Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier: mUP9NbxR0y1errYlk8A0sM0wNkjBtuFAMPiUld1zTGI=
Subject key identifier: F5:9D:B9:91:E8:64:01:BE:7A:2C:3F:B4:F1:44:0E:4F:CE:E1:35:1F
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 01A0C331F2E8608120434B57CAAD3FD3A05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:00:25 +0000
Manifest this update: Mon 21 Sep 2026 09:00:25 +0000
Manifest next update: Tue 22 Sep 2026 09:00:25 +0000
Files and hashes: 1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: YX25q2tfmghkbCbH4mANYGrSfWUcit4CdLk6Ayu7NYE=)
3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:f2:e8:60:81:20:43:4b:57:ca:ad:3f:d3:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Sep 21 09:00:25 2026 GMT
Not After : Sep 22 09:00:25 2026 GMT
Subject: CN=f59db991e86401be7a2c3fb4f1440e4fcee1351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:3b:13:ef:63:73:15:1f:b5:ec:3a:8d:5a:
de:3f:f8:8e:2f:09:67:83:b0:c9:a5:64:78:cc:b0:
9d:07:9c:33:e5:1c:fe:c4:e4:0f:a1:34:3e:39:7f:
9e:81:20:e7:f2:58:fe:44:29:8c:bf:72:1f:29:df:
5f:97:07:9f:a0:1a:ea:5a:78:2b:2f:fc:f5:8d:e2:
0f:2e:c2:73:4d:66:0f:99:5d:f1:b2:bc:a6:d9:a7:
0c:1c:56:13:1f:64:64:0e:8e:7c:de:0c:80:4e:44:
67:ca:0c:90:c3:50:f8:83:c9:6d:19:f1:63:6c:e2:
20:ce:a2:09:63:7d:a6:d9:78:49:2a:35:85:39:48:
95:f4:b3:79:9b:08:cf:e8:e4:80:e8:10:90:30:b0:
49:53:f4:62:0c:92:8c:61:f2:eb:80:04:c0:0a:d6:
2b:e4:49:2a:19:44:01:b1:3e:e3:fe:81:6c:8d:a4:
47:b3:7e:0a:7c:2d:42:fd:a9:0d:ad:88:c6:62:66:
5c:8a:8b:79:aa:63:6b:03:08:9f:d8:d4:1a:a8:f1:
88:72:88:99:99:12:ac:f5:62:59:66:44:47:24:f1:
6a:79:da:02:b0:64:d3:4d:56:7d:9f:d8:f2:8d:f6:
e5:57:ee:2b:97:68:4b:b8:54:4f:bf:4d:20:fc:b6:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:B9:91:E8:64:01:BE:7A:2C:3F:B4:F1:44:0E:4F:CE:E1:35:1F
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:f7:0a:e2:c6:d6:81:d2:d2:af:8f:39:3f:e7:80:7a:d1:
61:8f:f4:94:03:3e:e5:36:58:62:b4:ae:2a:55:92:54:ba:06:
b6:e8:1f:24:d1:23:23:ad:97:cb:b3:c0:b8:8f:4d:81:17:b4:
f3:04:65:29:3f:68:99:f2:b3:19:03:87:8c:6d:14:fc:17:f3:
9e:0d:7e:66:4a:04:10:90:a1:30:5f:02:c3:70:6d:33:b6:79:
34:d6:e0:7f:5a:4d:90:90:52:42:bc:08:a0:41:14:e6:e5:29:
5c:8f:c1:60:7c:e9:d9:d2:e3:8e:a2:2f:4a:af:76:31:9c:d3:
25:2f:e6:23:57:47:a3:77:93:b6:a4:08:4c:a1:a2:6b:93:15:
eb:4e:62:ed:77:13:66:fd:cc:96:41:f9:a3:de:8c:cf:0f:fe:
24:46:c7:f2:04:4b:cc:4e:69:c8:89:89:06:0f:f3:67:6e:95:
b3:2c:74:22:18:a7:db:db:52:d7:7f:32:31:81:dc:e6:75:eb:
92:67:0a:1c:43:37:00:1b:7d:8c:15:c7:e8:6b:34:e4:14:8c:
e0:46:7e:ff:79:5f:1f:10:50:a2:21:75:87:7a:ea:3a:fc:ce:
4f:dc:97:0f:23:0e:86:be:b3:e2:f2:fa:21:6b:80:2b:a6:74:
f3:fb:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:30 2026 by rpki-client