
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: 7imf0+XePz4A9yMbMjcUqpoccSKmh3lApw+no5dP5G0=
Subject key identifier: D3:CF:3C:2C:05:C6:25:AA:FC:F5:B2:E3:BF:46:9C:C8:2C:02:EA:18
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 01A0D1C919BC1B2BD2A550E3EEFF08DA51B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0C78
Signing time: Thu 24 Sep 2026 05:00:12 +0000
Manifest this update: Thu 24 Sep 2026 05:00:12 +0000
Manifest next update: Fri 25 Sep 2026 05:00:12 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: sKUxrN9rKtpr8fshPVJH6KpYCWTRbhaCzMgaAYtzanU=)
2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:19:bc:1b:2b:d2:a5:50:e3:ee:ff:08:da:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Sep 24 05:00:12 2026 GMT
Not After : Sep 25 05:00:12 2026 GMT
Subject: CN=d3cf3c2c05c625aafcf5b2e3bf469cc82c02ea18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:67:30:75:32:34:d9:d3:0c:ca:c9:f8:03:
81:3f:69:e0:52:bd:e6:4e:c8:e7:9a:fa:80:4f:af:
a2:a2:fb:28:65:1f:b8:2c:fc:d2:da:d9:1f:73:d9:
fc:65:c7:f4:00:67:6c:09:ce:c0:19:bd:ab:34:de:
a7:ff:20:0f:e0:0a:40:13:1c:6c:44:f0:95:74:31:
3b:42:4e:54:ba:b2:af:63:88:28:2e:9b:20:43:d1:
3e:7e:77:a9:98:1b:1e:64:09:41:b5:9d:cc:8d:9b:
7b:c6:0c:b0:7a:e9:d3:7e:db:d1:36:b5:32:17:10:
6d:18:62:a3:c1:ef:d5:16:78:44:45:15:13:58:1d:
b2:c7:d6:f4:14:00:cd:99:f6:32:0d:fa:fb:e1:98:
02:68:8d:07:c8:ff:64:8b:0f:8b:8b:82:b7:20:ee:
a6:36:00:19:4f:7e:ac:57:ad:47:19:91:88:45:e9:
b4:84:05:e2:1a:e6:24:3e:e3:16:54:19:cd:04:d4:
90:7e:26:23:73:c1:8f:5c:0f:da:89:d7:b6:49:1c:
b0:e3:b9:b7:91:28:93:a6:d2:4c:99:16:cf:b6:40:
da:47:b5:e3:44:6b:6d:8f:9d:da:70:8b:31:21:6a:
a8:49:61:b5:86:a7:fb:b4:42:5c:be:b2:61:3c:05:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:3C:2C:05:C6:25:AA:FC:F5:B2:E3:BF:46:9C:C8:2C:02:EA:18
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:6e:52:52:89:92:79:3a:ef:06:93:49:ad:1d:96:50:56:
ce:87:47:25:31:c7:03:e1:93:28:43:68:4c:0d:65:58:af:5a:
36:c2:89:f1:8c:92:e2:9b:2a:62:52:08:f8:8b:26:c3:79:e4:
7d:93:92:76:af:ab:3f:16:76:04:f9:d2:00:c6:ca:fd:96:87:
97:6c:bd:bc:d5:6a:63:55:0d:20:c8:f2:6a:4e:48:c7:ec:b9:
18:77:61:76:1c:58:03:10:f4:28:0e:56:90:de:2d:d9:52:e2:
ff:57:76:8e:f3:5c:ed:b4:c0:6d:66:67:fe:64:22:af:bc:d1:
52:d9:2b:34:01:33:fd:d5:7f:f6:7d:9d:31:d6:f8:7b:10:4b:
0f:f3:af:e5:20:0e:ac:8b:a4:ff:84:65:0b:d4:86:6b:ba:ff:
e0:50:90:e6:ec:57:4d:ed:87:1f:15:75:00:19:ac:a2:57:18:
89:03:e6:b3:0a:9a:1c:98:c0:61:04:22:d2:6e:0d:35:12:88:
dc:87:26:dd:56:1b:5e:16:75:ef:d8:d8:a1:86:c7:94:07:80:
30:81:d8:6c:99:dd:7a:a2:0c:8a:be:2b:e7:85:be:82:74:43:
e3:0c:94:4d:36:a2:58:fe:93:37:37:85:d3:64:59:38:78:08:
b2:17:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:05:28 2026 by rpki-client