Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: bCfVYFzFXgSW0kh+tsY1/O6e86EX/5RO40rurUtgF10=
Subject key identifier: A1:1B:12:E8:E3:87:87:AD:B5:4D:06:2C:3B:28:E9:43:24:7E:3C:0C
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01A0C8C69AF824A03F0F69EABF19280965AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1A7D
Signing time: Tue 22 Sep 2026 11:00:53 +0000
Manifest this update: Tue 22 Sep 2026 11:00:53 +0000
Manifest next update: Wed 23 Sep 2026 11:00:53 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: fHtterkA3DX1GXbKLjm76p4yoWSCMcmIfC0T1wp5V4I=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:9a:f8:24:a0:3f:0f:69:ea:bf:19:28:09:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Sep 22 11:00:53 2026 GMT
Not After : Sep 23 11:00:53 2026 GMT
Subject: CN=a11b12e8e38787adb54d062c3b28e943247e3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:d8:6b:41:41:5e:d8:9e:27:7c:e4:01:7d:
22:04:d1:86:59:44:5d:e5:8c:02:aa:35:55:cb:2f:
39:ac:61:41:96:0d:2b:e0:d8:80:89:0b:f3:be:0e:
96:cd:48:c3:da:1a:bd:16:a5:05:c1:34:66:62:e3:
93:97:bd:00:7e:8d:31:57:4d:ce:4a:38:be:5b:67:
7c:ad:9a:a2:07:e5:85:fc:02:aa:3a:7a:bc:7e:c6:
b3:51:7c:c9:34:3e:6a:61:bd:23:65:89:dc:43:83:
e1:9b:31:ae:51:b1:29:3d:b3:b9:7e:6e:3f:f6:14:
8d:27:d9:df:53:3d:ee:3d:68:cc:96:02:44:06:1a:
64:e1:85:71:1c:df:1f:f1:ca:2e:2a:29:d0:39:e2:
4e:28:31:4b:21:5d:9e:6a:e0:90:f2:b4:ac:4e:8c:
d8:97:1e:a9:cd:c1:c2:40:36:f9:a4:96:44:94:b1:
06:91:31:db:02:ef:19:67:ea:11:2b:18:63:46:31:
9d:9c:97:bb:84:53:0c:ac:7e:1d:1f:aa:80:c5:eb:
b2:e6:3b:d4:85:90:b9:c1:52:91:6c:86:89:51:98:
68:75:30:e4:c6:67:c0:61:22:c6:ce:a4:3c:14:36:
ef:35:89:49:3f:12:86:f4:8f:ab:b7:49:cb:0c:5b:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:12:E8:E3:87:87:AD:B5:4D:06:2C:3B:28:E9:43:24:7E:3C:0C
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:d2:8f:58:f8:5c:5d:aa:d9:28:0f:ad:64:0b:95:2a:56:
06:39:d6:ee:eb:80:9c:9c:b8:44:94:d0:b7:ed:ed:54:47:41:
37:2c:37:6c:96:eb:f3:52:1b:13:9c:39:0b:cc:32:a1:45:11:
cf:e0:0d:fa:a7:9d:6c:2e:0d:4a:c2:10:85:63:1f:b9:3c:10:
15:00:2e:ae:57:2f:c3:32:95:7a:0b:48:45:e1:cd:b2:93:a4:
fd:e6:41:ef:f3:cf:0e:84:e8:3d:c3:4f:d0:71:72:6c:87:d3:
3c:f7:ce:be:c4:7f:57:5f:65:da:31:62:41:06:a8:f9:a6:b9:
f0:f2:d9:0c:bc:7e:ad:fa:55:0a:e9:80:f1:9f:0c:25:2f:26:
f7:db:a9:b0:75:b1:be:1a:05:2e:44:66:f1:ab:7f:61:7c:84:
74:66:6e:bd:99:35:b8:e9:59:0e:a4:bb:93:8c:5f:df:37:95:
ef:5a:e6:56:f3:c3:9f:af:92:76:81:93:cc:23:8a:72:3b:5f:
82:64:8f:4c:d5:b7:16:6a:6d:30:3c:f7:7c:da:dc:d9:9a:33:
f5:8c:fa:fb:ed:6b:84:80:3d:8f:6f:5c:c2:60:72:0b:6a:4e:
61:af:b3:20:e6:92:92:96:01:6c:5c:41:28:5a:35:24:86:01:
fd:27:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:05:18 2026 by rpki-client