Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: y6TDobkN4agu6KHWxEusQydwVvLE0U/ItSH8z0O4jvM=
Subject key identifier: BB:27:9C:EB:E7:73:10:B7:72:AD:D9:F3:2A:41:C5:4F:67:0E:D5:01
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01A11C08114B514EBE817E4347A31333C4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 15:00:52 +0000
Manifest this update: Thu 08 Oct 2026 15:00:52 +0000
Manifest next update: Fri 09 Oct 2026 15:00:52 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: Hu0HT8WTuN/WZJE4ILGNIf/PMZ3tciVTR0wPHV6tVas=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:08:11:4b:51:4e:be:81:7e:43:47:a3:13:33:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Oct 8 15:00:52 2026 GMT
Not After : Oct 9 15:00:52 2026 GMT
Subject: CN=bb279cebe77310b772add9f32a41c54f670ed501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:34:a9:c6:4e:61:44:66:f4:b9:ce:47:db:
f7:f5:77:30:fc:cc:21:f6:26:63:4f:15:0c:64:ba:
6d:57:2d:f6:6d:bb:98:15:a4:ef:7a:e3:59:8f:ae:
52:f1:13:1f:a1:5d:b6:7d:a6:b7:5f:97:39:e4:bc:
58:d5:98:8f:bb:84:17:a3:0d:3b:22:a2:47:b6:bf:
b8:d7:d3:8c:19:14:72:9e:fc:46:59:5d:b8:ab:49:
46:6b:97:be:e7:f3:2d:c3:08:51:49:1d:c2:99:19:
c8:0f:c3:0b:a0:b3:46:a3:0e:f0:2e:53:e8:1b:e3:
ef:a1:fa:36:21:1d:4b:0c:43:3c:35:5b:f2:8a:f5:
75:d8:8d:92:10:85:35:6a:ed:77:9f:ca:78:5a:a1:
8a:de:f6:e7:1e:13:4c:49:1b:d5:01:b0:e0:08:30:
38:21:98:0e:5a:8c:6d:88:55:34:30:85:ac:bc:be:
e6:7a:6e:32:bd:49:5a:58:c2:34:d0:76:c1:d6:57:
1c:52:36:f7:98:87:d8:2b:9e:c8:ce:ab:d6:30:a3:
87:1c:bc:f3:11:d1:2b:c7:12:08:c6:d9:a5:45:9a:
2e:df:cd:1b:d9:71:40:a1:6b:19:7d:43:73:9c:25:
08:0c:5c:c7:a8:c4:49:de:9b:1f:17:40:14:30:b7:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:9C:EB:E7:73:10:B7:72:AD:D9:F3:2A:41:C5:4F:67:0E:D5:01
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4a:c9:80:c5:02:3e:d0:24:79:3e:92:cc:b8:bd:37:17:08:
7c:4f:05:c9:b2:26:d8:57:b8:cf:10:1d:ce:9c:7c:c3:f0:6a:
70:c3:7e:9a:76:b3:b5:8e:3d:21:e1:fd:e7:9a:b1:14:25:f0:
7d:86:52:23:94:4e:7b:b4:d5:1e:35:f6:b9:23:8b:d3:62:b7:
30:c5:a9:e1:84:33:af:18:6a:75:d4:ab:66:09:34:41:74:5b:
e1:b1:b3:3b:e0:9d:a3:5f:e3:1a:28:d6:ff:4e:07:05:92:af:
73:00:af:26:78:9f:01:5e:70:89:04:41:d8:15:17:04:28:0b:
ea:be:00:f7:42:03:76:8e:30:a0:5f:7a:53:e8:5e:2c:8f:00:
b9:ba:64:66:10:47:63:9b:13:8a:68:a8:01:03:6e:94:dc:49:
23:53:e7:ca:d9:dc:f1:37:c9:f5:5a:ac:38:c0:f3:57:8b:da:
64:47:8a:8c:b5:7f:4e:5c:9c:14:a6:00:86:11:4e:9a:4a:33:
05:99:50:86:d6:b6:1e:1e:c4:60:c0:82:30:98:8f:05:6f:90:
71:c7:75:98:b3:06:ae:36:9d:f8:d7:a7:b7:5c:8c:e4:7e:b9:
e1:0c:10:8f:1f:42:02:e3:1e:1d:ee:a6:2a:8d:b2:ca:25:86:
ee:62:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:36:27 2026 by rpki-client