Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: wfneMWtN32I+09j40cvPzVI1RLbPQvO8S/3ycNwIpOI=
Subject key identifier: 4C:37:5A:84:AE:22:7E:0C:C8:19:D1:51:6E:39:0D:B9:99:66:4B:00
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 01A0CBFE234425B47F99D0773E971828D7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 031F
Signing time: Wed 23 Sep 2026 02:00:25 +0000
Manifest this update: Wed 23 Sep 2026 02:00:25 +0000
Manifest next update: Thu 24 Sep 2026 02:00:25 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: azkxFDJbaJHm0rSgnzXyqiO7VvaB4LDMP1DTBWJCk6Q=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:23:44:25:b4:7f:99:d0:77:3e:97:18:28:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Sep 23 02:00:25 2026 GMT
Not After : Sep 24 02:00:25 2026 GMT
Subject: CN=4c375a84ae227e0cc819d1516e390db999664b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:b0:ca:74:ce:50:b1:59:00:69:53:fa:88:
a9:0c:17:f1:50:0f:6a:b7:db:89:b4:d3:76:34:0d:
f2:73:e5:2d:9f:af:00:8c:c2:c6:6f:6a:15:e2:cb:
7d:9e:f5:48:1d:08:7c:e8:3d:cf:63:2a:16:08:c6:
e7:82:95:3d:6e:43:6f:b2:45:d0:16:ca:b3:c1:dc:
da:df:db:f7:12:93:39:e7:1e:f7:73:2c:4a:b0:96:
20:31:34:9b:66:1a:7d:bc:8b:d4:df:62:7d:a9:6e:
ed:19:23:f0:9b:0d:20:db:c0:91:40:f1:d9:7f:d1:
fd:d8:2e:99:66:73:01:79:b8:76:db:bf:26:54:9b:
7d:e9:8a:dc:1f:0f:b4:bf:bb:b9:62:69:12:4a:65:
56:76:3b:cf:3b:46:db:6d:61:09:8d:39:bc:68:e1:
35:0d:1a:e7:d5:bf:2b:d2:54:e1:93:bf:78:45:0c:
40:c7:1c:d9:05:66:35:ff:64:f7:b7:ee:e3:4f:06:
e1:11:63:83:76:3f:28:7b:cf:a3:a5:fb:5a:81:88:
d3:de:97:96:44:f1:f1:6a:b2:d5:d8:89:71:e3:7e:
04:2a:4a:28:da:f2:38:e0:19:1c:4d:59:69:e3:71:
2c:60:fd:0e:6d:72:a3:47:49:b9:78:37:a1:c4:0a:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:5A:84:AE:22:7E:0C:C8:19:D1:51:6E:39:0D:B9:99:66:4B:00
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fe:70:82:0c:7e:f0:c6:98:5c:38:de:cb:26:b3:1c:f0:ca:
d5:66:a9:6e:33:74:2f:00:95:13:7c:37:aa:de:99:ac:2e:e0:
c5:5c:f5:a9:1b:48:54:0b:2c:35:f7:bf:6a:46:1a:19:cd:59:
6f:a3:85:54:06:5e:aa:6f:19:f3:08:c3:c7:de:78:99:87:44:
a7:e0:52:42:8c:8b:7c:c3:c6:05:3f:f8:e8:4e:fc:89:5a:1c:
54:3a:36:8c:6d:a2:92:9e:3c:cf:99:ff:d3:1e:8b:1d:1f:3d:
81:38:83:cc:10:5a:20:08:66:71:51:8d:f7:6b:a1:fa:04:3c:
ef:8d:89:24:1f:18:ae:13:9d:05:25:b7:a0:2d:09:43:46:f5:
7e:cb:6a:b1:d1:68:0a:14:c0:99:4f:68:39:9e:61:84:78:21:
27:f0:7c:0b:65:cb:39:7e:7c:63:56:d3:8a:9c:1b:da:52:54:
e1:b4:ae:26:9d:c1:da:51:27:98:d6:9c:46:90:df:f8:2d:40:
09:6c:54:bb:a4:6f:78:68:60:63:64:57:62:93:72:9a:8f:b2:
07:52:9a:67:de:a5:79:a1:8d:3a:23:cb:8c:da:c0:d1:8a:d3:
0e:a2:7f:2e:ac:8e:ba:95:0e:0a:fc:4f:90:c8:d2:56:d0:d7:
31:1a:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:34:04 2026 by rpki-client