Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
File: 2shrTkbnV9HOeo2AfDvNLf2AEHo.mft (raw, json)
Hash identifier: LQhQElljmGaWLqTuKbgLyCICA0PPc2dygGmqsLOTiv0=
Subject key identifier: FE:7A:58:CD:A7:44:2F:D3:4A:E5:DB:6D:56:64:D6:37:FB:A6:3F:A0
Authority key identifier: DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
Certificate issuer: /CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Certificate serial: 01A0CEFFA9E11AF71A58E4E5DA9CE41EFEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
Manifest number: 8C
Signing time: Wed 23 Sep 2026 16:00:56 +0000
Manifest this update: Wed 23 Sep 2026 16:00:56 +0000
Manifest next update: Thu 24 Sep 2026 16:00:56 +0000
Files and hashes: 1: 2shrTkbnV9HOeo2AfDvNLf2AEHo.crl (hash: Zjcw4np7PbnhsRcXJXjGIoVeIs+jbm0cwsfQnaZcvqA=)
2: ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa (hash: cFakUTOmj1JV5hfxE5yE0hEvYoySNj+UV/6/MHSkYGc=)
3: bf76c_RBoxlQYKBIyUE41s22DZw.asa (hash: tzIsB3gmTmwMB3iO3YI/Je1p9PWZvorFEWv6UfwZj6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:a9:e1:1a:f7:1a:58:e4:e5:da:9c:e4:1e:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Validity
Not Before: Sep 23 16:00:56 2026 GMT
Not After : Sep 24 16:00:56 2026 GMT
Subject: CN=fe7a58cda7442fd34ae5db6d5664d637fba63fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b0:1f:a4:c1:ea:e1:ac:67:2d:66:85:72:42:
c6:7d:85:37:81:ad:69:7f:07:fe:28:a7:19:f4:5b:
4e:38:72:4a:f6:c0:79:19:f8:46:13:73:62:9a:64:
71:9c:bb:19:fd:88:6a:56:12:7d:b9:de:25:c7:5e:
07:f8:0f:b4:c7:c0:02:d0:59:69:1b:20:83:0b:a5:
1e:79:58:d4:57:bd:f4:51:65:fb:a7:7a:36:78:be:
47:23:61:2a:44:a8:be:f9:2f:0a:25:23:d9:25:2d:
bd:f9:ab:16:c4:ba:1c:e7:a1:1d:d0:5b:6b:af:46:
c8:a4:1e:f0:1b:1f:a5:a0:f3:a6:b8:b1:21:2f:5b:
8f:17:04:29:9a:a7:5d:1a:9f:9d:76:66:c8:3a:d6:
a6:ed:96:b2:da:97:10:fb:39:ed:1f:a7:17:d2:08:
e1:9a:02:8c:34:21:ac:b5:52:d0:f8:89:fd:2d:03:
4e:46:fa:06:8d:bc:a6:30:90:38:cf:8a:d2:bc:fd:
d5:73:97:94:8e:7d:b4:42:dd:93:78:38:91:06:09:
87:cc:73:bf:82:e3:f9:77:9f:b7:03:93:62:84:aa:
f6:da:94:15:90:3c:4e:6c:8a:27:72:e4:29:aa:aa:
bc:cd:2d:2d:98:d2:fe:ab:63:8b:b6:78:65:ed:71:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:58:CD:A7:44:2F:D3:4A:E5:DB:6D:56:64:D6:37:FB:A6:3F:A0
X509v3 Authority Key Identifier:
keyid:DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:26:bc:1b:8f:65:f2:55:95:1b:1a:06:06:d2:af:09:1d:b6:
18:6a:18:99:f8:c6:b3:23:7d:50:66:61:8a:4a:b7:45:e0:27:
77:71:5d:ee:78:00:33:cd:86:13:05:b2:f7:78:1a:58:97:20:
f8:8d:44:df:a1:92:59:17:1c:92:16:22:53:2d:8a:88:48:b6:
fa:d2:d7:a7:04:24:11:13:20:b3:42:f0:a3:39:18:83:12:d1:
e5:0f:a1:20:0f:b3:10:53:e8:82:11:2b:e1:63:f3:34:b3:44:
1c:1e:3a:de:4d:7c:dc:33:ac:d8:21:db:ea:a9:27:6a:b3:21:
6b:9f:04:e0:50:c5:85:76:6b:26:45:05:4d:6b:b9:72:e2:79:
90:66:08:e5:01:5f:ef:99:50:b5:91:a1:9b:9d:b7:8f:0b:11:
07:17:f3:d3:34:7b:7e:84:64:7c:e7:c4:2d:7e:9d:fe:aa:34:
4f:88:fc:8a:7c:d3:cd:b1:f5:91:dd:3f:65:bd:14:37:ad:b0:
ca:28:b2:58:49:9f:6a:a0:18:9b:fe:32:1d:4d:5f:e5:74:bd:
98:b3:62:8e:2b:19:22:87:e7:ef:31:54:27:d4:a4:e8:3c:a5:
5a:22:5e:32:47:2f:55:be:79:3e:ca:c3:17:5d:32:73:e9:5d:
2e:ff:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:12 2026 by rpki-client