Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: /INO1BJgBtpUnz7r84wiqkep+hTurddmtqpY+NxTk3E=
Subject key identifier: 1C:98:20:34:D5:F9:86:08:88:92:78:38:09:62:E6:DE:7D:EA:25:C9
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 01A0D5A6B64A73418C7E10973D06647CFAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 23:01:07 +0000
Manifest this update: Thu 24 Sep 2026 23:01:07 +0000
Manifest next update: Fri 25 Sep 2026 23:01:07 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: 2e545dglSlvdUmdxhDkmeFfKA6hEHVRLb2l3fRQQSDE=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:b6:4a:73:41:8c:7e:10:97:3d:06:64:7c:fa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Sep 24 23:01:07 2026 GMT
Not After : Sep 25 23:01:07 2026 GMT
Subject: CN=1c982034d5f98608889278380962e6de7dea25c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:41:e1:57:1b:92:0d:13:d9:4a:90:1e:8e:
4e:77:f6:8b:c6:62:99:9c:cb:3d:bf:64:36:e0:bf:
ba:75:d5:23:49:39:6b:75:5d:30:3c:39:82:05:a4:
d6:04:4e:5c:f7:9c:94:e6:7d:d5:a1:61:56:9b:95:
a2:b2:db:70:17:f6:48:96:9c:33:91:70:7c:9f:1d:
31:c6:a9:d4:b8:cd:28:f8:54:94:43:e9:ae:ac:0b:
2b:59:00:e3:4c:f1:e3:da:39:5b:2a:95:00:53:99:
6f:7c:2c:ab:47:bd:59:02:ef:18:d3:7e:db:1e:99:
c2:91:2a:12:a6:9a:d0:4e:99:a3:07:1f:83:18:29:
e7:2f:39:a2:6d:5f:c3:5c:46:a2:ea:fe:5c:82:c4:
b5:83:09:3f:ad:21:25:b2:b0:3a:09:ff:a4:5a:00:
10:70:90:d2:0c:4c:8f:fd:ae:37:4c:9c:c9:db:d4:
9c:1b:00:cb:ee:a1:b7:78:21:c2:df:d7:14:1c:7f:
e0:47:ef:d4:7b:2d:6c:ff:b4:3a:67:12:ca:29:fa:
7d:d4:d4:cf:6f:23:41:99:1f:46:5b:b4:ee:e5:4b:
3e:06:5a:9d:20:58:48:58:d7:6f:05:29:77:b5:bd:
6b:f4:69:ba:09:c8:7d:98:79:77:45:4b:4b:4e:ee:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:20:34:D5:F9:86:08:88:92:78:38:09:62:E6:DE:7D:EA:25:C9
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:7b:46:6d:00:6a:14:a7:81:12:8b:8e:0e:d9:d5:01:ac:
d7:26:b3:d0:71:35:38:16:77:d0:59:5d:5b:79:07:ad:d2:24:
19:b0:ba:c3:06:07:83:46:cd:1b:37:be:5b:5b:ea:a2:70:53:
cb:85:b1:6c:9c:49:cc:97:63:99:f7:03:79:3c:31:93:46:a3:
64:f0:2b:22:a3:92:d5:5b:0b:9d:9b:c1:29:59:63:70:ab:ae:
1d:ed:7a:f2:1e:e7:80:69:8c:4a:b0:db:3f:27:d0:da:81:b9:
54:a0:00:cd:5b:95:84:17:7d:51:40:d9:ff:11:13:f2:03:f0:
15:31:73:00:18:d2:c6:30:38:0b:5d:90:9f:8a:1f:38:26:1a:
cc:8b:6d:2c:8f:dc:2f:7f:c0:38:29:8b:6b:53:23:7b:0e:6d:
c0:fb:95:7d:90:89:69:6a:81:65:54:0e:7d:a4:4f:6f:1a:c2:
84:8e:25:5f:c6:0a:b8:58:bd:a6:ed:32:0a:9c:8c:41:97:16:
fb:14:0c:95:8c:06:51:a4:b7:77:c7:27:af:1a:74:65:6b:e5:
3e:35:5b:81:38:a7:b3:35:b7:5c:2d:87:ee:81:0f:2f:e0:42:
ff:a8:e9:80:1c:e8:ed:3c:dd:a9:00:fd:d9:b8:b8:85:81:4e:
ca:46:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:43 2026 by rpki-client