Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: v2Sd7bYrwHQ2pQ1JyiLUKrcfP1HDFIEMsu0JF8Ns3rk=
Subject key identifier: CD:9C:14:5E:D2:76:32:C8:93:66:80:1B:1C:73:43:8C:F0:E4:F8:31
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01A0DA5F72B40EAC1FDB0DDAE541BD790C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0922
Signing time: Fri 25 Sep 2026 21:01:23 +0000
Manifest this update: Fri 25 Sep 2026 21:01:23 +0000
Manifest next update: Sat 26 Sep 2026 21:01:23 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: bGgShIPsbBVtpef+dqGDAQMW5FEzXjAaNEgxs6Nie+4=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:72:b4:0e:ac:1f:db:0d:da:e5:41:bd:79:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Sep 25 21:01:23 2026 GMT
Not After : Sep 26 21:01:23 2026 GMT
Subject: CN=cd9c145ed27632c89366801b1c73438cf0e4f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:3c:c2:02:65:a6:61:a3:1a:e3:99:ea:0f:
5f:c9:05:05:4f:36:5d:35:05:b2:79:a2:2f:a2:dc:
38:f4:1e:be:dc:84:1d:f1:a0:14:10:f6:ee:cc:63:
11:61:aa:7d:56:8f:14:a0:78:22:b1:ed:41:a4:ce:
36:61:8d:c5:b3:8f:49:ae:b9:8e:af:ce:15:dc:7b:
65:9b:82:2a:62:aa:c2:9a:c6:d6:39:48:2a:2d:41:
bb:7c:c4:4f:4c:61:c3:c9:50:cd:26:c2:ce:34:b0:
3f:1e:1b:53:d1:75:1b:9d:aa:55:73:09:1d:15:4b:
8c:45:fb:f5:21:73:1e:21:11:43:ee:76:34:5a:b7:
7b:28:6a:ac:9f:69:0c:7f:74:66:75:bc:36:c0:a3:
c6:49:03:a7:b5:30:1e:95:ab:68:d7:d0:a2:cb:fe:
72:9f:b2:7e:6f:58:53:f7:12:be:15:c0:01:8c:9b:
e6:5e:9c:7d:66:51:50:95:f1:b2:16:a3:e9:4b:2c:
81:5c:0d:95:41:18:81:a6:6e:39:4a:1c:85:6c:73:
ac:40:10:2d:9d:20:dc:44:6f:1f:7c:f4:84:53:15:
0e:91:d8:02:cb:fc:94:9d:40:59:52:69:38:c1:b4:
ab:69:4f:c8:cf:04:8a:6f:b2:17:51:0b:84:da:b9:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:14:5E:D2:76:32:C8:93:66:80:1B:1C:73:43:8C:F0:E4:F8:31
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:47:34:cf:62:b8:bf:74:aa:44:b5:17:40:95:6b:d8:ba:00:
80:39:2e:99:83:f6:ae:49:43:04:0c:d8:b1:53:28:18:34:17:
c0:38:9b:9b:22:94:c6:82:3e:72:1f:fe:3a:93:4a:23:12:1e:
a9:c1:e2:4e:af:a0:9a:16:05:9c:38:53:95:4e:68:05:7b:d9:
8d:14:78:b3:e5:8c:8c:58:2c:84:92:2f:1e:9c:86:da:22:86:
0e:5c:72:63:b7:a8:d0:97:2b:01:35:38:80:57:a1:ad:6e:ac:
34:9e:a0:1f:ef:88:29:ca:e4:f2:cc:8a:4b:09:02:6b:15:6b:
d6:7b:8e:62:89:ba:da:fd:26:b1:52:d1:6a:e2:a1:99:3d:f4:
27:59:ca:3e:ee:a8:ca:ef:c2:e5:6b:bb:78:86:6b:b3:aa:68:
3b:e2:55:3c:89:4d:54:14:6c:12:f7:cd:93:12:80:61:76:f8:
a2:a0:cd:47:f0:fc:9b:46:8c:63:ca:01:c2:17:ca:87:01:0a:
1c:79:99:4e:89:1b:09:5d:bc:aa:eb:de:cb:66:3a:8f:c7:95:
b5:d2:d9:b8:ba:d5:57:a4:af:54:12:09:90:9d:80:e2:76:cb:
fc:09:e7:bc:97:24:d9:58:77:86:ab:4c:a9:5c:cb:b6:ef:c7:
ee:a7:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:29:14 2026 by rpki-client