Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
File: 2qHEXTvEY4ygPaHSpIM1GnITIOU.mft (raw, json)
Hash identifier: 5WsWe0TLB9M6c5uEoj5HfE7xKLfPfE/bKZyJsMM+BTc=
Subject key identifier: B9:DB:32:6D:7A:F9:6A:39:B0:A5:4A:D8:76:1B:8E:F0:32:43:12:1C
Authority key identifier: DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
Certificate issuer: /CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Certificate serial: 01A0D15B8C8F2E0C26E49C14A7A329A44CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
Manifest number: 010B
Signing time: Thu 24 Sep 2026 03:00:32 +0000
Manifest this update: Thu 24 Sep 2026 03:00:32 +0000
Manifest next update: Fri 25 Sep 2026 03:00:32 +0000
Files and hashes: 1: 2qHEXTvEY4ygPaHSpIM1GnITIOU.crl (hash: NDM3NVAcaF8doXa0XpanF5mKIPWBlcJEPerV9zAFH3A=)
2: 4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa (hash: kTlgOCnXj5yewQ6mwepOm/lv0KOLYyNsXeNKGmeaC9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:8c:8f:2e:0c:26:e4:9c:14:a7:a3:29:a4:4c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Validity
Not Before: Sep 24 03:00:32 2026 GMT
Not After : Sep 25 03:00:32 2026 GMT
Subject: CN=b9db326d7af96a39b0a54ad8761b8ef03243121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:f1:81:b9:f2:86:eb:ee:6d:4d:93:00:46:
a0:01:0b:d2:db:5c:d5:a5:bd:ad:39:44:9d:11:65:
8d:70:aa:c2:55:fe:f1:f4:34:a8:13:5b:39:35:f6:
d3:ba:1e:86:63:69:53:02:59:d2:a7:56:1d:6e:06:
9f:dc:58:de:79:97:45:f9:2d:59:df:fc:1d:83:b7:
cf:ea:01:04:5a:6e:74:96:ae:c3:3c:b5:67:d2:f3:
d6:58:8b:d2:b6:d0:d5:b0:9c:2b:d0:3a:d6:ae:34:
80:10:8d:87:84:15:26:c2:e1:86:c5:82:2f:f5:5c:
19:f6:7e:eb:76:90:de:d1:18:bd:50:e1:1f:d0:0d:
c6:37:fe:ab:7c:49:e5:07:d4:fe:aa:5d:bb:85:a7:
d3:2d:01:df:38:32:2b:bb:43:4c:19:e5:fb:82:d4:
08:2c:75:fd:a4:68:31:e8:b2:8a:30:02:1a:e1:06:
3e:9f:c8:ab:57:a9:b5:a9:04:b2:ae:78:38:ec:21:
60:2a:c9:22:a1:d7:c8:c3:68:8e:e6:3e:4e:de:b0:
0a:c4:f1:13:9b:44:c7:57:9e:25:21:cf:16:18:95:
19:39:08:ba:8c:ba:4c:a4:ac:4c:2f:55:c5:f3:f1:
0a:4b:4c:04:4f:fd:68:60:63:7a:ca:00:c9:7b:42:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DB:32:6D:7A:F9:6A:39:B0:A5:4A:D8:76:1B:8E:F0:32:43:12:1C
X509v3 Authority Key Identifier:
keyid:DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:42:0b:7e:8f:c2:e5:db:dc:08:50:92:6e:bc:49:9b:c3:78:
90:0f:53:44:e4:bb:2b:dc:a1:d7:e9:87:87:94:a2:cb:2e:48:
2c:da:4a:74:87:96:b9:0a:b7:e9:b4:e4:ed:2c:f4:17:d9:63:
ca:64:0c:63:e7:ab:b6:d7:dd:ae:17:c0:ef:f4:56:99:db:77:
5c:4d:f1:ce:41:3d:66:bd:88:31:c8:93:19:6b:b7:da:6a:1c:
ce:47:b2:e9:ce:eb:44:ab:65:db:94:52:69:6c:90:a0:d3:22:
4c:68:53:35:73:99:ba:52:44:a0:59:07:8b:73:25:94:94:ff:
f4:3d:d4:a2:83:73:d0:40:73:9a:72:ef:1a:2c:90:f8:52:b1:
0c:9f:dd:54:2f:d0:f7:76:c3:39:37:04:7d:15:e1:fc:a7:f2:
76:7c:c4:7a:51:a6:0b:38:fe:20:a5:e0:3b:ff:3d:d6:86:4d:
24:e4:47:61:bc:f4:f8:04:2d:75:c9:a2:4a:58:37:61:5e:18:
5e:e0:ec:87:98:94:6e:06:ac:e0:9d:d9:f4:b3:20:cb:4a:0f:
9e:6a:80:66:c0:48:ac:57:df:8d:47:e4:0d:72:e9:0f:14:ab:
e2:70:37:19:e7:67:1d:c1:d8:cc:4a:66:ec:b8:33:54:50:37:
18:72:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:24:05 2026 by rpki-client