Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: xLhI7b9+KDSZLyhibwmj6UzCLC/UnUzsWxnz6yojbo8=
Subject key identifier: A3:4F:34:1D:85:EF:C7:4E:06:E4:43:8F:5F:11:3F:20:1D:ED:63:7E
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01A0D796AF0930EE89EBE0132584D216A4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1342
Signing time: Fri 25 Sep 2026 08:02:51 +0000
Manifest this update: Fri 25 Sep 2026 08:02:51 +0000
Manifest next update: Sat 26 Sep 2026 08:02:51 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: pUUPpPqCQum9U+3kQy6khBk2ru2gCVIpj5c+r0V1mNI=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:af:09:30:ee:89:eb:e0:13:25:84:d2:16:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Sep 25 08:02:51 2026 GMT
Not After : Sep 26 08:02:51 2026 GMT
Subject: CN=a34f341d85efc74e06e4438f5f113f201ded637e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:f4:31:fa:64:16:f6:13:d4:a9:24:f2:f0:
16:31:5d:4e:cc:99:dc:7d:d5:78:de:78:83:57:d4:
32:c9:65:0a:4f:d8:65:a6:3f:83:4b:d9:70:79:0c:
af:6d:a1:5d:da:e2:41:84:eb:65:b8:f0:20:8a:7d:
21:fd:8e:71:8a:fa:a2:99:a8:2c:a4:60:6a:1c:34:
85:4f:be:ea:7e:f4:41:19:84:e1:bf:47:41:e1:e6:
c2:5b:9b:ba:56:ad:a9:fe:b6:9b:38:19:d9:34:90:
db:f0:8c:61:4e:d7:02:06:8b:24:3e:37:bb:65:65:
b4:f0:93:70:2d:19:8b:8d:32:fa:7e:6a:09:0b:be:
fb:59:19:89:97:a8:57:c7:b7:fd:cc:bd:3e:27:76:
b4:44:2d:00:e3:1d:97:04:89:25:c3:c7:9a:44:03:
e0:73:25:9d:e3:0d:0c:23:1d:d0:81:57:87:ee:40:
a5:10:cc:a0:eb:d1:e3:6d:c8:2d:09:7e:0b:35:6c:
ec:d8:17:a5:b7:b2:3c:ab:64:d7:5c:d5:94:e7:3d:
29:1e:ba:39:39:ba:1e:95:49:e1:34:72:b3:98:8d:
1d:9c:7b:04:d6:ff:68:1a:26:67:17:e9:ef:6a:f8:
93:3e:25:89:ef:df:1e:63:24:b0:1e:c4:86:a9:0c:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:34:1D:85:EF:C7:4E:06:E4:43:8F:5F:11:3F:20:1D:ED:63:7E
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:62:32:d4:96:42:e7:27:10:33:5e:34:af:49:cd:64:2d:
f9:aa:02:cf:c0:8c:31:69:09:b2:b4:2d:cf:8f:ac:b1:df:b2:
73:2c:54:a0:51:07:b9:68:21:a0:60:1a:51:35:62:f9:09:75:
60:cb:74:a4:8b:f4:07:57:0b:55:79:8f:d6:7d:5f:56:06:f1:
64:3c:3b:02:36:21:bd:69:be:38:4e:f7:30:6c:83:fe:f8:97:
59:15:40:ce:ed:a1:ea:db:ee:d0:fc:c3:8b:2b:62:54:46:c6:
42:6b:a4:a2:48:fc:ae:6f:a3:ca:54:b6:df:06:1c:c2:e8:b3:
37:d1:cc:19:88:9f:c4:7f:18:c5:05:6d:78:34:1d:8d:7c:28:
53:07:44:b9:9b:64:c8:a3:90:ea:33:63:ed:2b:32:5e:7f:80:
48:13:0a:82:8f:84:30:94:a1:be:9c:c1:cd:1f:4a:1f:96:4f:
8d:bb:db:88:9e:53:d2:c2:5a:f9:c0:9d:10:5c:97:e8:63:9d:
db:83:1c:03:78:c0:51:27:7d:6a:90:62:ed:be:ce:73:bb:07:
0c:a4:3b:6b:ec:26:6a:be:27:d0:b6:06:33:95:e2:38:48:0f:
1b:ef:6b:cf:71:d2:65:bf:b1:91:0b:88:d8:69:95:13:2d:48:
52:22:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:28 2026 by rpki-client