
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File: 2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier: 3QpmmVFlvT86QfLrSyOjkvshcQqESk8Te6OBd0g1qWM=
Subject key identifier: 87:85:C3:1B:E4:4A:CF:A6:21:B3:BC:27:A3:84:2A:25:1E:45:DC:04
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 01A1005A50CB583EE4DB0BE54BAB2E78B59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:01:21 +0000
Manifest this update: Sat 03 Oct 2026 06:01:21 +0000
Manifest next update: Sun 04 Oct 2026 06:01:21 +0000
Files and hashes: 1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: yASm9gNmkmsTITkVptIs0JE7vd3B3glc75QqcrthaAA=)
2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:50:cb:58:3e:e4:db:0b:e5:4b:ab:2e:78:b5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Oct 3 06:01:21 2026 GMT
Not After : Oct 4 06:01:21 2026 GMT
Subject: CN=8785c31be44acfa621b3bc27a3842a251e45dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:a4:d0:98:78:a3:23:d8:5f:66:77:26:b5:
80:14:99:bb:59:84:d9:bd:cb:40:fe:04:56:d3:44:
9e:1e:c6:b3:b2:a9:83:5f:8c:e2:d7:51:63:94:d7:
42:b9:40:21:4b:b0:0a:b1:fb:f0:6e:53:2f:9c:6d:
b2:a0:11:c7:f8:49:9d:cf:ff:6d:21:a9:4c:96:3d:
7c:ae:72:bb:ce:e3:e6:74:83:a0:8a:23:1b:0a:08:
dd:cd:99:e0:02:6e:bc:dd:92:1d:2a:11:b5:ab:45:
ed:c8:91:6c:d1:c7:67:6c:a4:8d:f7:fa:3b:aa:10:
34:69:e4:1e:3e:7c:30:4f:69:b0:c0:5f:41:85:98:
13:6d:0c:0e:88:c1:53:de:a3:7e:0e:3b:b8:2c:1e:
be:21:49:c2:ea:b2:61:60:51:4e:3c:f0:39:8d:41:
e5:e5:76:ed:f6:d0:e6:14:71:c9:f2:3d:a4:b8:17:
fe:79:17:f9:0a:d1:7b:28:56:92:58:2d:97:c1:b5:
72:8d:75:76:e8:27:22:2e:8c:5a:ab:39:cc:fe:a9:
4c:b0:e3:c6:c8:6f:25:af:51:2e:d2:08:72:d8:3b:
9d:b3:cd:f0:6f:cb:eb:14:5f:31:9c:d8:9e:f1:ba:
e1:77:e4:74:d0:79:0d:63:49:55:1b:23:29:7b:c3:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:C3:1B:E4:4A:CF:A6:21:B3:BC:27:A3:84:2A:25:1E:45:DC:04
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2f:11:a0:c7:60:0e:f2:a9:68:a8:bf:e7:88:30:4e:7a:5b:
86:a1:b9:da:1a:cb:b4:73:d1:dc:69:1c:6f:fe:78:51:92:df:
88:50:9c:00:52:d7:67:c6:a7:64:d9:69:6b:57:2f:4a:9b:e8:
59:e3:a3:22:59:fd:5b:65:73:49:a1:e6:dd:d4:43:49:17:fb:
44:f7:45:f6:87:d9:cc:5d:5a:da:db:09:7a:0f:22:30:35:e7:
78:c7:a9:24:6e:29:bd:77:a5:f8:3f:4f:4c:41:59:cc:06:ca:
97:d1:4f:01:24:27:c4:49:25:69:90:42:55:41:3b:01:07:53:
7e:65:30:5e:47:21:84:32:f6:66:9d:f5:dc:26:2a:17:c7:07:
6f:2b:90:18:80:b0:ed:99:69:b0:59:4f:d2:47:42:01:bb:db:
59:dc:a1:01:61:cc:fa:ce:9a:c4:0f:02:d4:f8:3b:50:39:1f:
b2:ce:7b:9b:43:30:7c:53:09:d1:18:1e:29:9b:b8:65:a3:91:
92:4c:2c:17:4c:ac:b2:8c:77:4d:80:16:77:84:ae:65:af:ff:
b6:cc:8f:af:91:0e:ae:04:2b:85:46:b7:41:3a:fb:2a:b5:7d:
ce:fc:1f:ba:fc:c6:75:f8:ed:e1:9c:17:11:e7:b2:56:9f:d2:
1a:a5:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:41:00 2026 by rpki-client