Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: FOakrtPbbNREf3ayPGggtvU0y2nhXyeP4uPbRosC7OI=
Subject key identifier: 46:C6:2E:F7:09:E5:C0:97:2C:96:C7:7E:5E:9B:2E:3E:D0:34:70:49
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A0CEFEFCA3A46012F17CEAF403A464D56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 16:00:12 +0000
Manifest this update: Wed 23 Sep 2026 16:00:12 +0000
Manifest next update: Thu 24 Sep 2026 16:00:12 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: i2r+jTa/zCQ7mf9SUh/0QL1dM9PseCiuWb+lgl1Qfgw=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:fc:a3:a4:60:12:f1:7c:ea:f4:03:a4:64:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Sep 23 16:00:12 2026 GMT
Not After : Sep 24 16:00:12 2026 GMT
Subject: CN=46c62ef709e5c0972c96c77e5e9b2e3ed0347049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:f6:8e:c6:3a:72:00:be:01:f0:63:17:21:
7b:0f:05:bc:13:56:8d:d9:e9:cb:a5:4e:f4:55:25:
2d:7c:4b:7a:bc:a8:a7:06:8b:ad:71:6b:0f:e4:f1:
59:9a:7d:12:fb:58:a1:7e:76:82:d7:49:e5:70:c7:
87:ac:1e:5e:11:a6:be:0d:b1:77:61:68:2a:ec:52:
2c:cc:07:4b:36:b6:7d:20:e8:af:ad:22:27:91:62:
09:29:bb:b7:01:53:e6:39:91:59:75:0c:87:d3:a9:
d9:ce:01:36:f8:9d:0b:21:da:29:05:e8:cc:83:63:
6c:74:8e:37:bd:ab:10:d9:ff:b7:9e:60:60:50:0e:
51:d6:15:a3:38:77:7b:91:5d:db:0e:4b:2f:aa:81:
a2:60:01:10:60:2d:bf:51:fc:a9:7c:80:e9:9b:24:
74:1f:cb:75:10:58:c5:83:ca:a8:9b:2d:54:8a:8c:
ee:0f:dd:5a:5f:05:1d:ac:bb:66:9d:c7:0a:e5:cc:
52:57:ea:b2:12:e0:9d:f7:65:28:d4:62:09:b1:5a:
e7:19:d5:a0:8f:fb:f3:7c:57:d9:0d:e5:55:5a:3f:
d8:f8:1e:a9:c4:4b:b8:49:da:a9:2d:8b:ea:98:ab:
cb:93:73:22:56:67:92:36:ad:b2:4b:d6:dc:d2:e9:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:2E:F7:09:E5:C0:97:2C:96:C7:7E:5E:9B:2E:3E:D0:34:70:49
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:88:bc:b0:e7:56:b6:ef:c2:72:57:f0:b0:46:d3:d4:0d:
0a:ad:80:0d:5c:0e:01:f8:26:ac:77:8a:f8:28:4e:b9:40:13:
d1:6f:8b:c1:0a:1a:80:2c:8b:b3:1d:e5:55:57:52:bf:4d:91:
0f:d8:cb:15:26:3e:f5:25:e2:7c:45:2c:51:2a:37:d3:0b:14:
31:62:08:ca:7e:95:20:17:75:27:64:b5:45:49:5b:60:11:b9:
09:bc:2b:c0:e2:5f:5a:5e:c7:ed:52:f7:f3:ef:7d:7a:32:a3:
2a:fd:53:51:2c:8f:f5:14:39:7d:f0:bb:90:e4:1f:b5:e9:47:
b2:e6:5f:93:3c:02:58:4c:2e:98:19:08:0e:85:3a:ec:03:a9:
c2:5b:2f:ee:dc:e9:5e:7b:93:25:67:f6:94:83:2b:24:34:73:
60:a7:f4:5d:6e:08:94:49:64:39:c8:60:9d:86:ad:86:e9:b5:
98:65:1e:c7:97:cb:56:21:4c:a6:bd:86:6c:9f:ff:ff:42:42:
13:72:5e:ed:07:51:bc:d0:6b:a3:35:27:8a:95:da:55:42:18:
84:3c:21:e2:a6:f2:5d:c5:3e:f9:71:ed:8b:54:0a:ab:56:a1:
42:f9:cd:01:35:28:85:cb:cb:22:5d:5f:a4:3b:3b:c6:15:60:
b7:1c:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:05:28 2026 by rpki-client