Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File: 2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier: YufHRv1NmciW1ifmNkECm0fPVDwhejKlThGzP6ggIG4=
Subject key identifier: 04:8D:7E:42:82:E8:6F:A2:A4:4F:93:E0:A1:95:F1:BD:D1:EE:70:10
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer: /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial: 01A0E8894EEAD1985140AD2782256C4957C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 15:01:47 +0000
Manifest this update: Mon 28 Sep 2026 15:01:47 +0000
Manifest next update: Tue 29 Sep 2026 15:01:47 +0000
Files and hashes: 1: 1-BTuYEiDE2mEIP2dyXdE1PSMv3c.roa (hash: tBxS565NzZV2f/vbdXm3F39V84JJovJ6zXMOf+itJ6Q=)
2: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: 2Be4J+lhjVi8yxaZvsKB68g+rnYc1Z/w2fQZOXgFgdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:4e:ea:d1:98:51:40:ad:27:82:25:6c:49:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Validity
Not Before: Sep 28 15:01:47 2026 GMT
Not After : Sep 29 15:01:47 2026 GMT
Subject: CN=048d7e4282e86fa2a44f93e0a195f1bdd1ee7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:d6:89:4a:19:6b:d2:d7:6f:7f:b9:06:53:
89:19:00:78:af:80:0f:16:2b:db:f3:ac:64:4a:1a:
15:34:53:35:39:5a:a6:9a:5f:fd:29:2d:46:e5:de:
39:93:32:70:03:af:00:71:6d:08:04:56:db:02:bd:
ae:a2:02:a9:c5:5b:6a:91:ac:22:73:80:4e:65:0f:
c4:66:fe:f4:32:a1:85:47:8c:c1:dd:62:01:c8:f7:
69:64:61:b0:5b:78:9d:8a:4b:dd:ad:c0:01:05:0a:
bc:43:8d:32:4a:9b:83:c1:31:45:4f:0d:ff:b3:60:
eb:bc:b7:15:a5:f5:9b:55:52:96:2f:a0:3a:8d:64:
f1:4a:f1:0e:7d:15:bd:86:4a:6c:f8:d6:7b:b1:9c:
f7:38:7e:72:08:ee:71:a9:84:ad:8c:b7:15:d0:d0:
ee:e8:04:72:67:1d:85:5c:94:91:a3:8a:4d:22:1e:
fa:c7:6a:3c:39:65:5e:da:db:3a:1f:d0:85:2e:51:
2a:b8:f5:5d:1b:2e:da:7b:62:16:b3:2a:8c:e5:72:
15:d6:50:01:ca:45:10:f4:df:dd:b8:06:23:3f:46:
36:5d:4a:5d:f6:1d:03:25:63:de:82:06:21:a9:92:
01:2e:61:bd:bf:f4:e9:f2:ca:44:3b:5b:22:62:b5:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:7E:42:82:E8:6F:A2:A4:4F:93:E0:A1:95:F1:BD:D1:EE:70:10
X509v3 Authority Key Identifier:
keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:e6:9c:ec:ee:73:17:ca:c2:5c:8b:9c:75:3c:48:ad:16:
bf:72:fa:ff:af:ea:8d:4e:23:6f:db:a8:a6:58:b6:e7:de:56:
ec:a4:ac:75:cf:0c:b9:19:c5:85:c0:94:42:dd:b8:74:4b:0d:
15:42:99:cf:fd:1e:1e:9f:17:f4:50:64:fa:97:29:cf:48:11:
30:f3:a8:fa:08:b6:66:dc:b4:39:d9:e0:80:29:62:2e:94:35:
71:1c:69:8f:ac:14:1e:d6:c5:59:bb:e3:4c:b4:71:3c:2b:dd:
26:a4:06:52:71:a5:19:ca:b5:8c:56:e4:36:36:45:a9:83:f4:
9c:4a:ff:b6:95:ba:ca:a1:57:9d:7b:43:bc:db:e2:e4:bf:97:
cb:28:49:f7:f9:fd:8b:6b:7b:ba:4c:c6:92:0a:b4:89:26:7d:
87:e8:08:8c:22:0d:ef:fd:34:3a:80:36:1c:4e:72:01:96:14:
b8:fb:67:62:fd:fe:75:17:aa:1a:74:26:63:2a:93:13:02:0f:
74:7e:84:0c:03:8b:8a:eb:c9:b6:ea:34:4e:46:1f:28:5d:13:
10:5a:d2:90:f7:52:9e:4a:9e:88:67:30:44:df:ac:d9:ca:d6:
cf:e0:ad:b2:53:59:bc:0c:e1:cb:0a:55:3a:d0:96:ad:84:08:
9e:f9:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:19:35 2026 by rpki-client