Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: dPYWfpKizVDCbhIkUCNVcP8OKGj2p4o1siu+2PaHguE=
Subject key identifier: 9D:5C:CA:A1:EA:02:29:B2:C9:F9:CC:94:BA:42:A3:2E:24:C9:A5:EA
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 01A0C9D9685FCD54678DF2292E4B2BE25F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 07BA
Signing time: Tue 22 Sep 2026 16:01:03 +0000
Manifest this update: Tue 22 Sep 2026 16:01:03 +0000
Manifest next update: Wed 23 Sep 2026 16:01:03 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: pxiDxvz0KFNKJGGuRxdYPgzevlTk43ZBh3MQwqpDgYg=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:68:5f:cd:54:67:8d:f2:29:2e:4b:2b:e2:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Sep 22 16:01:03 2026 GMT
Not After : Sep 23 16:01:03 2026 GMT
Subject: CN=9d5ccaa1ea0229b2c9f9cc94ba42a32e24c9a5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:18:a1:75:b1:ea:64:de:29:d3:2e:bb:bf:
c1:50:6a:2f:16:7e:2b:94:b0:78:4e:97:d5:b7:27:
05:23:24:45:46:75:47:9d:11:cb:1f:fa:ce:5e:8f:
a7:c1:3a:0f:86:41:8f:1a:6f:84:7a:35:0f:f0:83:
44:9a:11:88:a2:9d:01:a6:84:f2:91:06:8c:1b:d4:
d8:b4:9a:7d:9a:28:9d:fb:2c:1a:b8:8e:b0:e9:02:
ca:f0:3c:6a:84:e0:f0:46:6d:1e:29:42:31:d1:04:
52:18:9a:0d:67:90:74:ae:1d:e9:a1:32:1c:4d:66:
67:5c:d9:9b:a7:8a:49:2f:3f:3c:4e:5d:31:97:e7:
eb:73:f3:2b:69:4a:a5:97:4d:ad:bf:c1:39:0e:16:
e6:83:6b:b9:75:3e:a2:72:71:ab:8b:50:53:26:32:
45:7d:c2:a8:b4:58:3e:3e:87:2f:df:57:10:d7:ca:
d1:b4:c6:57:a7:65:fe:06:f7:58:b6:e7:91:93:85:
81:a2:8b:a2:00:de:ba:d8:ba:0b:61:81:8e:5f:25:
f6:8e:c9:7a:18:42:7a:d1:b6:6e:f1:7b:99:50:a6:
2d:6d:9f:ce:54:25:ff:88:32:1e:9c:58:ec:85:1d:
9b:d5:da:6b:62:af:22:ad:f2:d0:04:3e:ed:6e:fd:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5C:CA:A1:EA:02:29:B2:C9:F9:CC:94:BA:42:A3:2E:24:C9:A5:EA
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:8a:56:fc:29:ff:44:13:12:26:07:fa:ee:30:c1:e5:95:
dc:8a:84:9a:ad:05:c4:b5:b1:e9:cd:07:0e:a0:69:15:d2:66:
00:38:8d:b1:49:0b:6e:3d:6a:b9:ad:da:29:10:81:18:83:0c:
0f:82:04:46:06:ee:66:0c:32:21:fb:a3:87:45:cc:ff:05:c8:
a9:df:7b:8d:de:da:79:f0:d5:38:17:1c:82:b7:50:cb:6f:99:
da:95:70:0f:6e:54:71:29:a5:0a:cb:29:14:26:36:61:a7:b9:
ab:d9:a9:d1:d0:7b:79:e9:57:1c:5a:ed:79:8c:f7:13:e5:f3:
a0:91:bb:78:17:e4:67:01:30:d5:e8:c4:1b:b3:8c:dc:69:7b:
a2:70:33:7d:8c:74:31:b0:5a:e2:a8:80:f0:5b:03:60:9d:e8:
e1:94:67:f9:54:7f:12:cd:7f:b6:9d:67:a1:70:1f:46:1b:6a:
5d:b6:ad:bc:a0:93:62:08:a3:a7:c8:72:02:55:92:ec:28:cc:
fc:34:53:46:d5:02:20:69:d3:38:33:07:80:c8:76:82:81:db:
8f:64:57:f2:ec:68:ed:0a:fc:4b:44:e0:db:c2:64:ff:7a:b7:
cb:17:54:44:f4:1c:0a:4a:93:43:9a:ce:37:c8:2f:25:35:2b:
3f:c9:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:53:30 2026 by rpki-client