Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: ICYC63zUp2dbOst19TordMWUWAMuMgKpHclfSAqFU7g=
Subject key identifier: 67:A3:B4:34:36:D0:88:FB:13:78:EF:FE:31:33:4C:FC:04:50:93:07
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01A1DE70417749D8BD49B6EFE44522CEEF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 09:01:01 +0000
Manifest this update: Sun 15 Nov 2026 09:01:01 +0000
Manifest next update: Mon 16 Nov 2026 09:01:01 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: fgeOzfS10w7ALxet9O+KmVuPwDLsXxuD+NdvV2vKpao=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:41:77:49:d8:bd:49:b6:ef:e4:45:22:ce:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Nov 15 09:01:01 2026 GMT
Not After : Nov 16 09:01:01 2026 GMT
Subject: CN=67a3b43436d088fb1378effe31334cfc04509307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:f6:08:55:c1:66:94:bb:c0:e4:ae:30:c4:
01:44:cc:a4:ff:5a:96:a5:c6:3b:8b:d7:97:1e:fa:
a8:c6:e0:b8:c0:68:81:f4:df:37:ea:12:10:61:c1:
f6:af:d9:77:6a:66:91:99:dd:11:28:e3:72:0f:f8:
97:5a:c2:bf:7f:f8:58:94:2f:2b:d2:40:8e:b9:4c:
9d:88:64:97:e3:e2:d8:a8:0f:ff:2c:bd:6f:da:60:
54:b6:b3:53:4e:24:2c:14:51:43:70:e8:94:bb:81:
c9:39:e6:f9:47:d8:e5:36:f1:5c:b1:33:20:c0:82:
39:25:ee:6b:29:3e:de:32:2e:c4:1a:75:3a:c7:79:
b6:13:c1:9a:e7:00:ae:f3:a9:77:ee:7f:a4:c6:03:
ef:ce:cc:95:87:02:71:8d:e6:58:d4:d7:77:f6:c9:
5d:01:46:38:d6:4f:91:a5:10:54:8a:a2:86:71:3b:
92:f6:9e:4f:5d:53:ae:d9:9f:06:60:9d:11:c9:33:
28:34:48:0c:ad:55:2a:34:7f:64:20:3b:a3:3e:69:
90:22:4b:73:90:cf:d9:43:81:ba:0f:ba:f2:3d:d9:
88:a8:91:58:78:f2:82:11:f9:66:48:b1:8e:b0:b2:
28:0a:d6:f6:93:07:db:a8:08:a2:79:84:28:30:0e:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:B4:34:36:D0:88:FB:13:78:EF:FE:31:33:4C:FC:04:50:93:07
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:34:f7:d5:bd:a6:7f:31:c2:1b:b3:6a:72:4a:e0:49:2f:
cf:c8:1f:11:01:08:d4:77:1e:1b:10:47:d0:79:19:77:c9:b0:
74:51:0b:ea:3e:4e:09:63:3e:ca:65:a4:14:c6:92:2c:1c:29:
af:ce:d3:8f:c7:23:87:ba:ca:71:9b:24:b2:7c:5f:d7:80:b9:
08:32:4a:f8:14:26:c7:48:2d:a2:1d:11:c7:a8:6c:e0:2c:d0:
58:3f:d5:66:cc:e4:78:6f:f4:f2:a6:a0:72:ae:f1:22:c3:fe:
28:bd:7c:a1:8d:6f:e2:e5:45:74:94:4d:18:6f:e1:0d:31:0c:
6d:bb:46:07:a5:a9:39:a6:6b:c8:a8:b5:8a:55:2e:46:be:4a:
50:3f:fc:37:6d:0d:41:f9:74:36:2b:0b:33:da:43:20:ff:96:
14:b0:c1:91:d6:a0:2e:ee:cf:e1:3b:c8:e6:6e:61:d2:d5:a8:
e5:18:a9:d8:a5:8c:11:a7:bd:21:02:48:29:48:57:cc:50:14:
21:6a:19:48:da:06:f7:ff:46:7f:d3:ed:58:93:08:3f:08:97:
b8:7e:98:08:6a:fe:37:37:bc:51:68:4b:29:c8:fa:59:01:11:
e0:c7:7b:2a:14:98:e8:40:ba:ba:27:70:75:a8:17:4b:3e:b7:
83:06:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:06 2026 by rpki-client