Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: w/4PCVsfO3w8r173mEuS9W6rSQoFSVDqjsJvb49kVFI=
Subject key identifier: 2B:FD:84:E3:4B:18:7F:74:27:15:02:92:92:F2:6D:20:F1:7A:2F:76
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 01A0C331E6CD378F45CCD6FFFC217BD1D984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 178B
Signing time: Mon 21 Sep 2026 09:00:22 +0000
Manifest this update: Mon 21 Sep 2026 09:00:22 +0000
Manifest next update: Tue 22 Sep 2026 09:00:22 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: 4E4JKNFe5udMXx/Co6JH5L1TCD6pboMIRzrtFfaw1uQ=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:e6:cd:37:8f:45:cc:d6:ff:fc:21:7b:d1:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Sep 21 09:00:22 2026 GMT
Not After : Sep 22 09:00:22 2026 GMT
Subject: CN=2bfd84e34b187f742715029292f26d20f17a2f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:74:fe:97:5a:67:84:01:97:21:35:13:cd:
93:a7:f4:9f:53:4f:a6:f5:72:51:20:76:eb:9a:e2:
63:2e:e3:88:00:bc:f1:34:bc:67:ca:ae:64:55:4f:
2b:2a:ca:b3:ad:be:6b:29:54:ef:fb:7a:09:e0:cb:
40:20:71:3a:df:67:e5:b2:ea:c7:44:99:62:93:fe:
4d:ec:a1:f6:74:2d:8f:8a:84:76:c7:07:c6:96:bc:
d5:24:d5:9a:f1:d8:25:5a:a8:1b:97:dc:95:71:a4:
c6:84:9a:f2:8e:49:5d:05:9b:2e:c9:fc:3d:95:57:
b8:24:b9:3c:5d:dd:8b:60:d4:7e:96:25:10:5f:c8:
db:b2:90:f2:a1:7f:16:ef:4d:c8:9e:61:50:ae:8f:
04:5d:7b:c6:88:ba:7c:c7:c9:de:63:57:92:74:19:
79:28:80:da:27:fd:e3:aa:33:d1:98:90:51:b1:40:
ed:69:ae:78:5b:6e:fd:63:8d:0e:6f:83:18:fb:c4:
88:35:bb:3f:36:cc:30:f6:66:3d:0e:60:cb:5a:05:
13:da:93:31:1e:7f:86:6a:fc:60:13:5c:ff:0c:e9:
e8:70:17:ed:3a:d8:39:b2:f3:42:29:a0:0c:42:f9:
64:72:56:0c:a4:9b:3c:34:15:2b:b4:92:74:33:6d:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:84:E3:4B:18:7F:74:27:15:02:92:92:F2:6D:20:F1:7A:2F:76
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1a:4a:14:dc:14:1c:3b:50:67:90:fb:db:23:ec:e8:cc:4c:
53:ee:30:00:21:02:92:49:23:2c:22:07:bc:51:60:b4:81:c6:
51:dd:88:91:f2:94:9a:6f:61:ad:a7:6e:49:39:05:1b:51:14:
63:f1:bb:ac:4e:22:31:72:f6:07:9a:28:58:73:bc:db:07:08:
0d:b3:75:15:21:64:7c:19:50:15:89:ff:6d:c2:78:f0:05:48:
c7:c3:16:0e:7d:05:ab:ae:b7:44:e5:46:d7:91:18:dd:7c:a1:
2e:21:9c:d9:a0:e5:41:81:3c:fb:ef:79:19:2c:c8:bb:77:64:
83:78:a7:2b:ff:77:de:3f:fb:81:82:71:22:63:fc:7e:b8:23:
33:c5:17:02:20:ef:52:0d:c6:99:5a:5a:de:0b:11:1a:0c:ff:
44:e1:34:42:79:9c:63:f0:a0:21:53:97:64:28:2c:96:60:0c:
75:94:2b:42:34:19:44:59:8e:7e:58:7d:39:56:6d:2d:ce:11:
93:24:7a:7a:57:b9:bb:dd:ed:d4:16:5a:7d:1c:71:0b:b8:b9:
c4:41:d2:da:0f:16:b5:bb:01:85:8d:23:a3:92:a1:82:7b:93:
96:a6:f2:d7:79:2b:a5:39:0b:7f:69:ff:cc:22:ca:62:ac:9b:
5c:b5:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:00 2026 by rpki-client