Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: PKeDtoFUj3/XgCBxD+9zHoAvUAmNF+U9nhxdyK+EbYY=
Subject key identifier: 57:6C:3E:86:44:DF:90:17:C9:90:0A:D5:C3:93:D5:EF:AE:0C:E3:8B
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 01A0C444D1376F6B05F3BB4B1BFC7EB8DEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 188A
Signing time: Mon 21 Sep 2026 14:00:39 +0000
Manifest this update: Mon 21 Sep 2026 14:00:39 +0000
Manifest next update: Tue 22 Sep 2026 14:00:39 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: YY4jRFP01RuZg2pu4CmR6RD+RBDTY5OQhwqgT+K98CI=)
2: JKIhvk4nR2Yatg3LSMzcvAB5gDY.roa (hash: Wu8o0XpgB80LZ5YT5dratdi0qOmv7LG2bN4vwgSeFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:d1:37:6f:6b:05:f3:bb:4b:1b:fc:7e:b8:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Sep 21 14:00:39 2026 GMT
Not After : Sep 22 14:00:39 2026 GMT
Subject: CN=576c3e8644df9017c9900ad5c393d5efae0ce38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:2c:40:32:97:23:ae:ce:b1:1b:7c:a5:09:
cb:03:cb:29:36:59:ed:df:8a:a4:ae:97:7d:26:55:
3e:e4:ef:f1:d6:65:ee:f8:a0:f9:3f:fd:1e:fe:cf:
d6:f8:6c:b5:aa:65:82:06:7e:87:92:38:45:87:42:
48:fe:77:dd:76:b2:09:22:fd:c1:b9:9d:e9:e4:b4:
a9:20:4c:65:03:ca:c2:c0:71:5f:a6:64:80:df:13:
6b:6f:90:83:be:93:b3:4e:f4:bd:a2:96:f0:7a:43:
d7:f1:3c:d8:17:90:0f:dc:7f:51:1d:a9:fa:54:54:
ae:0a:fc:4a:84:14:bf:25:1f:40:60:19:51:cf:04:
84:33:f8:ad:43:7b:73:c3:4e:9e:25:c0:60:02:8d:
8d:4a:c4:ba:e0:90:68:d7:b5:4c:fc:d6:72:8e:02:
57:42:58:34:48:fa:7c:84:22:82:d8:e6:e3:2f:5d:
42:ee:f0:9c:12:ba:9c:56:b1:cf:9b:4a:06:60:61:
7f:1b:6b:10:7f:f3:6a:1e:9c:b8:46:ca:9e:82:08:
cb:1a:29:46:ab:93:d1:b2:cd:66:18:59:eb:49:e5:
db:96:8f:15:f9:b7:ba:df:51:a5:9f:65:56:3b:7e:
ab:85:c2:74:11:e9:39:8d:b5:15:9a:db:07:43:0a:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:3E:86:44:DF:90:17:C9:90:0A:D5:C3:93:D5:EF:AE:0C:E3:8B
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:ed:a1:28:fd:f1:29:0c:63:a3:e4:c7:10:02:d4:b2:37:
7f:b6:a8:59:d4:06:ae:17:cb:40:a6:81:15:8a:29:3f:9e:3f:
f7:2c:40:d5:7c:44:2f:f1:40:73:b0:e8:2e:a2:76:b3:1c:7a:
a1:0c:7b:a5:ef:4f:38:08:ee:34:40:24:94:0a:09:03:df:9c:
34:1e:8b:7f:f9:6d:10:24:15:0e:43:30:12:4d:3c:b3:81:b6:
94:69:84:d1:41:63:f2:18:e7:82:75:c2:64:f2:48:d1:1b:f3:
78:97:34:87:d7:cb:7b:86:65:a3:ea:79:0f:d5:38:3b:78:2b:
5e:87:ec:35:85:f6:bd:40:a8:79:cb:40:de:e5:8d:04:14:5e:
c6:3a:a6:89:91:61:58:a6:02:2b:a2:9c:a2:d8:98:47:3c:fd:
7f:31:7c:67:e7:5c:2b:40:6a:e7:cb:e5:e4:3a:39:0d:a9:ab:
35:16:df:73:d1:fc:39:85:48:0d:15:c4:34:6f:a8:10:5b:fa:
c1:ad:41:ce:71:b8:f7:00:97:71:ac:fb:bf:11:92:cb:e0:f2:
b5:e8:28:36:34:67:10:bf:9a:30:4b:f5:13:5c:58:c0:62:04:
87:5e:58:45:2f:64:31:dd:62:50:74:e9:b8:77:d5:6c:eb:63:
84:13:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:22:46 2026 by rpki-client