Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: fUyLKn4nPsNGlvPMX6Yjd3o0WnMXEIkl957UQdUz1WI=
Subject key identifier: 64:5E:33:BC:14:DF:44:75:BF:36:26:09:E2:4F:7E:77:70:9B:8B:D9
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 01A0BEE7C9A18936B81D301ED32A310EAE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 110E
Signing time: Sun 20 Sep 2026 13:00:56 +0000
Manifest this update: Sun 20 Sep 2026 13:00:56 +0000
Manifest next update: Mon 21 Sep 2026 13:00:56 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: jA1i+maUkOjKpqLgPFXUd8uqfxodqVQnrn/ecgGSZbE=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:c9:a1:89:36:b8:1d:30:1e:d3:2a:31:0e:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Sep 20 13:00:56 2026 GMT
Not After : Sep 21 13:00:56 2026 GMT
Subject: CN=645e33bc14df4475bf362609e24f7e77709b8bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:bd:10:c1:f5:71:d2:85:90:09:bc:91:42:
11:0c:68:0d:10:0f:e1:b6:c0:27:30:4d:70:a5:d0:
e6:af:c8:9f:e2:d7:34:02:56:b5:c9:9f:e8:bc:27:
3a:91:2e:d8:24:d4:43:03:5b:28:5d:85:0e:79:b5:
21:24:4f:0a:71:7d:38:dd:ef:b7:4b:19:48:8f:a4:
bf:e2:55:5a:4a:e9:d3:97:1c:a3:3d:87:70:ed:6c:
43:73:6b:eb:81:37:68:3d:46:ea:1c:c2:70:b2:91:
48:2e:92:c7:a7:94:c7:82:55:b0:ad:85:e1:14:d5:
bb:00:8e:2d:0b:a9:db:a2:71:52:4b:23:a9:08:26:
48:02:3d:cf:90:91:03:20:6a:75:5c:fe:4d:d8:fd:
1c:68:16:2d:b1:08:65:4b:6f:4b:f1:fb:65:d2:f3:
15:e5:de:83:b9:20:74:e9:a3:26:8b:b3:68:56:02:
5e:72:1a:a1:e8:77:72:9f:e1:61:00:01:e7:0b:f5:
41:10:10:11:06:d3:a6:1d:21:18:c5:4c:5d:21:1d:
24:67:e8:7c:dc:be:82:9c:d1:41:83:03:8c:60:82:
33:ec:10:76:bc:94:70:38:01:6b:34:6a:5b:e8:74:
18:2a:96:76:36:71:49:5b:4f:84:09:76:9e:41:ef:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:33:BC:14:DF:44:75:BF:36:26:09:E2:4F:7E:77:70:9B:8B:D9
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:85:a9:9d:51:30:38:6d:d2:1e:88:04:3a:5b:5a:21:c6:
46:31:9c:93:ce:ec:81:af:06:71:08:42:02:bf:5f:01:9b:9f:
2b:14:bf:08:b3:55:30:62:eb:b8:8d:a3:24:1b:b5:0d:03:82:
af:c5:29:f3:6a:aa:51:46:ce:4a:0c:84:a7:31:c9:25:4a:f6:
42:64:8c:7c:a2:7d:78:0d:ac:7c:b5:ed:55:03:2e:5c:50:cc:
71:c1:b6:df:bf:43:2e:61:05:d4:68:bb:bb:81:6b:a1:fb:9a:
58:eb:f5:da:95:6b:f2:f3:26:8a:83:07:b8:03:87:98:bc:a0:
56:3e:b6:e2:21:1c:db:c1:86:b9:5c:2b:26:f0:98:bf:ea:ab:
8b:4a:19:36:d9:32:f2:05:db:e9:73:27:4a:c5:1a:b0:ae:53:
89:22:18:2b:e4:81:e7:db:79:6e:5c:0c:d1:2b:1c:a4:06:c5:
64:10:dc:7e:04:07:c8:3b:d2:a7:c7:90:e8:ff:3d:ea:1f:a9:
76:f2:33:02:2c:23:ea:97:8e:d7:b7:a4:51:7c:fa:c6:06:ce:
60:47:0c:56:e9:89:4c:d2:a4:c3:fa:21:04:6b:10:3f:8e:51:
eb:bf:ba:da:e3:5b:68:16:fd:a6:5d:8a:2c:f9:49:91:e2:ed:
ed:df:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:33:46 2026 by rpki-client