Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: iA+nRgsri6bgSOeRevPYz50SkApkRy8Xvfgt+9/quME=
Subject key identifier: 8B:9B:37:4A:C2:D4:45:8E:AB:06:22:29:29:5B:EE:1C:99:2E:AB:76
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01A0D011D5041F5A25E26B6C44B7E3B1312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 21:00:24 +0000
Manifest this update: Wed 23 Sep 2026 21:00:24 +0000
Manifest next update: Thu 24 Sep 2026 21:00:24 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: MubMOX8GuppWYSqko1CVIdd+KRN0mfM1+C82wah2Ixs=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:d5:04:1f:5a:25:e2:6b:6c:44:b7:e3:b1:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Sep 23 21:00:24 2026 GMT
Not After : Sep 24 21:00:24 2026 GMT
Subject: CN=8b9b374ac2d4458eab062229295bee1c992eab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:90:6f:f3:78:30:60:c1:8f:ac:46:b1:54:
09:af:26:b6:65:93:bc:9e:1a:4d:ee:a7:b0:8f:87:
27:67:47:65:cd:81:76:67:bf:e9:d6:e9:ed:1e:96:
a7:16:45:ca:0f:3d:8a:16:15:be:00:6e:63:82:31:
00:a7:fb:af:3b:73:89:76:b1:66:16:f6:80:9b:f4:
c0:d8:33:b3:1e:88:d1:bf:cd:c6:3a:2a:87:ad:61:
52:83:99:a8:d7:e1:98:77:3f:a5:17:ad:94:f0:94:
ed:0f:52:0f:b8:a8:88:df:2f:6c:77:89:54:b3:25:
f2:e6:1f:f7:8e:24:a2:6e:3a:50:20:82:44:d7:44:
b8:42:84:60:21:64:b8:08:95:b6:17:85:4a:67:aa:
a9:b5:4f:53:a9:ad:1a:7a:0b:a5:27:3e:f4:a2:1b:
d1:2d:c8:7a:28:6c:f1:fa:1e:d9:b5:ac:b6:d9:43:
4b:a2:f9:95:c6:0b:89:70:f8:24:42:e4:73:f8:10:
d0:37:14:4d:e0:88:2f:14:ce:59:6c:f0:ae:c9:6f:
07:3a:da:6d:84:21:12:e9:2b:1c:b2:ee:05:33:78:
4d:15:f5:de:d2:7d:d7:d9:1b:fc:85:25:bd:cd:b6:
6d:89:bc:e8:06:bf:90:4b:79:fc:8c:38:cc:c0:35:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:37:4A:C2:D4:45:8E:AB:06:22:29:29:5B:EE:1C:99:2E:AB:76
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b4:7b:02:60:17:5e:5d:2c:77:3b:83:7b:b3:19:fd:49:9a:
f1:b2:b6:40:aa:f5:b7:6b:f1:d3:62:65:21:c5:62:ce:ad:ba:
74:4c:90:b2:16:c2:cc:3d:c1:62:44:7e:a9:5f:3a:f8:83:8e:
c2:af:96:aa:4a:b8:d2:78:61:96:9d:e4:4d:e3:45:c3:01:0e:
7a:64:cf:ae:52:01:00:dd:ce:d7:81:f6:8b:ec:ba:7a:74:bf:
16:30:52:78:16:66:81:52:65:90:2c:c2:98:77:e8:d8:3f:54:
f1:d2:77:7e:ec:e6:e0:35:22:45:b6:74:ad:2f:bf:7c:00:6f:
dc:7c:47:c9:91:db:77:df:dc:70:de:ff:43:b0:90:54:68:8a:
2e:81:76:a7:ef:8d:be:a6:2e:c6:cd:8d:0f:30:34:1c:68:01:
37:79:87:26:05:b3:3b:dc:0d:05:c9:79:79:db:eb:16:ae:31:
a1:51:1f:09:5e:ef:46:a7:41:68:7f:b3:96:92:66:73:31:4f:
19:85:e5:39:06:3d:ba:12:aa:7a:c3:c2:75:f4:7c:37:2c:cb:
0a:15:2f:96:13:e2:84:5a:a7:cf:e4:4b:63:92:4f:85:e6:f0:
e8:3b:b9:bb:7b:fa:6e:60:1c:68:66:8a:88:99:d8:d6:74:84:
7b:85:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:46:29 2026 by rpki-client