Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
File: 2geeQ_xybhZVyKdVVPX7wYsgRUU.mft (raw, json)
Hash identifier: gxQ1sIk2+aGJRfbfVP127dnP2yYhdXiQ0F26juyCj3M=
Subject key identifier: 83:E0:A9:4F:D1:09:B5:F2:4C:A1:CA:F6:54:A0:AF:78:40:74:3E:D8
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 01A1250BAE3A3379CE5888D91A2F6A269771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:24 +0000
Manifest this update: Sat 10 Oct 2026 09:01:24 +0000
Manifest next update: Sun 11 Oct 2026 09:01:24 +0000
Files and hashes: 1: 2geeQ_xybhZVyKdVVPX7wYsgRUU.crl (hash: NcCPYT5Rl0SEpJ/eFOVr9asakjf9F6EW/tG3ZSsdq+E=)
2: FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa (hash: 36QLoZ8Ws2gB6YZ/mvzOniygiDV4ui/NvR252z7lSOc=)
3: a0n0eRt_zXRSqiGHwwetMEUhQkk.roa (hash: Iq1Hfa0PK/01Z2qiRH7cJQnXiwjnNSuA2bLHyqY6DfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:ae:3a:33:79:ce:58:88:d9:1a:2f:6a:26:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Oct 10 09:01:24 2026 GMT
Not After : Oct 11 09:01:24 2026 GMT
Subject: CN=83e0a94fd109b5f24ca1caf654a0af7840743ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:e6:c6:ad:06:54:09:83:03:78:da:11:d6:
0c:81:4a:40:08:37:7b:87:06:1f:81:bd:cf:b5:e6:
85:4f:04:ed:33:c7:30:70:8c:28:0b:f3:0f:5b:57:
48:94:cb:f1:8a:4f:b1:df:81:c1:ea:bb:fe:b2:ef:
58:3c:a7:10:e9:f6:8e:d3:ec:ad:9f:fb:d3:54:91:
9d:5b:f4:e1:55:1e:eb:e0:37:dc:eb:f6:36:a2:5c:
eb:4c:d0:8d:82:09:38:ac:1a:25:45:26:c0:eb:f8:
8c:e6:1d:23:f9:b5:eb:72:d7:f9:76:74:03:73:89:
a8:09:9c:c6:b6:a0:3c:8f:c9:13:75:dd:73:79:76:
0d:7e:61:7e:cd:e9:ce:85:7a:af:03:c2:51:6f:39:
9b:b5:da:d0:19:e5:3b:89:38:3b:b9:16:73:d7:f6:
10:c6:ee:3e:36:4c:0d:a4:2f:89:c3:97:79:6a:4e:
1d:d8:20:e5:aa:7a:ca:55:82:94:c9:76:84:76:fa:
8d:ad:31:df:0b:29:09:98:54:0b:2e:92:ac:8a:e3:
e7:29:2a:07:7c:0b:07:61:2c:75:a4:91:d1:f0:f0:
be:33:a2:b7:ae:c7:5a:cc:aa:20:11:41:16:d5:0e:
06:08:63:c3:83:25:cf:7d:5e:7a:f5:ea:5e:66:c1:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:A9:4F:D1:09:B5:F2:4C:A1:CA:F6:54:A0:AF:78:40:74:3E:D8
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:17:4e:99:7c:1c:2b:f4:13:64:ef:02:c9:59:25:a8:08:
8a:96:d6:1c:10:5f:5c:98:11:ed:b3:32:a2:71:a8:a0:3c:d6:
07:3d:ef:58:99:c8:2e:3b:6e:d0:41:43:80:8b:2f:fb:46:f4:
47:ed:12:2f:c8:2c:8f:43:e5:37:6d:88:c9:06:94:b9:bb:b6:
30:80:82:09:49:73:f7:08:7c:1c:d5:17:8e:65:6b:5d:22:68:
f7:37:c7:3e:f5:54:34:01:a5:2b:03:5b:d1:36:7d:6e:94:f0:
1f:f1:62:b5:da:99:f9:3f:fe:24:93:92:32:83:d0:b2:f7:67:
c4:8a:2b:9e:f4:9f:5c:67:6f:98:ba:23:4d:a8:a6:48:fb:29:
54:bf:f2:ef:b6:ee:89:21:b2:c6:eb:aa:b2:6a:18:e4:40:b4:
73:53:bb:de:f9:8c:1c:c3:cd:ea:9a:58:e3:1f:0b:72:d2:72:
70:d8:f4:f5:d6:82:37:0d:19:70:44:1f:8f:e8:75:98:69:e3:
ce:d7:f7:39:8b:ee:5d:9b:0b:c2:61:11:ac:a3:34:5b:ef:73:
73:6b:2b:78:e6:73:22:7c:3f:91:01:5a:ff:84:b7:f3:71:76:
dd:1d:83:d5:33:33:42:23:ea:e9:51:4d:32:01:81:6f:19:36:
f4:1c:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:44:16 2026 by rpki-client