Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
File: 2ddyZTONdKLvZWzYmC0-ee4scws.mft (raw, json)
Hash identifier: ryo90O2+Llyyem3fDmPHXMwJgCGgsYaCCFI+Jf+AwTs=
Subject key identifier: EF:5B:67:06:D7:BD:B4:B8:B7:9C:04:EF:EF:85:8E:EE:EB:EB:CE:DC
Authority key identifier: D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
Certificate issuer: /CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Certificate serial: 01A0C40D815A3FBA96464B09D77FF9BC6DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
Manifest number: 25
Signing time: Mon 21 Sep 2026 13:00:14 +0000
Manifest this update: Mon 21 Sep 2026 13:00:14 +0000
Manifest next update: Tue 22 Sep 2026 13:00:14 +0000
Files and hashes: 1: 2ddyZTONdKLvZWzYmC0-ee4scws.crl (hash: dbgOWsk9eKVswYV0Ku5AH0o67GbLUflp6a+mlLlkIBs=)
2: GyAPdxHlXvRo5tDkDVenq5fjP4k.roa (hash: 0ah8uxz8w/BQqOF2DO2niuzwg5BTV6cRax+iO+7Pk7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:81:5a:3f:ba:96:46:4b:09:d7:7f:f9:bc:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Validity
Not Before: Sep 21 13:00:14 2026 GMT
Not After : Sep 22 13:00:14 2026 GMT
Subject: CN=ef5b6706d7bdb4b8b79c04efef858eeeebebcedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:20:97:ff:85:d5:8a:e8:a1:60:4c:79:cf:
8a:c1:1e:0a:89:15:42:a6:96:4c:d2:c3:fb:d7:32:
f9:b3:70:75:66:d7:e7:25:65:9b:3d:21:82:72:a3:
88:fc:ad:28:76:56:f5:f0:a0:12:f6:cf:c7:85:af:
a1:66:65:97:7c:03:aa:4c:ea:6c:eb:0d:f4:99:8a:
a9:20:3c:b4:16:28:be:35:30:41:92:c5:55:8c:29:
ff:72:e5:5c:47:d6:69:fa:82:c7:a3:ad:1d:f0:1b:
42:1a:94:81:0d:97:8a:62:ed:b2:ee:43:a6:89:91:
62:ed:e3:8d:30:17:a8:04:7b:7b:c1:c7:7b:e6:cf:
4d:7f:62:4f:7e:e5:6b:35:31:c1:f9:cc:bd:0f:13:
be:9a:07:0c:c8:1e:51:7d:e3:51:7b:6e:82:db:f5:
69:a9:bf:29:42:b4:95:8b:2a:80:95:aa:7c:93:b2:
c7:67:f2:55:15:eb:02:d7:ee:ca:69:22:45:89:9d:
e4:07:d6:12:c6:fa:07:a9:38:d9:75:7d:0b:80:5b:
a4:20:1c:bc:fb:53:d0:66:d9:8f:37:94:d9:33:26:
b4:b7:e1:ed:16:7c:81:73:f1:74:12:67:c3:40:6a:
22:5f:68:15:e0:a6:8a:d8:7e:f5:25:5b:0a:0e:c1:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:67:06:D7:BD:B4:B8:B7:9C:04:EF:EF:85:8E:EE:EB:EB:CE:DC
X509v3 Authority Key Identifier:
keyid:D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:d7:6f:8f:ba:f3:b8:7b:25:a3:8e:e4:e5:52:75:1e:3e:
17:4b:12:c0:04:95:32:43:ec:f1:d8:33:c5:9d:6a:24:2c:97:
61:f3:02:b5:fc:8d:e1:2b:6d:3e:c0:9c:a4:8d:d2:29:1b:eb:
86:8d:3e:0d:ec:09:7c:eb:66:05:3f:58:50:6f:ea:89:47:11:
a3:6b:ca:d2:4f:a2:3d:f7:69:af:41:97:6c:3f:2f:f9:74:2e:
9f:97:45:80:85:9b:f7:db:a9:14:a2:e3:34:c5:a5:06:69:88:
3e:19:3b:e0:40:4f:36:22:ce:6f:c8:6a:b2:5a:00:98:90:30:
58:13:bb:a0:66:25:21:3d:ee:64:bf:37:1b:da:75:68:e9:8b:
21:5e:55:a9:4a:ea:ff:a7:84:3c:31:46:60:46:2c:5e:00:e3:
00:16:b5:44:4c:61:4f:8e:8e:cd:55:4a:38:c8:b3:a5:d3:04:
27:fa:fb:21:6e:ab:8c:8a:77:20:1c:d1:12:ab:db:15:f7:23:
fc:0c:45:b6:23:0f:13:15:b0:57:63:57:1c:de:7f:a0:e3:4f:
70:8f:7b:ed:10:5d:b6:ce:58:cc:90:d7:e7:dc:b3:25:28:0c:
83:3a:bd:10:32:b9:43:63:93:cb:f0:04:dd:6a:a3:d2:bd:39:
13:5b:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:14 2026 by rpki-client