Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: o5jbsm4rnVITAcCYwsZLsfD7z35K8GVVCZIJnesTYZA=
Subject key identifier: AC:1F:C5:46:D3:77:A9:E8:93:2C:B9:6C:CB:61:9A:76:4F:81:24:21
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 01A0C7EAA3F9006D7BF4A67104C804504336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 07:00:38 +0000
Manifest this update: Tue 22 Sep 2026 07:00:38 +0000
Manifest next update: Wed 23 Sep 2026 07:00:38 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: QF1d45u31rVxKaac2ngowyGd8oGH9r8qW1GQYr4J/zQ=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:a3:f9:00:6d:7b:f4:a6:71:04:c8:04:50:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Sep 22 07:00:38 2026 GMT
Not After : Sep 23 07:00:38 2026 GMT
Subject: CN=ac1fc546d377a9e8932cb96ccb619a764f812421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:51:d0:8b:36:00:d7:f0:0d:4f:31:28:e7:
63:e6:5a:17:88:13:38:73:51:3f:e5:22:62:92:a0:
c9:ef:b5:10:08:14:00:c4:fd:f7:24:e3:1a:51:ea:
9a:be:7b:4c:91:82:62:db:a6:06:34:ed:7c:07:cf:
2e:9b:6b:eb:4a:ee:24:25:14:70:f5:70:3b:85:bc:
94:d5:6e:fd:c9:56:ee:e6:78:9c:dc:4a:83:14:fc:
51:cd:b0:da:68:c3:61:15:86:1c:ea:09:cf:ae:e4:
79:b3:a3:9d:78:27:c1:d6:11:56:05:11:25:81:af:
ed:21:5e:30:10:4e:37:12:22:45:a9:84:a7:49:ae:
a3:db:c9:08:39:c2:ae:c9:dc:46:0e:3b:08:50:d9:
5f:65:30:a2:aa:e9:7e:b4:2c:8f:e9:32:aa:ad:8d:
85:fc:4b:52:8f:ac:ba:64:10:2c:83:72:63:55:9c:
70:a9:f5:1a:16:0d:f2:eb:fe:8f:a0:14:e5:6a:de:
e0:95:f0:92:1f:b0:35:b1:96:56:9f:eb:da:a4:4f:
85:b5:50:07:57:f5:e8:8b:87:08:80:1c:db:b1:f5:
84:81:2a:a8:29:68:03:d8:47:97:8c:be:4f:6e:e9:
b3:39:8b:a1:33:e7:2a:23:45:03:09:27:76:b9:ed:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:C5:46:D3:77:A9:E8:93:2C:B9:6C:CB:61:9A:76:4F:81:24:21
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:ab:7f:78:e7:3b:10:2b:60:a0:20:d6:38:0c:87:9b:67:
a5:44:af:0f:ac:69:51:d3:26:f8:8a:6c:29:71:af:e3:41:aa:
b1:c2:57:04:cc:2a:ad:a7:c8:37:db:86:70:38:1e:e1:71:60:
53:7d:df:aa:77:0b:04:0a:81:40:bb:5e:cc:c6:a5:a0:ae:4a:
27:cc:25:31:19:f7:ba:4d:7b:0c:e0:a6:64:9a:df:79:d9:ba:
9d:a7:b7:24:bf:45:1e:d4:b7:9e:75:53:dc:d5:c7:75:0f:22:
48:4d:a7:b7:db:e6:36:f8:cf:89:67:18:ef:ff:83:9c:d9:80:
ce:d0:a7:57:ac:2e:a8:71:8c:7a:31:c0:31:db:2e:ce:bb:6b:
73:94:b7:77:5e:15:55:6b:3f:f5:3c:1b:1b:5e:61:33:a9:c7:
2d:63:3c:dd:12:bd:a0:9c:7b:e7:7d:6e:96:a6:21:d8:3e:24:
91:85:e1:17:c7:12:a8:be:13:2a:25:25:ad:97:3b:c9:c8:9b:
8b:cb:22:10:f7:b8:9c:89:ba:67:73:58:2e:a5:d8:7e:5a:7b:
64:b2:0c:b3:18:97:f9:72:99:15:03:9d:b5:a9:c8:a3:fc:b7:
82:ee:ab:d6:b0:03:79:24:d7:95:92:52:38:f6:7d:64:bd:22:
e7:7f:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:42 2026 by rpki-client