Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: Hi0HL10g8hSdZDIDfw444uK9Lu3HlUbp9te6jf8JmCA=
Subject key identifier: EA:16:DA:9A:55:F4:29:39:4D:FE:61:70:E1:B4:98:5B:7B:3E:45:DF
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 01A0D5A6A1C7AC07410B638F93CC1BCF4AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 0547
Signing time: Thu 24 Sep 2026 23:01:02 +0000
Manifest this update: Thu 24 Sep 2026 23:01:02 +0000
Manifest next update: Fri 25 Sep 2026 23:01:02 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: cMsjtmdkoyEnk3TV0gFye+7muAT26E7aDNw+9aH3drU=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a1:c7:ac:07:41:0b:63:8f:93:cc:1b:cf:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Sep 24 23:01:02 2026 GMT
Not After : Sep 25 23:01:02 2026 GMT
Subject: CN=ea16da9a55f429394dfe6170e1b4985b7b3e45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:26:5b:34:f2:be:ce:b8:d7:84:03:ce:38:
2e:92:cd:09:18:6e:3c:7c:e7:7e:34:8d:65:fa:80:
1d:44:e6:20:de:09:fb:73:4a:f2:f6:14:1e:8e:45:
d2:d3:04:ba:47:d0:fd:c2:fe:8c:ad:3e:90:c7:c5:
1d:55:ce:af:06:5d:46:18:f7:67:52:ab:bd:bf:41:
0d:72:ef:94:5c:89:6f:95:62:52:f8:1f:a3:df:f8:
f6:cd:5f:d3:c9:90:24:73:65:04:ab:db:25:c6:03:
44:2d:f5:2d:4b:c8:b4:74:37:3b:c1:18:1f:37:19:
b8:90:00:e1:b4:5e:bd:d4:2b:38:2f:33:fb:2d:19:
2e:11:91:34:b6:76:3b:28:50:0d:2f:96:bd:05:b7:
0b:e5:31:c4:f6:4d:c7:24:41:6d:2b:aa:c7:72:dd:
29:d6:d3:07:f2:6c:d7:6f:be:ab:c5:48:c0:8d:a5:
5a:c4:63:ea:d2:4d:31:69:97:2d:9a:6b:6d:bf:5a:
bb:3d:bd:09:33:ae:b4:8d:3a:c3:42:da:db:85:bb:
56:f9:35:77:4b:1a:b2:f6:59:55:7c:0e:c7:92:a2:
74:a7:09:da:1f:ff:34:01:4a:3d:d9:7e:50:7d:77:
da:91:00:3a:f0:3f:aa:e4:f9:b6:65:07:63:c1:e6:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:16:DA:9A:55:F4:29:39:4D:FE:61:70:E1:B4:98:5B:7B:3E:45:DF
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9c:c9:a6:20:88:72:03:cc:33:d8:78:2e:00:1e:f1:bf:f9:
60:86:7f:e3:7d:68:39:af:c7:46:57:27:14:99:c1:d6:f7:03:
fd:62:2e:d2:e0:b2:4c:e0:75:90:dd:53:18:33:57:92:dd:0d:
01:cb:77:d4:3a:ae:a3:de:34:60:4a:e5:c4:f2:b4:87:11:90:
b8:b9:a7:72:67:a1:3f:4f:51:ca:7d:2c:7b:20:eb:00:bb:e5:
f8:8c:4e:96:b9:88:1f:33:9e:61:a1:26:47:38:28:c5:2e:49:
30:1b:a3:48:ab:95:49:90:db:a3:75:a2:d9:d1:8a:01:46:71:
8a:5c:87:27:5c:3f:c8:ed:d1:c1:46:62:c4:ba:f7:dc:c0:cc:
e3:a5:70:6d:3d:de:cb:45:15:09:4e:f5:6f:b8:11:8a:b2:4a:
a2:be:27:e5:20:39:06:6c:e5:23:a9:3f:86:ce:a5:01:8d:77:
65:cd:62:d7:86:ca:61:9a:49:88:49:2e:1b:7f:ea:c1:4f:97:
23:d8:00:b6:42:0e:e7:01:a2:5a:77:98:e7:ee:a2:60:83:48:
06:16:e6:94:11:32:6e:61:e4:48:c3:f6:5f:f4:f0:20:c6:86:
7a:04:71:2e:ac:f4:64:7b:57:e8:53:cf:78:1a:7a:58:f2:53:
89:fb:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:08:38 2026 by rpki-client