Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: J8pHHhFdLbVT4OzSPa+0YpmRlE5vMz+E7SoDqXb0PGI=
Subject key identifier: 2F:CB:E3:C6:08:BF:DA:4E:3C:76:32:D3:4D:1A:CF:57:06:F2:E7:F8
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 01A0C10C7BADB05C7A223628EB47C2FD43C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 1827
Signing time: Sun 20 Sep 2026 23:00:15 +0000
Manifest this update: Sun 20 Sep 2026 23:00:15 +0000
Manifest next update: Mon 21 Sep 2026 23:00:15 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: /UzNJYie6SxPnzLaIyd87j1vnftVCt9mr7oyVJyYQ8c=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:7b:ad:b0:5c:7a:22:36:28:eb:47:c2:fd:43:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Sep 20 23:00:15 2026 GMT
Not After : Sep 21 23:00:15 2026 GMT
Subject: CN=2fcbe3c608bfda4e3c7632d34d1acf5706f2e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:8f:17:6e:e7:a5:58:69:07:ba:1a:30:40:
26:d1:08:4f:3e:1c:a5:f9:15:ab:1a:30:20:4f:c1:
fe:30:3e:c9:0a:7f:a2:43:f0:fa:46:0f:44:a8:89:
81:9e:9f:08:74:42:6b:18:61:30:29:01:67:81:d2:
cb:25:d0:c9:68:7f:a0:8f:f5:1e:0e:1d:d0:28:8e:
66:aa:89:50:15:de:a5:aa:5c:89:4e:ad:71:ad:65:
c3:b0:de:e7:4c:10:26:a9:41:2c:c9:20:7c:a3:80:
6c:76:92:64:f2:30:0b:e8:20:88:66:41:66:dd:8b:
e4:8b:45:07:59:1f:d9:89:53:c2:08:0d:54:0b:74:
63:75:eb:04:c5:93:eb:c2:5b:97:13:1b:21:74:cd:
3e:2f:39:a1:84:0c:f3:4f:8f:f0:ac:9d:14:a5:d5:
92:f0:97:f8:83:28:fa:cd:66:0c:ff:31:78:ee:61:
2f:be:eb:c3:f7:9e:f7:84:61:7d:7e:e2:8f:db:8a:
50:43:ec:b3:17:52:42:eb:6f:0e:a2:f0:aa:cd:97:
88:8b:75:1b:b0:ba:7b:7a:72:ad:5a:4b:75:eb:dd:
07:f8:2f:a5:46:75:fa:03:87:17:93:31:34:29:b6:
a8:0c:12:a3:2f:fa:cc:ca:14:02:6c:9f:f9:73:f9:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:E3:C6:08:BF:DA:4E:3C:76:32:D3:4D:1A:CF:57:06:F2:E7:F8
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:fa:00:a2:ee:fb:2a:bd:f1:f9:74:95:ce:be:b9:90:b1:
44:44:c6:b7:08:f7:80:13:02:81:89:09:fd:ca:95:19:3b:54:
48:ad:07:a2:88:98:c5:f5:be:c4:46:69:59:13:95:17:1a:93:
05:71:a6:e1:e9:03:0f:e8:9a:3b:f3:01:20:a0:ab:d4:0d:d7:
95:c5:d9:fc:35:ee:76:13:d4:5a:25:21:fe:fb:b7:93:9d:7b:
a2:e1:d8:aa:3f:9a:f2:0f:39:5b:56:c8:73:f0:50:28:a1:11:
04:41:c2:5b:33:e3:53:24:88:49:5e:19:a0:99:47:74:41:e9:
b2:bb:78:54:7b:3e:97:c2:09:06:7e:cd:4e:5e:29:01:47:04:
38:ff:83:0d:a2:e0:7f:b4:33:7b:bb:9e:e7:0a:cc:28:66:6c:
ac:29:07:43:1a:6c:4c:00:10:d5:2a:3d:e2:8a:7e:d0:db:11:
5c:76:7e:b6:eb:28:74:2f:f8:ec:0c:6e:18:92:2e:69:cb:5c:
ba:b7:a8:92:ba:dd:66:c6:ef:1b:26:4f:88:8b:63:a9:1d:28:
ab:12:bf:8d:fe:09:1f:cf:dc:3e:c3:34:03:f5:1b:44:48:c5:
f6:75:fa:c7:9f:39:2b:2d:81:07:a1:28:66:57:56:15:a5:1e:
8a:2b:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:33:54 2026 by rpki-client