Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: x5mmvVo8jrjTGBTnjd7Dy0wNv9Pw/G6z/8sm5LBzYJE=
Subject key identifier: 19:9D:AC:F5:0E:48:9A:15:A4:36:6E:A2:EC:A5:36:7C:63:8B:E5:D4
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01A0D5391C6CD0E3FD6A0D7888248D114160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 11B5
Signing time: Thu 24 Sep 2026 21:01:24 +0000
Manifest this update: Thu 24 Sep 2026 21:01:24 +0000
Manifest next update: Fri 25 Sep 2026 21:01:24 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: tPdAR1RKB2V2kMpaGgY85s406VR6mf5LHioA6e/Yp1E=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:1c:6c:d0:e3:fd:6a:0d:78:88:24:8d:11:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Sep 24 21:01:24 2026 GMT
Not After : Sep 25 21:01:24 2026 GMT
Subject: CN=199dacf50e489a15a4366ea2eca5367c638be5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:cb:a5:ef:9b:5d:fc:63:0e:5b:21:33:32:
a6:8e:73:5b:7c:d8:47:3f:74:4f:23:de:4b:ac:7b:
9f:c2:f5:0d:45:9f:20:4b:25:b3:4f:c9:27:e1:71:
3f:46:af:b1:e4:84:e9:08:6c:26:68:ee:78:b7:d8:
37:e2:fe:b6:f3:76:9b:82:73:9b:a4:54:cd:e6:32:
39:a0:44:3c:d0:ae:17:a3:ff:9e:96:5a:64:a0:06:
34:df:39:33:1d:de:8b:b8:1c:2f:cd:13:30:b6:93:
23:63:1e:9c:19:8f:f4:72:e7:ea:fb:78:79:96:88:
28:d7:b1:2a:e7:c3:01:09:9d:19:54:3e:e3:f4:94:
ea:63:3e:a3:db:b0:f0:b4:72:ee:b7:ea:8b:fa:20:
76:97:22:02:44:14:73:85:e1:65:a7:95:20:be:a3:
e4:d1:4c:7a:05:d1:a3:fc:07:9d:6a:7e:7f:14:06:
83:42:5d:f4:e9:3f:df:d2:1f:45:53:b4:a0:85:7b:
db:81:eb:9e:39:a4:8a:7c:01:a5:89:16:ea:4d:c5:
ab:bd:98:1d:e1:f4:9d:bd:d9:67:d3:92:cd:19:89:
59:90:5e:df:5c:af:7f:7a:aa:f2:85:57:bc:ef:ca:
f3:a9:6a:8b:d9:f5:d9:c0:2f:19:d1:9c:ed:61:6a:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:AC:F5:0E:48:9A:15:A4:36:6E:A2:EC:A5:36:7C:63:8B:E5:D4
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c0:c9:cf:27:a7:3f:e8:75:db:6d:5e:4a:57:a4:4f:c3:a7:
0f:3d:76:4d:57:4b:83:cb:80:b9:2d:28:16:95:17:6c:29:e5:
59:23:a5:3f:ab:92:6a:8c:c3:43:08:20:f2:6c:a6:1c:88:8a:
e6:98:b0:34:47:4b:e0:bd:62:4e:ed:ce:60:e3:44:d6:1f:19:
17:be:26:fe:e7:67:ef:2c:d5:b9:f0:38:40:1f:2c:23:e4:ae:
67:80:3c:cc:c3:87:5c:9f:09:3c:7d:03:09:6c:bb:ec:44:b5:
46:97:c4:2a:07:dd:08:04:02:d9:31:a1:ce:5a:4e:9d:6e:37:
a4:6b:e9:58:a4:ed:46:f5:67:0e:61:07:20:b7:39:55:f2:ef:
29:50:68:e2:fe:c1:ae:4b:48:14:c0:7b:6d:f8:ee:68:ed:62:
45:0a:c9:fb:13:ff:ca:36:a6:09:21:c7:e1:90:4f:46:a0:5b:
d7:8e:2c:e7:28:1e:f0:c2:ac:3f:8d:0e:b7:e8:a7:8b:6f:17:
b4:7c:e8:14:df:e8:ae:c8:f5:32:94:58:2a:95:cb:58:be:9c:
27:1e:93:25:c1:b0:07:34:91:60:d1:12:ae:64:e8:b2:70:38:
c1:70:f9:51:92:41:f4:b3:82:9a:19:80:e0:51:5e:8d:9a:bb:
e1:33:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:24 2026 by rpki-client