Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: gEcedcmSFYOamFkhv4XWlWg2e0Cs8akVCwFrhsl6nL8=
Subject key identifier: C8:B6:74:8E:FB:1C:10:47:3F:78:23:94:7D:8E:A9:06:87:6A:C3:D6
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 01A0C2FB0EDF46CECB2A3D548A3A88E59A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 19F6
Signing time: Mon 21 Sep 2026 08:00:28 +0000
Manifest this update: Mon 21 Sep 2026 08:00:28 +0000
Manifest next update: Tue 22 Sep 2026 08:00:28 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: VXJWwPjmUU7hSqPOiQRzjBX0YZDtM6yTiRhQr2uvGvs=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:0e:df:46:ce:cb:2a:3d:54:8a:3a:88:e5:9a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Sep 21 08:00:28 2026 GMT
Not After : Sep 22 08:00:28 2026 GMT
Subject: CN=c8b6748efb1c10473f7823947d8ea906876ac3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:46:d1:39:42:42:7f:ba:86:83:17:6c:a8:
9e:69:50:54:b9:c7:0e:e9:dd:b2:96:d4:cb:77:be:
1e:99:66:1b:42:c0:01:13:e0:1a:fd:3c:bd:b1:eb:
32:de:32:01:15:a5:c8:2a:d0:bb:73:c6:7b:d3:da:
5c:4b:2f:a4:c8:69:7f:ad:4a:f6:b4:f2:33:db:e6:
83:eb:7c:5a:54:c8:9b:73:2b:4d:85:52:d5:0c:e3:
ec:d0:59:5f:73:78:b9:5b:16:b2:b8:76:c9:bc:37:
ff:db:3a:97:39:ed:cb:23:27:ee:b5:7c:f3:7a:ae:
8b:a6:df:b1:bf:07:f4:ff:f4:6b:d9:75:11:2a:59:
ad:34:fa:63:43:9f:83:1e:89:a3:bd:cb:73:fd:29:
0f:aa:a6:38:8d:5f:44:e2:6e:2a:d6:f3:62:bd:dd:
93:b7:c9:b5:22:b6:a2:3c:e8:55:6c:48:97:c7:eb:
77:a0:0d:4a:4f:40:b7:2e:0e:e3:af:63:14:fa:bd:
72:fa:07:3f:16:b5:bd:fa:72:fd:c9:22:a8:e8:1b:
3a:a8:0e:92:6f:a0:21:11:b8:04:ac:77:3c:1e:8d:
3a:4d:38:26:45:97:1d:98:17:ca:c1:98:dc:57:4b:
59:95:ac:52:c0:13:87:c2:1e:66:96:a9:fa:33:75:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:74:8E:FB:1C:10:47:3F:78:23:94:7D:8E:A9:06:87:6A:C3:D6
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e6:61:09:e0:05:f1:92:89:d6:84:ec:af:c4:de:e4:f9:1f:
12:40:e7:86:3a:22:b1:e9:25:6b:db:78:db:aa:b2:6d:4f:cc:
ac:85:d2:6f:54:af:65:f6:08:6c:13:eb:6b:d8:86:11:73:8d:
6b:ab:5b:6d:5e:fa:20:aa:5e:b4:af:6f:26:54:86:cd:cd:9e:
2e:38:30:99:8c:47:92:2b:f1:73:4b:dc:2b:31:1c:32:ea:47:
84:25:49:da:2c:6b:0b:c3:74:b0:62:7d:25:47:76:d1:ae:fb:
a2:83:23:03:29:0a:25:f7:35:96:e6:2e:9e:9d:5f:22:bf:c5:
6f:8d:91:69:db:7f:4f:54:e8:8f:e6:8b:62:6d:f8:8b:79:a9:
65:f6:4d:71:35:23:c5:70:5e:e1:1a:06:ba:53:b8:57:08:dd:
46:18:4c:29:e4:d7:5f:41:3b:a9:19:bf:04:21:b0:e4:dd:73:
8e:8f:0c:0a:75:1f:a1:55:78:0e:1e:2b:98:25:1d:c4:fc:54:
e4:be:63:65:7a:9f:fe:54:40:f2:97:ea:27:ac:0a:d2:03:7a:
4f:0a:cc:5a:33:f6:c5:29:5d:99:8f:26:30:4a:f5:8e:91:01:
aa:56:a3:04:63:6e:45:34:2d:c2:dc:b8:fc:fb:af:40:d6:55:
65:22:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:46:56 2026 by rpki-client