Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: Su6dxAIACFOqgeruvDq8aWc9ArF88KFyCOQx1VJXX4E=
Subject key identifier: 05:BA:45:31:01:C1:FB:9D:4E:92:66:76:5A:7E:7B:97:96:B9:AE:9D
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 01A0D9F17669A688BA785FCF4A844CF4815F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: 04DB
Signing time: Fri 25 Sep 2026 19:01:15 +0000
Manifest this update: Fri 25 Sep 2026 19:01:15 +0000
Manifest next update: Sat 26 Sep 2026 19:01:15 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: cex8dqhjY4g3V+zAg5Mz+dbsyUv7Vpdc9G2f1R+/YKY=)
2: n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa (hash: ApevewrPNzMKwdZYmudK6D8Ih9aFuZDtkDlyK/2Y0WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:76:69:a6:88:ba:78:5f:cf:4a:84:4c:f4:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Sep 25 19:01:15 2026 GMT
Not After : Sep 26 19:01:15 2026 GMT
Subject: CN=05ba453101c1fb9d4e9266765a7e7b9796b9ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:a1:9c:3a:71:f0:a2:73:d9:10:55:7a:5d:
9f:89:bb:af:7a:bf:db:04:e5:5a:4a:28:c9:be:b7:
6d:31:90:86:24:f1:f4:07:9c:11:7b:87:5d:28:53:
9e:0e:aa:2e:47:0c:da:dd:22:70:2c:dd:71:48:a0:
af:1e:81:0b:8b:f7:13:8b:08:b3:c7:b3:80:cd:96:
6b:73:48:5b:d2:de:fe:bb:a8:9e:ae:48:a1:58:6e:
bf:24:2e:12:50:71:50:9f:74:75:ba:7a:ba:09:7b:
3f:bc:75:89:7b:6f:ab:31:bd:56:4c:33:02:8c:af:
92:5a:fd:41:01:1d:19:af:9f:4b:bf:37:93:1d:f2:
35:1f:b2:ef:29:31:fe:fc:6d:b5:f3:5c:61:f1:86:
fa:84:38:07:0d:52:e5:2b:f7:82:2a:d3:31:1c:21:
a0:25:5e:dc:1b:52:84:7e:10:85:12:d5:80:c0:16:
53:d6:d9:ac:99:c3:1d:89:bc:bc:ef:e8:b9:85:0e:
02:5e:48:62:82:2a:f7:3e:63:cc:eb:7a:da:c7:ae:
8b:9c:f6:84:75:6a:fb:c3:be:1b:3c:b6:80:ef:cc:
81:ba:38:c0:ec:be:b1:3b:db:14:55:37:32:29:f5:
74:71:e8:b8:10:95:c0:93:a0:b8:b9:ee:43:d6:4a:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:45:31:01:C1:FB:9D:4E:92:66:76:5A:7E:7B:97:96:B9:AE:9D
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:b1:53:62:a4:3a:04:7b:f7:93:28:91:e2:0a:fa:93:5f:
93:66:13:bc:b2:30:78:6c:f3:a0:85:69:81:6c:66:8e:ce:46:
e9:4d:e6:05:22:5b:d8:dc:50:98:08:e2:d0:d9:2e:f6:a8:5d:
29:4e:3c:8c:6a:eb:64:a1:e7:1d:9e:75:25:d9:ce:f1:f6:bc:
68:7c:7e:fd:f1:08:73:16:af:92:9f:62:f6:b7:0a:74:9c:3b:
8e:94:07:1c:34:ea:3c:e7:e3:b5:5e:a3:30:bf:95:22:45:73:
7f:b1:af:9a:b5:d6:1e:53:d1:b7:ad:de:4e:50:5a:1f:6d:ed:
b8:4f:57:ff:3a:b6:ff:36:1d:f7:fa:57:9d:8f:d6:ac:41:9f:
a4:ab:0d:cd:c4:d5:5f:8e:a8:ee:23:8a:99:e3:c3:0d:12:87:
d2:c9:78:b7:52:0c:e6:60:4e:d5:76:88:31:0d:33:16:b8:fe:
f3:28:4a:61:cd:f1:e0:96:d9:1b:b4:ea:a7:e3:e1:cb:7c:ca:
20:d4:af:6c:c3:fb:de:77:a9:3a:72:97:4d:2e:58:c9:aa:e0:
9e:29:92:91:8d:87:f9:04:c2:e6:29:fd:cc:74:14:4e:dc:7b:
2b:b8:8d:6c:68:90:93:0b:3f:2d:55:c6:18:0c:05:07:92:75:
d9:02:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:01 2026 by rpki-client