Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
File: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft (raw, json)
Hash identifier: uE4y6c2o6bsnaWozuNwlSto8PuveJSNbb4PVSWkSqVI=
Subject key identifier: 69:4F:6B:61:1F:DE:94:85:D4:D9:73:E4:79:78:DF:30:AC:6E:B9:B7
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 01A0D7CBD38662728DC1912FDB5E53A8AE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:00:54 +0000
Manifest this update: Fri 25 Sep 2026 09:00:54 +0000
Manifest next update: Sat 26 Sep 2026 09:00:54 +0000
Files and hashes: 1: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl (hash: q/kBAbCjGXeNW8uTSwwmBJf9Zr+hBZGKupX2mkxWyTM=)
2: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (hash: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=)
3: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (hash: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=)
4: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (hash: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d3:86:62:72:8d:c1:91:2f:db:5e:53:a8:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Sep 25 09:00:54 2026 GMT
Not After : Sep 26 09:00:54 2026 GMT
Subject: CN=694f6b611fde9485d4d973e47978df30ac6eb9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:a0:a1:01:09:c4:6a:a9:9c:bd:5a:50:74:
44:28:54:21:d9:9f:51:7e:55:0d:54:e0:70:45:dc:
cd:de:4d:8c:79:e4:d1:76:5c:7b:34:f7:50:d7:2b:
a1:4c:97:66:5c:2a:c7:42:f5:2f:ed:c0:28:f1:4f:
48:d8:29:a9:ac:e6:26:d7:e4:6e:5d:5f:cf:0e:67:
ce:dd:b4:06:78:bc:ae:c9:2e:dc:d8:38:22:e2:66:
fb:0f:7f:f8:a9:70:03:1c:b2:2b:4b:88:07:d7:ba:
ed:16:9f:dc:4e:4d:e6:f2:48:62:85:d8:fb:2b:75:
22:69:28:8c:b5:6b:42:92:5e:f7:7f:93:e3:44:39:
2d:f0:ff:86:62:ee:85:b6:15:69:2a:52:ef:6c:67:
db:e1:7c:cb:8f:38:36:77:19:8c:06:1b:24:d1:f3:
7b:17:38:d3:de:36:2b:0c:f2:45:b0:9b:c4:39:9d:
7d:af:4a:49:a3:94:59:ed:4f:f6:8f:1f:f5:95:b4:
d8:a2:ac:4a:0e:f9:97:6b:1a:68:9e:41:19:47:04:
05:27:59:4a:5b:ba:ee:d1:ff:5e:06:36:e1:ef:4c:
8c:df:aa:e9:6f:ae:68:70:4c:0b:53:70:0c:6b:b8:
a1:7f:2d:ba:97:7e:31:af:23:75:07:ca:b9:1b:19:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:6B:61:1F:DE:94:85:D4:D9:73:E4:79:78:DF:30:AC:6E:B9:B7
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:4c:f2:8e:d0:aa:64:c0:f7:2e:0c:4a:2f:b0:ba:ab:71:
96:14:48:ae:9f:b4:fd:18:73:a7:50:7d:11:56:b5:47:e9:6c:
2c:9a:84:de:b9:59:f0:69:09:51:7b:10:79:85:7d:7f:3b:e1:
b3:f4:69:a0:f6:46:64:95:ab:dd:63:41:1d:62:a4:74:7a:f0:
fe:fe:59:dc:8d:8a:ce:51:4b:c0:24:b9:fd:e0:70:f3:2d:ab:
ff:22:d0:5e:41:41:ae:26:b5:54:66:25:94:f6:23:02:72:f2:
b0:70:60:f4:9f:1e:0b:ac:b6:bf:7c:f1:68:25:44:91:07:60:
70:8d:e1:41:44:9a:b6:78:03:52:dc:fe:4c:6d:f9:3d:b5:15:
da:a4:6a:7b:c0:e0:c3:f0:70:2c:b0:24:ef:7a:89:b2:09:59:
1b:35:d7:f3:08:35:7a:cf:27:d6:a1:42:f2:6c:b5:01:a8:c2:
32:f6:2d:a2:92:80:22:53:e4:fb:f1:d8:ae:3b:ca:8a:c7:d8:
db:0b:35:d6:fd:56:be:72:73:7a:03:71:1f:20:0f:f3:b0:4c:
df:bb:ea:d9:f9:93:de:73:0d:fd:09:59:be:21:6c:a2:73:9a:
b4:f0:4e:0d:e5:22:81:79:f0:3a:25:31:d1:8c:dd:d0:68:1f:
fc:1e:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:58 2026 by rpki-client