Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: aa9taYOH1TDgN9OVIBrFpW7Lhnl5S6Mr1YwCmFaWc44=
Subject key identifier: B5:20:B9:BE:97:D6:36:DA:DC:89:20:76:63:98:E7:97:B8:54:4A:4B
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01A0CDECF12F09FEB27AF28AC80BB5FC7A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 11:00:52 +0000
Manifest this update: Wed 23 Sep 2026 11:00:52 +0000
Manifest next update: Thu 24 Sep 2026 11:00:52 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: eKsvHcZperq9uWozjKqhwHw135D2VAfIDQToNrFZBLU=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:f1:2f:09:fe:b2:7a:f2:8a:c8:0b:b5:fc:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Sep 23 11:00:52 2026 GMT
Not After : Sep 24 11:00:52 2026 GMT
Subject: CN=b520b9be97d636dadc8920766398e797b8544a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:e0:4f:75:9d:9a:2d:bf:a1:33:1c:5d:33:
34:a6:6c:4b:69:c0:08:2d:f8:c8:ee:ed:5c:ea:72:
b7:0d:f6:07:d1:1c:2d:d9:cb:39:e7:99:3d:f4:e0:
27:7c:d6:5b:f7:af:81:68:e5:dd:eb:16:4e:bd:94:
07:59:61:db:db:81:99:1b:a0:6f:c7:57:15:ca:bd:
66:9c:e8:ad:ff:b6:13:b9:88:ab:a9:fa:f5:1f:92:
0a:15:3f:03:f1:97:be:64:d8:1b:43:b6:de:2f:6b:
e5:48:41:62:ed:56:52:d3:42:2a:bf:76:71:98:d5:
00:82:ab:8c:7f:8b:4a:d9:47:f3:0e:52:82:de:d2:
50:21:c4:2c:25:5e:b2:73:21:b8:55:cf:2d:82:59:
21:15:db:71:e3:6d:53:a5:3a:2a:ce:93:d7:a1:d9:
b5:a2:61:89:f9:62:4f:24:09:2c:81:f6:50:3a:9c:
05:4b:0f:25:93:34:e7:e9:2e:6e:4e:cb:5b:a8:e0:
ed:4d:e2:3c:82:01:f7:99:53:01:b8:4a:f7:5e:46:
0c:eb:dd:5e:ec:66:e2:34:c2:d7:de:63:0f:c5:f3:
c8:c7:60:4b:1d:20:d1:27:70:71:4a:46:99:e7:57:
a9:76:c0:ac:a5:24:52:96:87:a7:4b:ea:a9:17:dd:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:B9:BE:97:D6:36:DA:DC:89:20:76:63:98:E7:97:B8:54:4A:4B
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:f3:a0:dd:c9:f1:7d:d6:cc:75:75:7e:25:dc:16:50:2e:
3c:be:11:5e:09:4a:40:c5:1d:0a:f8:9a:b2:ff:68:c4:6b:b3:
17:e7:49:01:d8:7e:f6:6c:60:07:50:08:44:30:c9:a4:af:0f:
59:00:06:b8:a1:55:8f:36:95:f7:46:25:14:f2:27:5e:7e:0a:
8e:cc:67:95:b6:fb:58:78:de:30:d8:44:be:b9:93:7e:75:5e:
ba:86:dc:f8:5e:be:ca:40:e0:22:eb:37:fb:b9:bd:9a:15:94:
7e:cf:b5:f7:f3:7a:5f:bb:29:e3:b2:86:22:eb:03:93:d4:33:
eb:5d:2a:ed:88:c9:0d:2b:d4:77:ee:ca:17:6c:fb:b3:13:d0:
ba:27:79:b7:fe:61:bc:d8:b0:d4:57:7d:ee:ef:cf:cd:59:01:
25:7f:38:0f:6f:3e:71:04:96:ba:38:39:3a:68:fe:a4:2c:59:
c4:db:b0:43:3c:bc:78:c5:5c:1b:39:55:0f:87:75:e7:0c:75:
9e:31:a5:f4:db:4f:89:d7:80:f6:67:e6:15:fa:4f:3b:62:80:
89:a1:7a:82:ab:9d:e3:c9:bb:fc:f4:44:35:b2:94:45:f8:9b:
d6:20:3a:22:28:74:d0:36:e6:e4:90:1c:d2:92:64:75:fc:ed:
44:16:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:01:55 2026 by rpki-client