Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: rg2Vqn7QIwe7kCD5BYnLtH5M0jwZzJS7I/0nBuGdrw4=
Subject key identifier: 1D:D4:2E:BC:E9:BD:62:AF:99:92:77:47:10:36:84:8D:B6:C0:20:49
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 01A1C6D692B351F12173BD25C199A5E28E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1AEC
Signing time: Tue 10 Nov 2026 19:01:53 +0000
Manifest this update: Tue 10 Nov 2026 19:01:53 +0000
Manifest next update: Wed 11 Nov 2026 19:01:53 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: SrZJSNSZgeehb8DvEDo/Orex5rZCqat9qyWTFEpibH8=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:d6:92:b3:51:f1:21:73:bd:25:c1:99:a5:e2:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Nov 10 19:01:53 2026 GMT
Not After : Nov 11 19:01:53 2026 GMT
Subject: CN=1dd42ebce9bd62af999277471036848db6c02049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:68:9f:8c:cb:cb:f3:a7:b4:7a:f4:2c:d4:
ea:3c:8b:19:29:93:5e:b9:f2:d0:70:ef:fe:80:52:
32:f6:a4:3b:5f:6c:c0:bd:93:ae:a2:6d:f0:ed:d6:
64:26:97:7f:5b:bd:97:38:71:6b:99:02:47:96:56:
18:4b:11:89:f9:ea:2b:b0:c0:d7:97:5c:7d:cc:fe:
b4:08:55:4f:d0:b5:81:76:83:ce:88:16:56:8a:82:
b6:88:31:30:eb:4b:96:f3:4a:56:ef:46:4e:60:df:
d0:ef:36:37:86:ef:90:a9:87:21:4f:8b:18:d7:bf:
c2:41:90:e8:22:48:1c:fa:09:17:60:28:8d:d9:5c:
7d:b3:ac:e8:86:57:81:75:d0:0a:07:fc:fa:8b:54:
8a:8a:ba:8c:57:30:1b:7e:80:97:02:29:74:94:4d:
71:11:2e:c2:90:bb:fe:24:79:26:bf:34:bf:28:71:
65:86:81:28:f5:1f:61:89:c4:23:b6:3f:79:04:9e:
5d:2e:20:4c:f2:6c:3e:43:da:48:c0:47:23:16:b2:
1a:b9:84:86:06:a3:5f:e9:88:72:d4:65:07:86:ee:
de:12:90:3d:7b:2c:84:70:28:37:b5:19:6d:cf:29:
a5:10:81:82:ec:55:5b:64:a2:db:3a:5a:59:52:46:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:2E:BC:E9:BD:62:AF:99:92:77:47:10:36:84:8D:B6:C0:20:49
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:43:41:47:00:90:6f:51:99:84:41:08:46:da:1f:40:31:2f:
6e:80:b2:cf:b8:52:61:f9:30:8c:c1:53:86:6b:26:d7:8a:15:
93:52:2b:79:64:05:68:90:22:2b:60:78:d3:0a:fa:fa:bc:8d:
d6:98:11:01:f1:39:f3:73:da:66:c8:6c:df:f3:5a:f7:af:e8:
52:15:e9:f8:7d:98:c9:08:6d:96:f8:08:43:fa:65:62:56:75:
3f:38:50:a7:04:9c:15:a0:ce:5d:bb:28:3d:72:59:70:d0:1d:
05:eb:52:a9:3c:26:15:10:4e:e7:ec:b4:a8:5e:0c:b0:b9:d7:
30:47:4d:69:d2:92:3b:d3:98:30:b9:be:32:95:86:6f:2f:25:
d6:ae:fc:f2:e7:b0:33:0a:ac:48:82:e0:16:26:cf:d8:b3:cc:
d9:7d:41:0e:5e:c4:89:ec:69:73:51:94:6d:d2:7e:ba:fb:ca:
13:ee:5d:bd:1f:d8:95:fa:3b:78:0c:6c:21:4d:05:34:97:9d:
cb:55:ee:72:7f:63:b7:ed:98:68:be:b2:bc:1a:74:04:0e:64:
e1:66:a0:90:c7:4a:3e:fb:10:dd:13:39:0d:06:d4:f6:5d:c2:
26:27:d6:21:9a:26:fe:2b:03:90:82:d7:5b:fb:6b:00:33:01:
70:df:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 01:10:33 2026 by rpki-client