Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: es2Fvq7XLgreIr5cp6hYOljZUJWm31uxqx+VQf0B+SY=
Subject key identifier: DF:AF:76:FF:E8:C7:31:A2:2C:B7:66:D5:5C:0B:49:8F:F4:58:EC:03
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01A0CCA2BA0723C2C6D2E2BC4F34D217D95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 140E
Signing time: Wed 23 Sep 2026 05:00:11 +0000
Manifest this update: Wed 23 Sep 2026 05:00:11 +0000
Manifest next update: Thu 24 Sep 2026 05:00:11 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: eTMgx6FtGbK8kATvvJG7LufIVjzY9NVWl7fnpFpOyLQ=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:ba:07:23:c2:c6:d2:e2:bc:4f:34:d2:17:d9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Sep 23 05:00:11 2026 GMT
Not After : Sep 24 05:00:11 2026 GMT
Subject: CN=dfaf76ffe8c731a22cb766d55c0b498ff458ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:87:05:d1:6c:5c:5e:37:5b:34:bc:05:e5:
42:d4:99:f6:d1:7a:cd:57:f1:46:5d:4c:21:61:d3:
7d:4e:e5:f0:d7:6b:8b:18:65:a9:ef:99:64:6a:a8:
e6:06:64:a4:ca:e0:d7:ab:ea:e9:3f:28:43:a6:fe:
cd:8c:e5:20:7a:3c:98:51:76:19:29:d3:78:c0:8a:
30:3f:7b:43:c1:1f:32:f1:1f:0a:e5:ee:3b:e4:23:
66:99:ca:72:81:26:37:4f:d5:60:f6:20:cb:8b:fe:
11:38:ea:da:52:a2:fe:d9:e0:77:52:54:a5:9f:8c:
b9:c8:51:08:97:64:0f:42:53:7b:c8:a4:ec:a0:f2:
e7:8c:30:f2:ed:cb:31:f1:62:52:68:b1:ca:5f:67:
e1:c7:40:ea:ed:ec:77:2d:61:1a:b7:71:d0:89:22:
47:38:7f:ad:31:b4:27:90:bf:d2:6c:54:5a:7b:2e:
0a:df:f5:eb:7e:20:9b:9b:50:50:a0:0b:e4:13:56:
7f:2e:16:ac:b3:f3:e2:7a:f2:73:f9:0b:20:15:62:
4e:d5:be:ac:b2:00:7a:9c:21:ed:a1:fc:ce:10:ca:
50:3f:77:9a:51:09:6e:d5:3e:d9:50:f4:1f:eb:89:
1f:b2:ab:86:ba:f9:9d:f1:dd:3c:61:0a:a8:b1:32:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:76:FF:E8:C7:31:A2:2C:B7:66:D5:5C:0B:49:8F:F4:58:EC:03
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:61:8d:9f:da:5d:9f:b9:e7:2f:0c:b3:e8:a7:dd:6f:5d:f8:
1b:a3:80:6a:61:c0:d8:a4:04:a2:57:e0:7d:7a:62:fe:e1:cc:
8a:7a:20:56:ef:36:4e:6b:fa:86:2a:6c:bd:af:bf:52:b7:1a:
32:4e:d9:24:fa:6e:f6:30:ab:68:07:cf:66:03:6d:50:ce:dc:
2a:04:d9:1a:cb:9f:2e:2c:c9:c6:26:bb:e8:2e:29:71:7a:0a:
06:96:e4:bf:d1:e6:74:78:69:97:db:e9:21:75:75:71:6c:26:
ab:55:b2:10:35:c2:9b:95:35:30:6c:ed:33:b6:c5:38:f3:91:
b5:a7:53:ce:a4:8a:c0:ee:fd:cf:1f:8d:3b:27:db:13:ed:9c:
82:fc:68:a6:89:de:2c:56:3e:51:42:49:c2:d4:a2:44:31:7a:
bf:7e:99:0c:ed:a3:4f:d3:4e:46:49:5f:d3:b7:a6:8a:33:f2:
69:90:53:64:93:7b:a6:41:53:cc:18:8b:7f:78:37:f6:32:d1:
41:1a:73:37:ba:04:c5:c5:e0:b3:de:b3:b2:d5:ea:b0:06:cb:
90:d1:45:30:04:fd:95:f4:2f:57:8f:f3:39:f4:dc:ba:75:e1:
12:b6:e7:fc:86:28:9d:6f:ae:32:5a:1e:8b:1c:81:65:bb:89:
d9:fa:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:18 2026 by rpki-client