Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: FkZnk/rUA1uvmNqwKrOCVMiHPogijpJTiaS8ONqZc8Y=
Subject key identifier: 24:F4:52:65:0F:D0:AF:8C:6A:10:E4:73:D3:5A:AF:D6:44:7B:9B:14
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 01A0CFDAAF777D6BEBE30BD7D21F3FBC9548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 19CE
Signing time: Wed 23 Sep 2026 20:00:10 +0000
Manifest this update: Wed 23 Sep 2026 20:00:10 +0000
Manifest next update: Thu 24 Sep 2026 20:00:10 +0000
Files and hashes: 1: PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa (hash: oUnwI/hWFydpEOEqwC9HOMZdSyF2a1xfxAbzlwQhdS8=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: 8xaNPYdmLF3px+WUd9Fwle/fpKAVvhPeevjONTTS2VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:af:77:7d:6b:eb:e3:0b:d7:d2:1f:3f:bc:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Sep 23 20:00:10 2026 GMT
Not After : Sep 24 20:00:10 2026 GMT
Subject: CN=24f452650fd0af8c6a10e473d35aafd6447b9b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:34:ef:d6:b1:b1:cd:96:33:13:fc:c1:52:
41:66:35:0f:2f:9e:16:27:52:21:8f:7e:e4:ce:23:
ad:13:49:4d:7e:ac:16:0a:d2:30:ed:c1:fa:5d:4d:
9a:1c:4a:09:f7:c0:e3:20:4a:fd:bc:fe:27:94:0f:
31:b0:d5:34:29:79:4b:0a:53:5a:e9:3d:c7:2d:59:
d5:26:0d:8b:77:c2:34:4d:4a:f9:71:eb:15:2a:dc:
1e:ca:64:b7:f3:5a:93:a5:46:2a:02:b2:e8:53:be:
5e:40:9c:a7:7d:25:c7:1f:65:26:51:7f:02:25:0f:
96:2b:b2:10:09:67:d2:d4:2c:dc:12:89:04:f9:84:
4b:40:ac:7d:d6:d5:8c:22:12:09:53:ae:ff:28:32:
8b:85:6e:18:c2:61:79:74:34:ad:2e:b4:cd:c1:7d:
4c:53:17:d4:53:94:7e:96:d2:19:d2:12:97:1b:c6:
b0:37:38:52:c1:28:75:2e:81:92:a2:e5:75:04:ad:
61:11:1b:2c:fa:7f:68:06:a3:87:64:ff:bf:8a:80:
27:52:89:73:8a:78:d7:12:3d:68:9f:cb:02:8b:b7:
73:7c:dc:9b:b8:fb:a2:fc:49:30:17:55:f8:b1:1e:
38:f8:81:5b:ac:59:52:89:61:8b:81:cc:20:94:9b:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:52:65:0F:D0:AF:8C:6A:10:E4:73:D3:5A:AF:D6:44:7B:9B:14
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:09:29:6d:42:93:14:ea:d6:5c:ea:cb:a6:e1:59:32:29:
73:f1:4b:11:5f:c1:ed:45:d4:7d:a2:2b:fd:29:d0:50:a8:b3:
25:10:61:a3:30:56:50:33:32:d1:7e:c0:90:e6:88:27:2e:15:
96:27:92:48:c6:fb:16:78:42:06:ee:71:9a:8b:1a:24:ff:56:
a0:13:dd:89:cb:22:15:c8:cb:74:ae:e9:16:4c:b2:63:c5:1a:
cd:27:86:5d:bd:e1:4c:0c:6e:94:ea:ae:2a:b6:7e:45:2d:bb:
43:b3:da:82:b3:8e:9c:3c:d4:d0:07:f3:45:6e:0f:0b:e0:6e:
e9:56:69:d4:4b:fc:7d:39:99:c5:ca:67:ba:a0:4d:fb:4f:a3:
a9:cd:31:4f:5d:5e:60:d9:cb:cc:e7:45:01:03:c9:2c:81:6f:
30:fc:15:3b:e9:9a:99:c0:87:d2:03:b5:6b:4f:4b:83:22:26:
49:b4:72:18:3a:76:47:d0:22:ba:9b:be:06:50:51:98:93:77:
67:d2:b2:26:19:c9:88:6f:8e:2c:e4:28:c4:a6:91:5e:9f:4a:
10:ec:7a:7e:77:ad:6f:23:0c:bf:43:bb:3e:c1:e7:6f:f6:2d:
17:46:dc:71:30:5a:e1:a1:89:7f:df:d7:ec:5d:1d:f3:c7:ed:
05:e6:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:44:59 2026 by rpki-client