Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: rrulHb9Yx/G5mhaeMu9ctUDDnAk5SDEWlyvGLfIMFrc=
Subject key identifier: 5F:00:75:99:71:E6:F0:9A:13:9A:06:F1:11:CD:53:17:BC:7F:7F:FB
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 01A0E88900CC277EDF23161BA1357BCCE913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 0268
Signing time: Mon 28 Sep 2026 15:01:27 +0000
Manifest this update: Mon 28 Sep 2026 15:01:27 +0000
Manifest next update: Tue 29 Sep 2026 15:01:27 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: a9FHHDFdF05YlGJltlv2HOCLrQjv0Eya1vzdKNUpaLI=)
2: JC6UtmVBO8VJzjh22JEE90WPBsE.asa (hash: p4seOistkJnJ4dooR7tbwqr+TdgvspSEDiOOuu1HEBs=)
3: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:00:cc:27:7e:df:23:16:1b:a1:35:7b:cc:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Sep 28 15:01:27 2026 GMT
Not After : Sep 29 15:01:27 2026 GMT
Subject: CN=5f00759971e6f09a139a06f111cd5317bc7f7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:e0:31:2a:63:1b:1e:34:a0:da:5c:fb:7c:
78:52:cd:6d:40:a6:98:f4:51:0a:45:7e:2c:28:27:
b6:a8:99:8c:d6:f5:4f:8e:d6:85:b8:28:bd:45:00:
d3:67:32:9d:e0:b1:8b:f0:d4:65:1e:31:38:03:28:
6d:43:57:78:32:b2:d9:c5:31:7f:5c:f2:18:cc:8f:
53:81:79:01:08:b6:fe:66:23:4a:2f:1c:55:0d:72:
cf:01:5f:95:ac:e9:04:44:a7:89:36:52:f9:78:27:
6d:47:37:10:b2:cb:11:43:4d:66:ff:65:74:27:cd:
60:11:15:a8:30:37:36:46:0a:65:ca:5d:1b:11:b8:
da:e9:12:01:54:32:ff:c7:5d:ce:f4:33:63:4f:70:
f6:aa:9b:78:d8:e0:5d:1c:3d:77:d9:d8:04:4b:37:
dd:29:57:d3:77:c0:e7:be:d6:b0:ff:bb:ba:18:ea:
33:e2:d0:c7:75:15:7d:6b:37:bf:46:a6:c8:77:75:
b3:55:25:f2:d5:0a:7c:8e:d9:00:be:02:e5:c3:62:
09:6b:16:c2:64:26:e3:50:3d:cd:47:2e:44:44:07:
55:c5:88:13:0f:91:25:7f:f9:c4:c2:05:de:69:e7:
95:24:22:8f:53:90:4d:99:15:fc:b9:3c:25:8c:c3:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:75:99:71:E6:F0:9A:13:9A:06:F1:11:CD:53:17:BC:7F:7F:FB
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4c:de:7f:08:17:9b:8e:00:4a:f2:b9:f9:33:a3:ff:7f:bf:
94:1d:13:60:d3:58:ee:0d:e1:42:34:bf:31:46:aa:0b:37:e7:
ce:63:21:4b:60:bc:51:49:4e:a6:38:12:f0:a8:5a:b8:7b:a5:
74:ab:2b:02:40:99:f8:4a:90:83:6b:6a:84:b6:07:92:a4:da:
52:66:a4:f5:65:ef:90:e6:52:c8:64:f2:ea:16:c0:a7:03:c4:
be:29:aa:78:f2:f2:65:98:c5:98:85:df:aa:7a:1c:0a:d5:f3:
17:43:49:53:c1:ad:44:3e:2a:8a:23:36:71:77:9b:c0:3d:5e:
f9:89:40:53:71:7a:ff:dd:c2:18:75:69:f3:a7:d6:10:af:15:
c7:09:d8:83:d6:ce:e0:b4:a8:02:2f:25:6a:bd:f9:34:1c:70:
7b:d7:cf:03:fd:25:9b:b8:64:6d:02:49:f0:74:0c:d6:74:2a:
8c:c9:e7:4e:cb:80:84:9c:f5:1f:bb:14:0a:1d:04:c2:d9:cc:
e5:5a:c8:b2:4a:85:d3:8f:83:fa:fd:dd:86:ef:7d:d5:5d:59:
4c:77:e5:98:b4:e2:c4:63:07:ef:51:0c:80:95:d1:d7:7a:c7:
cb:6c:02:58:ce:13:22:ed:3c:ed:dd:d0:df:2b:99:2e:00:bc:
41:29:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:54 2026 by rpki-client