Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
File: 2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft (raw, json)
Hash identifier: GRfEf6p8f5NqcnTUh1hckaKobQTDT256UjnMyBKBuCE=
Subject key identifier: AA:45:BD:5D:39:DA:B2:8D:21:CC:44:F1:29:D3:2D:89:BA:39:36:2C
Authority key identifier: D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5
Certificate issuer: /CN=d8b54e91219d6ca76403f8b107f656296139f2b5
Certificate serial: 01A0D5398A6BE336F6D3BFFB9F7EC5E60ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
Manifest number: 01A2
Signing time: Thu 24 Sep 2026 21:01:53 +0000
Manifest this update: Thu 24 Sep 2026 21:01:53 +0000
Manifest next update: Fri 25 Sep 2026 21:01:53 +0000
Files and hashes: 1: 2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl (hash: +EpkXNHvtvi5KPDpF84tmLmEF7ISOsskQd961BApgNQ=)
2: azJk3jbM95gw45DMayjfbSC1DVc.asa (hash: f78br46llF1nPC5ot0D8hFrl68chpf+BcLtFLar8IO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:8a:6b:e3:36:f6:d3:bf:fb:9f:7e:c5:e6:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b54e91219d6ca76403f8b107f656296139f2b5
Validity
Not Before: Sep 24 21:01:53 2026 GMT
Not After : Sep 25 21:01:53 2026 GMT
Subject: CN=aa45bd5d39dab28d21cc44f129d32d89ba39362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:b2:ea:57:c8:80:b8:ea:2e:f8:87:21:b0:
2d:64:e6:e7:2f:a9:e6:d8:55:cd:ff:2d:39:06:2a:
98:95:e3:9f:54:64:82:a1:67:9b:c9:c8:35:5c:7b:
0c:67:95:5b:49:5c:3c:29:5d:9a:81:bd:66:b4:68:
ae:f7:05:cf:aa:85:e9:87:28:ce:d1:85:41:ef:4d:
3b:a5:82:73:1c:ac:11:46:21:5c:01:12:f1:ad:c2:
8e:32:68:8b:91:d7:f4:47:ac:b2:16:9e:6b:e1:dc:
ba:13:2c:7a:ac:d7:90:db:b8:cc:ba:42:30:c3:b4:
fc:56:42:7e:c4:25:89:81:5f:0b:4d:1e:11:81:87:
35:79:89:1d:64:10:32:65:f0:27:e7:22:c5:5c:19:
8a:87:fb:da:b3:93:9b:79:bb:c4:27:0e:6a:e9:3a:
92:5e:0a:2e:3a:fe:d5:71:cc:b6:d2:67:09:53:7c:
eb:a1:72:43:22:43:58:68:19:50:85:c2:15:f8:cb:
1b:6e:d1:75:ad:55:c8:c3:d3:58:a3:90:13:8f:c6:
4a:1d:84:01:92:bd:4e:92:76:f8:97:4d:85:83:9d:
04:38:8b:30:da:cf:20:a2:01:80:f3:e5:4a:44:f5:
0b:2f:6f:8e:9a:6c:ac:38:49:6e:8a:35:a3:bc:6b:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:BD:5D:39:DA:B2:8D:21:CC:44:F1:29:D3:2D:89:BA:39:36:2C
X509v3 Authority Key Identifier:
keyid:D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d9:13:03:2e:f6:6a:be:77:0b:27:0a:7f:9d:06:a3:fa:4c:
06:c2:ba:57:8d:de:06:11:e0:13:cb:76:8b:0f:d6:84:3c:8f:
b3:1b:ea:ab:51:8b:8f:5a:10:30:0b:c2:7f:8f:e5:70:3e:c6:
e2:49:2a:9e:1d:0d:18:19:6f:31:ee:66:e5:fb:3a:b1:c1:58:
16:2c:1d:21:00:46:0b:98:71:06:f1:80:07:26:72:f6:79:e6:
be:7d:21:1f:6f:72:6b:e6:2b:20:14:4d:d3:8e:6d:05:af:8f:
06:ea:5b:e8:da:23:b5:92:0f:bd:4c:a7:03:0d:e6:ff:83:cf:
1f:fc:de:f4:38:7e:c1:6b:f9:62:f7:10:4d:65:85:0a:6c:9c:
29:0f:64:77:26:72:40:05:1a:a0:11:c6:2c:38:ce:2f:cc:d0:
56:ee:84:89:46:8b:72:76:22:d9:94:11:97:74:ce:82:d8:09:
e7:9c:bb:df:c3:81:62:4a:80:1f:fa:98:b0:8f:81:50:ad:f4:
b7:06:17:aa:cb:4b:51:c3:64:4c:5a:02:db:d7:ba:61:93:94:
75:4f:0e:a6:74:ae:bd:cb:cc:5a:44:5b:42:84:33:9f:86:3b:
96:85:9a:a1:53:34:8d:a7:42:73:fd:29:da:be:a4:17:44:40:
1a:b4:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:52 2026 by rpki-client