Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
File: c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft (raw, json)
Hash identifier: ZD1prno5DoS1r+Ce0tE36zk5SCdIYW33mQMTYDk9Hrs=
Subject key identifier: BD:18:7E:21:BC:26:5D:F0:F5:D1:5E:16:CB:F5:54:77:B5:1F:93:07
Authority key identifier: 73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
Certificate issuer: /CN=736c83469d2807ebe397115bbd84f94488cc814b
Certificate serial: 01A0EC2EF3AEF65F8AF351B5839FC6C73B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
Manifest number: 018C
Signing time: Tue 29 Sep 2026 08:01:35 +0000
Manifest this update: Tue 29 Sep 2026 08:01:35 +0000
Manifest next update: Wed 30 Sep 2026 08:01:35 +0000
Files and hashes: 1: WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa (hash: 64WvdrrvzHpzDzkmPq1Up/4HxutVHHLjzEFwNnqxnK8=)
2: c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl (hash: rEYDVqrpcMqhIVt/W2NJfNuz5zoARGSvVXP0E9M9gOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:f3:ae:f6:5f:8a:f3:51:b5:83:9f:c6:c7:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736c83469d2807ebe397115bbd84f94488cc814b
Validity
Not Before: Sep 29 08:01:35 2026 GMT
Not After : Sep 30 08:01:35 2026 GMT
Subject: CN=bd187e21bc265df0f5d15e16cbf55477b51f9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:12:a0:82:74:66:0c:66:14:52:cc:d6:0a:
4d:c7:54:eb:27:08:db:90:cd:72:38:6b:0d:39:d9:
51:d1:39:68:44:ff:95:c2:3a:53:9f:08:ad:ca:28:
8b:9b:bb:23:8a:6d:9a:76:10:17:f9:4b:e6:3f:c6:
08:bf:88:fb:97:8c:81:53:40:6b:00:a2:96:6d:ec:
9c:03:11:c8:4b:cb:23:e9:ac:69:04:65:eb:73:b1:
e7:17:67:4d:80:bc:a0:06:cf:94:19:21:c7:2c:55:
e0:cc:ad:4b:84:f0:b2:e5:b6:f0:5d:16:dd:10:da:
8d:dc:2d:8d:17:38:35:5a:04:c9:70:d9:bc:bd:23:
79:2b:7e:8b:78:32:1c:53:12:61:9d:22:ef:de:3b:
c7:7e:f6:9e:95:ea:58:02:49:a7:f6:da:85:ad:72:
28:3e:70:ac:15:2f:76:2f:38:f8:12:65:84:05:86:
6b:24:a6:4f:6f:8d:8c:b6:79:31:c5:c2:11:1b:d6:
57:18:99:33:40:17:f7:37:cf:1e:0a:55:10:1f:1b:
24:5f:81:e8:c4:67:a7:78:bd:08:86:98:0b:f3:c9:
c3:7a:cf:8d:22:89:dd:8e:9c:b0:d1:9c:d2:2f:95:
26:32:32:f3:db:a0:ae:fa:54:4e:41:c1:c9:f8:53:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:7E:21:BC:26:5D:F0:F5:D1:5E:16:CB:F5:54:77:B5:1F:93:07
X509v3 Authority Key Identifier:
keyid:73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6c:12:f3:51:83:9a:66:37:88:87:aa:f8:44:b3:20:3f:f2:
f6:a3:bb:99:47:7f:ae:be:e3:c2:49:61:a1:8d:01:cd:85:54:
2a:da:82:db:4c:00:67:cb:11:f3:83:c5:5c:01:a5:f5:fe:94:
b5:a5:4b:b2:ac:b9:b6:92:77:98:7f:b3:37:6f:3f:b1:56:f5:
fb:36:09:0b:91:37:29:41:63:c2:7f:b1:e6:ad:34:10:e9:a9:
01:af:ea:9d:27:87:5b:ab:a0:6e:15:23:8f:5b:e7:91:c0:31:
b1:7a:15:ec:dc:e3:54:45:7e:38:56:fd:68:b8:94:63:04:ab:
08:29:ea:37:34:e5:6d:d7:8a:3c:07:15:c2:b1:6b:3b:ff:83:
f2:92:48:62:1a:c2:c6:03:34:5c:12:25:5e:19:07:49:79:ee:
4e:9c:68:08:c1:32:d4:d6:76:b4:ea:23:42:82:e7:78:da:fc:
09:a5:fe:94:bb:14:f5:c2:b2:bc:1c:34:a8:29:74:77:20:fa:
00:00:f3:ae:52:cc:cc:e5:84:47:42:fb:7b:34:54:60:63:e4:
04:1f:dd:9b:0f:0c:c1:37:51:29:3c:e6:a5:9e:a2:3a:43:ec:
f6:29:ce:15:4e:5f:0c:7b:d7:f4:fd:51:0c:98:ed:af:51:85:
c8:80:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:01:45 2026 by rpki-client