Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
File: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft (raw, json)
Hash identifier: BK+RIoncVddZb3SS2Hi2DMM2RugSZ/QstayLi8yQYIs=
Subject key identifier: 82:78:8F:34:E3:C1:40:70:41:52:75:B8:32:82:57:89:85:CB:29:5F
Authority key identifier: DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
Certificate issuer: /CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Certificate serial: 01A0C1B13655CBFDCA974E74A3E193BA1DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
Manifest number: 3C
Signing time: Mon 21 Sep 2026 02:00:11 +0000
Manifest this update: Mon 21 Sep 2026 02:00:11 +0000
Manifest next update: Tue 22 Sep 2026 02:00:11 +0000
Files and hashes: 1: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl (hash: 1e87tdS9tcPT8dyeYwEzsL8Q49Tlq7eXc82sEXxGTEs=)
2: bco2Vy33uicQjr8fSgLIpcv1tBk.asa (hash: l6F5Y2uxwEyExD8hjQoc5Vlbvn9A0M3aap09ujsphDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:36:55:cb:fd:ca:97:4e:74:a3:e1:93:ba:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Validity
Not Before: Sep 21 02:00:11 2026 GMT
Not After : Sep 22 02:00:11 2026 GMT
Subject: CN=82788f34e3c14070415275b83282578985cb295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:5b:45:22:37:87:a1:d7:0c:5d:68:c7:c7:
ca:e8:b4:29:6d:d4:4a:48:0e:9b:d6:13:6c:a8:60:
e1:61:77:54:c7:b7:49:97:04:64:5c:fe:fe:b8:04:
a9:d6:25:8f:6b:5f:55:80:4a:a3:f1:fd:a2:44:27:
7e:d5:1e:44:f4:3d:a5:79:5d:0d:1e:c8:7d:c6:aa:
9a:9a:20:80:31:a8:4f:30:04:40:3d:28:98:38:f1:
0c:6c:be:b1:e4:50:53:df:74:cb:6b:e6:0c:bf:ab:
04:84:36:16:5c:dd:a8:f8:a8:56:24:63:59:a6:16:
d3:14:57:4b:29:b8:2d:43:76:91:e4:c6:ac:dd:4b:
90:6a:d5:34:a5:b2:99:e5:cc:04:68:fa:d2:f5:1c:
83:2c:f1:00:df:06:2c:42:5e:4d:e9:86:7d:13:a5:
48:e3:a3:4b:cd:02:57:a7:9d:d5:f8:62:c8:88:ad:
05:f2:a9:6c:53:e9:e4:5a:e9:54:89:ef:31:e6:e4:
5c:4f:60:4e:4a:e3:66:87:33:ff:ef:fd:9e:76:3e:
8a:8f:b1:3a:6c:30:27:ec:64:d2:21:1e:a5:82:78:
86:a6:7d:5f:da:fa:c7:e5:50:26:0b:e3:f4:c3:e9:
1a:88:f9:35:db:4f:da:ff:df:a6:ae:9c:90:6b:c6:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:8F:34:E3:C1:40:70:41:52:75:B8:32:82:57:89:85:CB:29:5F
X509v3 Authority Key Identifier:
keyid:DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:ba:88:29:0e:a0:59:99:e4:e0:82:b9:fc:56:ae:36:3f:
d0:9f:12:6f:c8:16:75:15:72:53:e1:03:b8:23:45:92:25:f6:
e2:4c:64:33:a9:f0:99:13:fb:49:b3:4a:2b:62:e0:4e:ec:db:
a0:e4:79:53:f4:32:10:f3:40:ed:a8:4c:b8:dc:72:34:26:21:
9b:a7:4a:62:76:c4:2c:57:55:2f:2b:39:51:e1:32:31:b0:46:
c8:81:c9:85:85:53:8f:88:a5:1d:82:ea:27:81:e3:e0:97:76:
8d:64:b5:ce:f8:6d:ae:6c:3a:6b:54:72:07:4f:5f:be:5c:43:
ca:fa:d9:49:c6:cb:16:d4:46:a8:84:2d:e9:52:22:18:db:b6:
1c:7d:70:08:96:33:59:9d:7e:c3:4b:3e:1d:c9:34:c1:e2:06:
ff:80:86:94:75:51:0c:5a:58:07:ba:7e:a5:75:e0:27:f0:ef:
ac:a1:a6:d0:b4:a2:d8:3b:f8:99:5b:96:7f:28:df:de:d5:2e:
2a:a4:75:5d:91:84:aa:c3:89:03:2a:a3:17:b6:95:7b:15:b3:
3e:0c:f3:29:46:4c:96:c2:82:ee:9c:e4:34:5a:9a:30:ef:77:
7e:a0:4a:31:e1:cf:01:51:3a:0d:fe:10:6f:29:16:8e:5a:b4:
78:7b:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:28:00 2026 by rpki-client