Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: 7rPkNkRERTo5eQEJTE8a/Hn8WskhaXdLEWfZBY/i1ZQ=
Subject key identifier: D8:9C:F2:5B:9C:60:CC:3E:14:9B:65:26:D0:33:A2:87:93:F1:C1:EB
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 01A0D34AD0A16D2299922E3C361C0AD585E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 0408
Signing time: Thu 24 Sep 2026 12:01:30 +0000
Manifest this update: Thu 24 Sep 2026 12:01:30 +0000
Manifest next update: Fri 25 Sep 2026 12:01:30 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: eA0ruGLWfFy9ISeQ05XEKPeBTRYNDRLEPBCieebpDIs=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:d0:a1:6d:22:99:92:2e:3c:36:1c:0a:d5:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Sep 24 12:01:30 2026 GMT
Not After : Sep 25 12:01:30 2026 GMT
Subject: CN=d89cf25b9c60cc3e149b6526d033a28793f1c1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:b6:36:96:d7:09:11:ce:5c:b0:d4:11:ee:
bb:93:31:bd:30:7f:57:2b:75:74:1f:b4:f8:77:04:
42:8a:28:18:bb:ac:8b:b1:2b:0b:e7:a5:78:5a:df:
cc:d8:1e:c0:55:93:c6:33:64:d2:70:6c:5f:af:a8:
a2:6d:30:38:80:dc:3d:33:73:58:ed:3c:46:a7:e5:
0c:cb:07:15:8a:3d:49:a9:93:6a:9f:56:91:e9:29:
d2:58:17:03:8a:d5:b2:ae:6d:ad:5c:66:65:e5:ea:
b7:ac:17:91:97:71:f1:56:5d:c6:11:99:98:06:27:
5b:9b:7c:72:60:ee:88:02:f0:33:cd:d4:18:02:e5:
9f:1c:e6:40:3d:3f:ea:ce:7d:c6:0d:d2:bf:84:cb:
ae:f6:34:d2:d2:49:cb:ff:61:f0:8b:53:2c:92:2d:
99:49:44:48:de:6a:50:54:85:23:36:3c:4f:4d:c9:
d3:a5:4a:ae:f2:3b:48:1a:9d:b6:c6:74:05:d7:12:
95:4c:66:12:5c:c0:73:9e:38:36:f0:2d:21:97:af:
3c:c6:fe:b0:35:23:29:92:d8:55:a6:02:01:8e:77:
a4:65:89:65:fa:2a:1c:03:08:fc:43:40:9b:54:ba:
bf:30:fe:52:0a:2f:8c:d5:33:81:31:5d:52:47:b0:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:F2:5B:9C:60:CC:3E:14:9B:65:26:D0:33:A2:87:93:F1:C1:EB
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:23:6d:5b:cb:57:8b:c6:69:81:7b:a7:fe:b9:ce:d7:4b:4c:
ed:09:41:a8:cf:bc:32:70:ca:95:aa:41:b4:a5:c8:ed:03:2b:
1d:ea:60:51:23:7f:6e:d7:0f:6d:78:0c:eb:c6:be:c1:0d:59:
ec:d1:25:e1:4f:f6:52:ef:0e:11:b5:a6:e5:6c:75:64:70:1b:
bf:71:5c:b8:92:4d:c6:99:31:c2:22:f6:d6:db:2f:dc:6f:67:
4d:8c:0b:f3:3a:bb:7a:3a:71:91:53:d9:06:f2:d6:ed:90:b7:
2c:e6:80:c6:b3:d2:42:e6:8b:cc:9b:d2:ce:48:88:82:5e:7e:
e7:14:bc:89:c2:33:44:64:1e:22:6e:5a:19:1f:e9:15:cb:69:
fe:49:0e:b5:bf:e0:0a:86:99:50:de:d1:f3:a7:00:f5:a2:21:
e0:bd:1a:09:88:37:05:92:63:c3:2b:66:cf:14:c5:2f:b5:a0:
c6:7e:b1:e6:57:0d:ef:8c:2f:ab:1b:45:4d:b1:4f:e1:e9:f8:
c5:2b:d1:cb:06:13:32:ec:12:0f:89:6d:ab:1b:c9:dd:43:bc:
ef:fe:36:ff:da:ef:d2:c9:b7:5e:44:68:dd:0f:0e:7a:87:6f:
78:d6:ab:f5:3f:85:6c:da:84:2c:bf:4c:1e:47:88:19:5c:96:
9f:dd:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:41:53 2026 by rpki-client