Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: ypZlcDDnLAeMgsJl7Wm6CEh0Y1B+PXtYavcG8/dEWhE=
Subject key identifier: 63:EA:C3:53:4E:18:DE:4F:1F:88:F7:C3:00:AE:76:30:E3:E8:43:49
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 01A0E663F88A7D1FDEAC1FCF906C1C9510DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 1A7D
Signing time: Mon 28 Sep 2026 05:01:46 +0000
Manifest this update: Mon 28 Sep 2026 05:01:46 +0000
Manifest next update: Tue 29 Sep 2026 05:01:46 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: 8OEMXwU77XCc2xsjvNBcNEUx4piTl7W5JufWClVUjzs=)
2: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (hash: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:f8:8a:7d:1f:de:ac:1f:cf:90:6c:1c:95:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Sep 28 05:01:46 2026 GMT
Not After : Sep 29 05:01:46 2026 GMT
Subject: CN=63eac3534e18de4f1f88f7c300ae7630e3e84349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:a9:6a:a3:bc:a2:30:a0:a5:b9:10:93:05:
99:9b:fb:ab:dd:52:59:2d:80:d2:90:62:e1:10:f7:
8c:5b:9d:f3:49:c6:6f:42:dc:eb:54:cf:0f:d1:d9:
5f:b3:96:8c:3c:97:dd:b7:af:9c:c7:8c:23:2a:87:
11:69:0b:78:85:bb:1a:c7:55:8b:68:d4:42:2c:c6:
08:52:81:02:eb:5c:a1:fe:a0:6e:f9:35:d1:4c:95:
41:bb:e4:49:64:51:7b:04:c5:b1:24:96:bf:fe:7e:
cf:8e:20:43:c7:b1:7c:4b:13:14:9a:13:1b:f7:1c:
18:33:30:b0:ec:d0:d5:26:67:42:bc:9f:da:f8:15:
34:72:ee:a5:8b:68:a2:01:52:80:fc:a5:46:73:d8:
9a:f1:08:b0:ea:ae:a1:9d:fb:7d:7e:cb:68:44:b5:
10:4f:e0:3b:3f:1f:54:52:32:29:e8:80:f5:4e:64:
7a:98:cf:4b:98:bd:d5:a2:aa:a9:5e:45:aa:5a:ea:
92:11:e9:e4:e7:89:cd:d1:d2:27:4f:8f:c0:02:32:
59:0d:68:09:a7:94:2a:8b:92:bb:21:a7:94:4a:72:
5d:f7:70:4d:dd:9c:b8:0e:a8:d2:4e:fc:aa:87:1b:
8c:3d:f5:70:99:08:2f:53:1a:63:d2:9b:5b:fd:d3:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:C3:53:4E:18:DE:4F:1F:88:F7:C3:00:AE:76:30:E3:E8:43:49
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b5:ad:ed:99:1d:a3:88:48:2d:43:7a:82:42:b2:8d:50:21:
bf:8c:78:2d:60:3e:2c:aa:3f:1a:24:d8:61:d6:0d:83:47:db:
ac:83:8c:45:e2:3a:c4:d1:ce:36:3c:69:92:9c:76:90:4c:4d:
f5:b7:e0:c2:63:f4:2b:bd:cc:e0:fe:32:95:48:99:fa:71:db:
66:bd:7d:9b:f3:47:06:da:ce:a8:6c:71:24:10:86:bf:2a:0b:
53:8f:d6:da:6a:8f:ee:da:61:25:0e:37:75:b7:55:1a:f5:5e:
a7:f2:47:3e:58:0f:45:0c:ef:24:02:c7:57:bc:53:be:c8:bc:
45:cd:8c:b2:f3:47:f4:a6:51:bb:53:cc:dc:d5:56:0f:15:2e:
d5:93:61:28:6a:1f:f9:81:dd:75:73:81:a3:88:8f:22:b6:19:
de:7f:47:de:36:17:fe:bf:3a:7c:60:be:27:2f:d2:23:67:1f:
41:c6:ad:53:dd:de:d1:c2:4a:82:8f:45:e7:58:6c:90:d3:93:
88:93:79:a1:a9:09:f9:86:81:1b:b9:08:a0:b5:d0:dd:da:6a:
ad:f5:8b:55:16:6e:c3:0e:98:91:ec:d3:4b:30:6e:32:3e:54:
45:16:25:23:25:fa:7f:e9:fb:63:f4:01:90:ce:43:b8:f5:ce:
e2:49:2f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:23:31 2026 by rpki-client