Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: TzMDEYUzewV93o4wta3HhtUpDsC+W9v5FNov0zXwYlo=
Subject key identifier: 7E:96:27:31:B1:05:FD:51:C1:74:9A:D0:8F:4C:B9:6D:0A:D3:98:73
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 01A0C85859C533BEA56A12498B6E62463C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 1046
Signing time: Tue 22 Sep 2026 09:00:28 +0000
Manifest this update: Tue 22 Sep 2026 09:00:28 +0000
Manifest next update: Wed 23 Sep 2026 09:00:28 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: TSN/Ftl8Q7wfNp+DzW5NSbD4jmMMyjSNGymvifshvao=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:59:c5:33:be:a5:6a:12:49:8b:6e:62:46:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Sep 22 09:00:28 2026 GMT
Not After : Sep 23 09:00:28 2026 GMT
Subject: CN=7e962731b105fd51c1749ad08f4cb96d0ad39873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:8e:51:f7:cd:18:98:ad:b3:52:fa:89:27:
41:b0:4f:77:dc:57:6c:cf:89:25:ef:a3:e9:04:0c:
f8:f2:53:f0:6c:70:1f:d3:f1:ad:75:88:84:4c:c8:
d8:3d:47:a7:5b:f5:7a:69:7d:3d:b7:34:6c:07:88:
f9:e6:3c:e1:81:07:5c:9d:66:1a:bd:9e:f7:e9:89:
d2:92:0f:3e:2b:d5:2c:f0:1c:38:3c:60:27:55:42:
3c:5c:3e:82:8b:19:d1:b0:43:c4:e2:f8:b0:be:64:
67:60:59:ef:40:a5:00:4e:54:84:71:5e:d0:5c:8a:
75:ad:43:65:fc:58:1f:de:9d:25:f3:d7:29:be:3b:
cf:86:f5:69:91:ba:29:da:96:72:86:07:f2:22:da:
a5:76:f4:cc:63:16:1b:2f:11:34:2a:ad:b7:3a:24:
6b:03:33:ca:0a:f8:5a:37:09:b6:31:04:a5:b9:d1:
d6:bf:e8:9c:85:1f:24:24:d2:62:44:15:a2:ba:ab:
40:de:80:14:d5:42:4f:cd:4d:58:a8:96:67:cf:28:
9c:f8:2d:18:1b:5f:b6:b6:32:3c:60:8d:2f:f4:4a:
c7:76:c3:2e:38:64:65:bd:94:49:93:5e:a3:75:43:
3e:53:12:2d:90:68:01:66:4f:1b:18:26:72:46:51:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:27:31:B1:05:FD:51:C1:74:9A:D0:8F:4C:B9:6D:0A:D3:98:73
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:56:ec:9b:dc:95:63:1f:da:ce:d9:fc:dd:63:d2:1d:e3:
ca:8f:fb:1b:1f:91:26:ef:d5:2f:43:93:e8:28:54:60:09:d2:
60:a0:f1:43:0c:b0:0f:10:bd:ac:27:db:80:05:46:19:30:37:
96:4f:fe:85:30:13:09:29:4b:d4:c6:e7:60:10:63:48:06:ed:
9e:98:0a:df:92:38:c4:1c:a9:23:3e:cd:f5:7a:9d:07:c0:6c:
7f:4d:e1:02:16:67:f8:0f:e1:7c:81:13:3d:ed:05:08:d0:b2:
ff:14:58:0e:2d:70:2d:61:41:01:9a:67:2f:34:f7:dd:5f:4d:
d3:90:82:ea:c9:03:ab:6d:f7:60:aa:6d:08:47:87:8e:5f:03:
d1:4a:94:c1:0d:40:22:de:ff:a2:01:49:65:04:e4:10:bb:19:
cc:d3:ed:1a:f0:4d:d8:2e:03:15:2c:92:01:6d:6b:3b:56:e0:
f5:4a:3d:d7:32:04:50:4a:fa:36:24:fd:e8:ea:6f:be:57:7d:
0c:9a:40:d2:9d:84:bc:43:de:2e:3f:2b:fd:16:f9:16:30:c8:
33:98:4f:8a:40:b3:3b:b3:73:d1:c2:af:b0:64:6b:5b:47:49:
c1:d0:2b:45:69:f1:5e:b2:a0:15:dc:f8:ee:a5:72:8f:11:44:
7f:01:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:15:53 2026 by rpki-client