:bf:9c:68:89:e4:77:b1:e4:
d6:d3:bb:21:ae:78:1f:96:c8:24:28:2c:6e:62:eb:2e:00:40:
3f:a5:32:be:da:5e:48:48:71:75:9e:1e:c1:51:56:c4:8e:e0:
a3:9a:a0:11:b9:df:47:8e:db:34:dc:fe:eb:95:e3:56:33:72:
f8:66:f4:f8:d3:ce:c8:3f:73:89:63:34:c4:48:83:15:92:44:
ab:ff:71:59:ad:78:64:0c:fe:ba:3c:32:c1:5a:da:59:b6:01:
e5:69:57:32:8c:f8:7b:25:02:8c:26:d4:f9:fb:bf:d7:67:ec:
76:2d:c4:32:18:ac:43:ac:d8:f7:c3:05:6e:23:94:10:5f:ec:
14:55:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:58:21 2026 by rpki-client