Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: 0lHQ2xPP+LGZYFahNujfIHPjxRcwPcevKBB3t2r50gQ=
Subject key identifier: DF:87:21:77:27:43:E0:44:08:5A:68:39:41:D0:87:93:90:3D:78:93
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 01A0CEFF8B0F83B6232250A6DB8368CEFEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 0239
Signing time: Wed 23 Sep 2026 16:00:48 +0000
Manifest this update: Wed 23 Sep 2026 16:00:48 +0000
Manifest next update: Thu 24 Sep 2026 16:00:48 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: CWZVMNj7Daj8JknEqCXKuoedakMFnGnsnXHWqzvBvNo=)
2: RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa (hash: npb1ZPrAdc0F36Du7VzbNSITtgjkjYoCxnKV2J1JMgg=)
3: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:8b:0f:83:b6:23:22:50:a6:db:83:68:ce:fe:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Sep 23 16:00:48 2026 GMT
Not After : Sep 24 16:00:48 2026 GMT
Subject: CN=df8721772743e044085a683941d08793903d7893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:7f:1d:49:ba:78:f4:7e:61:4b:28:80:38:
e0:f3:ad:60:a7:75:b4:e6:b9:cf:74:bd:ce:d1:c6:
9e:76:16:93:0a:9b:18:5b:7d:43:2e:fc:54:f8:c8:
1b:8c:28:f5:6d:9b:0f:3d:a4:0b:21:d6:d8:58:e6:
8c:7b:77:25:e3:5c:a7:a5:bf:2f:50:9b:28:3b:06:
96:48:54:07:c4:ad:64:f1:c5:2f:a0:c6:d8:0f:51:
e5:ee:67:4c:9b:40:be:be:1b:41:bd:dd:4a:52:0e:
1e:d7:fa:1d:a1:d7:3d:fa:fb:f2:77:7f:4e:78:c8:
3c:fd:29:4e:36:87:a4:f2:4c:7c:5f:21:62:65:0a:
bd:88:c2:fc:e4:6a:66:d5:71:6e:7a:75:ba:a0:1d:
75:33:e4:1c:5c:0a:61:ff:ab:05:a8:7b:3a:94:7b:
37:e5:83:d2:ce:a3:6e:5c:7f:37:af:44:5c:3c:e0:
66:fe:de:c9:c4:86:7e:82:b3:c2:d0:e8:d1:79:64:
85:84:85:65:d5:1d:9a:c2:a1:ac:36:fc:fb:ae:7f:
c3:88:dc:2d:d4:f0:fb:bf:ac:8e:bc:af:59:9f:00:
a5:5b:91:1d:85:14:55:9d:d0:ae:0a:26:a4:2d:92:
bb:57:fb:11:42:35:7e:53:4e:e6:0d:1a:09:24:3b:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:21:77:27:43:E0:44:08:5A:68:39:41:D0:87:93:90:3D:78:93
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:58:85:51:f0:74:ed:04:44:77:b1:ce:97:a5:79:0b:4c:
9a:7e:e1:e5:94:80:12:1b:b0:ec:00:8d:5b:28:3e:78:91:2f:
3e:12:ff:28:56:40:60:4a:d6:a0:86:ad:56:6e:0d:66:9a:94:
ef:ff:50:3e:15:c8:5a:3e:56:41:94:b6:37:15:4c:23:ee:b3:
c7:60:7b:50:a0:26:e7:b1:a9:9a:17:97:36:2e:38:2f:40:c0:
e8:44:ac:c2:80:6f:fe:7c:c4:d7:2b:fe:8d:b6:e1:fd:f9:35:
4f:b4:57:7c:cd:b2:81:01:35:97:65:44:b4:5e:e0:60:a4:5b:
4f:7b:db:a4:ae:08:7a:96:0f:a3:19:14:a3:bf:f7:b8:de:54:
95:b0:cc:62:1b:70:6d:da:02:d6:62:a7:3a:7a:de:de:af:30:
30:3a:2b:56:20:b9:0b:08:50:c8:8a:63:8f:45:64:93:a8:c6:
79:f3:0b:81:93:6e:71:63:c1:f6:cd:1a:1d:92:3e:ed:bd:6e:
3d:e6:6f:91:af:e4:dc:90:8b:88:f3:c3:51:99:5e:34:72:09:
2c:ca:ec:06:55:a0:51:08:74:01:18:85:4e:06:65:6b:20:82:
66:83:62:f7:ca:32:61:2f:0b:a3:be:43:c6:b3:29:e1:a6:0f:
72:29:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:09 2026 by rpki-client