Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
File: 2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft (raw, json)
Hash identifier: HggZyKCxDil53lMFJ8iSopZXgvB06yU9KlNG+8OttkE=
Subject key identifier: 85:1B:84:67:CA:91:B1:81:AC:24:D4:24:1B:A6:F6:BD:97:6D:B2:0D
Authority key identifier: D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
Certificate issuer: /CN=d9743b665b878583aa26f80f232fed3a4338b422
Certificate serial: 01A0E73F89B5F3C15E9638F7AD6B9105FC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
Manifest number: 1C
Signing time: Mon 28 Sep 2026 09:01:35 +0000
Manifest this update: Mon 28 Sep 2026 09:01:35 +0000
Manifest next update: Tue 29 Sep 2026 09:01:35 +0000
Files and hashes: 1: 2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl (hash: FG4KR3LlwykG8XIJLBFROUNpsqAR31oc6P9/KWxOgms=)
2: h3TopCexEANJtQqh5V_FOZwJdac.roa (hash: yFbiua8AaSUqoPeKbQbN2UgZ2ZXPXf7GTDHVzEOJJPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:89:b5:f3:c1:5e:96:38:f7:ad:6b:91:05:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9743b665b878583aa26f80f232fed3a4338b422
Validity
Not Before: Sep 28 09:01:35 2026 GMT
Not After : Sep 29 09:01:35 2026 GMT
Subject: CN=851b8467ca91b181ac24d4241ba6f6bd976db20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:1a:ab:52:75:5b:31:2b:50:fe:69:ad:90:
20:94:cc:f7:14:7d:bc:9e:ef:61:f5:1d:23:59:9c:
c0:f9:22:09:0a:34:53:23:a9:1d:d4:3f:bf:b9:d0:
50:0f:84:da:be:c9:a0:64:f8:49:4d:1f:c8:a2:d9:
ae:63:45:e9:f1:55:38:a6:95:35:68:35:1e:68:81:
82:6b:4b:2e:59:47:c9:bb:4e:db:f3:4a:52:df:4e:
8e:e9:28:b4:c3:25:2e:7a:6e:93:5c:2b:f4:fa:bb:
ad:67:c3:df:be:eb:a6:8d:cf:be:a5:5f:79:b7:9c:
e1:28:91:c9:39:3d:2d:6b:12:36:e7:c0:95:e3:84:
de:05:4b:c1:76:29:61:33:b1:46:c2:ab:c1:44:54:
dc:ab:36:60:c0:f5:50:69:e8:90:cb:11:9d:8a:8a:
61:69:48:52:ac:d0:1a:a6:56:70:af:0e:11:d4:fe:
3b:fc:b8:a4:2f:eb:01:5e:a3:5c:b6:06:a0:e7:c5:
67:f4:6c:ef:af:ef:ed:97:eb:ca:e8:ae:fc:2e:7d:
e0:79:05:4b:47:b9:46:dd:de:5a:35:d6:67:23:b5:
7b:56:ba:b1:74:37:e9:51:16:f2:43:3d:9d:e0:7d:
ea:66:25:bf:b4:09:07:a7:c7:0d:58:11:dc:52:b6:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:84:67:CA:91:B1:81:AC:24:D4:24:1B:A6:F6:BD:97:6D:B2:0D
X509v3 Authority Key Identifier:
keyid:D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:e9:28:b9:16:2d:17:d9:cf:d6:c7:87:ce:b6:a2:93:d0:
cf:4a:f5:ea:9a:c6:e9:bd:fe:e1:c0:f6:99:b9:ab:3c:d4:55:
71:6e:00:0f:16:5c:2f:86:13:d4:07:d3:35:74:62:eb:b0:63:
50:32:a4:8d:ce:bc:63:ab:80:63:d1:c4:cd:95:86:bb:ab:ae:
18:b6:39:e0:cc:e0:1a:77:d6:59:ac:bc:05:a1:8c:9b:2b:d7:
bc:08:f2:ab:c9:29:69:6b:db:28:99:56:99:01:57:e9:42:ac:
83:b0:66:f1:9b:aa:3a:18:8e:8a:0b:b2:21:29:fb:d4:2f:2b:
64:1a:99:d8:80:ab:d9:be:f2:d1:c2:d1:6c:11:56:51:34:0b:
ef:8c:16:29:89:38:1b:2e:0d:9b:a2:f4:e9:b8:3e:c0:5c:33:
6c:99:49:2d:55:da:a9:d4:1f:c5:4a:bf:44:dd:43:8f:58:f6:
47:af:7f:cf:91:6c:14:a7:d2:29:30:0b:b3:22:4c:81:83:63:
25:51:96:7d:e3:d6:98:fa:33:39:06:36:94:e9:77:6a:c8:e9:
d7:38:17:c8:90:97:d4:fa:27:c0:d4:0e:bf:51:7a:18:e5:19:
28:ff:79:fe:01:50:e8:b1:77:8e:5c:3d:26:e8:62:5c:6d:98:
2b:3a:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:12:26 2026 by rpki-client