Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier: VQbA0mE7NdQAXTns5pmrol+rn0jsgceHGvvMI0iVVqY=
Subject key identifier: 91:F3:4A:34:20:36:AA:FD:A9:DC:DD:15:28:A4:AE:10:51:0B:E0:6E
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 01A0C669D289D346B0B5764AD27F771722DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:18 +0000
Manifest this update: Tue 22 Sep 2026 00:00:18 +0000
Manifest next update: Wed 23 Sep 2026 00:00:18 +0000
Files and hashes: 1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: GC/feLtwT0BdfFKWgUOZa6mUrrX0lncRTvmeYc9N8M0=)
2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:d2:89:d3:46:b0:b5:76:4a:d2:7f:77:17:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Sep 22 00:00:18 2026 GMT
Not After : Sep 23 00:00:18 2026 GMT
Subject: CN=91f34a342036aafda9dcdd1528a4ae10510be06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:a9:1e:fe:59:26:66:6f:97:26:3e:a2:ba:
e8:76:52:3c:52:22:da:95:c8:bd:15:96:a2:05:79:
3d:b2:1f:a4:e0:7d:23:f1:68:82:08:c4:c8:98:03:
28:3c:24:29:7e:51:d4:28:b0:ac:e4:a3:ca:28:25:
76:fc:17:f9:27:39:57:be:e5:13:c0:09:c9:88:34:
2c:48:e0:58:08:5f:1e:45:41:3f:e0:cb:f5:31:e4:
1b:f9:90:98:8f:04:55:32:c6:38:16:9c:66:c1:4a:
6b:06:ec:61:a1:29:5c:7e:71:e0:25:f5:a8:80:8c:
cf:5d:98:63:23:f6:1c:9e:38:68:21:cb:22:02:25:
cd:4e:04:02:eb:d0:a9:1a:0e:c3:c2:4d:c4:ac:93:
a7:7f:a9:96:1a:d6:0b:03:41:c1:55:02:8b:eb:06:
95:83:c5:d4:80:fc:e3:6c:c6:b1:dd:81:28:b3:7e:
c7:b9:82:bd:9a:6a:fd:40:ac:9a:e2:7a:e4:95:b0:
d3:aa:3b:22:74:0c:7b:20:8b:c3:94:24:4d:b6:4f:
4e:5e:5e:f7:7d:56:d7:a4:3e:e4:70:41:c7:9d:16:
f7:a5:d2:a0:53:0d:b4:41:aa:9d:d5:fa:3a:c9:65:
90:f7:f9:6c:71:91:65:ef:19:bf:83:42:f3:c1:49:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:4A:34:20:36:AA:FD:A9:DC:DD:15:28:A4:AE:10:51:0B:E0:6E
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:cf:c2:d2:f9:7c:c2:c2:25:65:9f:54:16:0f:94:0a:97:
98:39:5f:b2:53:b5:4f:95:21:e5:69:2d:94:bd:d1:7e:14:e5:
75:41:cc:df:a9:59:f8:2a:2a:f8:b2:d1:77:7a:c7:6d:50:a5:
5b:2d:b6:14:c2:3d:11:fb:60:76:35:6f:40:64:50:dc:64:1f:
c7:cf:cf:91:ae:b9:31:23:c8:7a:f2:50:91:4e:e5:ff:8f:ba:
62:53:f6:ba:38:aa:e9:e5:17:5c:ec:b2:11:67:92:86:5f:63:
06:0b:5a:01:94:c7:33:34:1f:ae:01:d0:ad:d6:4f:d1:21:1c:
e8:41:c8:71:08:ea:bb:df:a0:bd:ae:12:2b:21:47:aa:fe:9a:
2e:37:cd:a8:39:df:0a:95:2c:7f:1c:2b:4e:e1:36:bb:7a:10:
68:32:d8:68:32:33:cd:cc:1c:9a:53:bc:ee:d9:bb:b2:13:a8:
bd:d4:87:95:5e:6f:e1:a8:ec:41:ad:c1:2d:f0:fd:ad:34:46:
5c:8c:4c:63:2c:de:46:7f:80:82:95:f8:c6:37:0a:ff:85:14:
3b:35:c4:72:a3:fb:9d:98:0d:75:31:4f:15:c1:20:eb:fc:08:
9f:a8:27:fd:e0:b7:54:3c:75:e3:db:30:43:1c:bd:28:d2:08:
b5:fb:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:01:41 2026 by rpki-client