Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: rif3/ZtNTSfnrtBboTV0TDq8jGh3alIWLZ7QfkPLrqE=
Subject key identifier: 7B:10:31:47:B8:AD:8E:69:1E:24:0C:F8:CD:76:BA:92:0E:E2:F0:81
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 01A0CE2437F2A4A04F8726E3C710A16C2F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:14 +0000
Manifest this update: Wed 23 Sep 2026 12:01:14 +0000
Manifest next update: Thu 24 Sep 2026 12:01:14 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: yvRPDqTkEyhbbEXd0wnE/BjhiYi+4JcWjX14n64WsZ4=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:37:f2:a4:a0:4f:87:26:e3:c7:10:a1:6c:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Sep 23 12:01:14 2026 GMT
Not After : Sep 24 12:01:14 2026 GMT
Subject: CN=7b103147b8ad8e691e240cf8cd76ba920ee2f081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:59:eb:f7:af:ba:2f:77:76:e2:68:95:84:
15:d7:35:ef:63:8d:38:68:8b:cc:56:7a:c7:67:ac:
5b:62:69:12:96:15:74:11:13:c8:3a:c2:24:e1:57:
82:56:1c:42:ce:e0:a9:3d:be:3e:99:c7:48:80:95:
8d:fd:2d:b6:f5:95:02:35:28:69:5e:65:4b:37:78:
39:49:92:d9:7d:12:cc:13:e0:21:c4:b0:69:37:54:
6a:40:f4:0c:83:b6:59:40:44:72:73:cd:ea:da:b2:
85:7b:bc:84:b5:30:29:ab:16:a1:3c:ea:98:09:31:
3b:f4:1a:fd:0a:f5:1e:74:50:9c:74:a2:34:eb:4c:
c4:26:3d:be:a7:89:f1:19:fd:d8:83:9d:59:37:cc:
a5:c9:ce:cc:f9:09:ad:e5:08:46:ad:24:4f:c4:8b:
d9:fe:5d:67:c5:c8:92:69:d5:5d:ca:da:d9:e0:8b:
ca:c8:ba:8c:e9:92:52:64:e9:3a:da:e9:08:9a:97:
a8:52:9a:4e:b3:eb:93:92:20:d9:c8:89:df:b5:14:
00:f0:7a:b4:f3:7f:98:37:e6:f8:dd:86:1d:a4:d4:
dd:ba:25:8d:52:66:c9:9e:91:0e:00:15:d9:5e:a3:
41:b0:9f:c0:7e:b1:8c:e2:10:9e:2a:ae:26:05:a3:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:31:47:B8:AD:8E:69:1E:24:0C:F8:CD:76:BA:92:0E:E2:F0:81
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:b0:84:2b:63:04:73:3b:ec:22:f5:87:00:cf:7b:43:1c:
cf:8f:23:a7:16:4f:14:98:8f:fd:37:2f:7d:ec:2c:12:33:f1:
51:2b:68:79:d8:df:e5:ff:bd:8b:5d:9f:0a:2e:0a:a0:25:5d:
ae:3e:4f:6a:ac:72:e9:c4:ba:cf:31:78:45:12:9c:c3:77:24:
c2:a6:7e:ec:02:30:c8:46:27:4b:5b:57:95:d8:ca:f7:a5:6a:
ee:bb:40:22:fc:ed:90:3a:02:a3:db:c9:06:96:04:58:81:f2:
18:68:c3:0b:ca:bf:13:9b:63:d5:5e:42:7b:b1:49:03:5c:96:
6f:41:16:5f:da:9e:db:f9:99:a8:db:f8:3b:8e:52:54:17:3e:
51:c5:49:68:d8:69:f4:00:e0:01:d3:6e:86:3d:f3:ea:c5:57:
f4:11:04:fa:c5:ce:66:6d:77:23:f1:9c:dc:74:b1:64:d3:0e:
1b:5c:6d:78:27:37:e4:2e:a8:f2:ba:0e:b8:fb:47:7c:b3:93:
d8:a1:3c:16:d8:8f:dc:dd:d3:76:32:cd:1d:dc:51:da:cc:bd:
4e:a4:8b:bc:45:2f:7f:78:90:b8:96:af:18:8f:ef:2d:94:be:
1d:34:e8:96:6a:7b:a6:50:df:7c:ae:95:50:03:0d:83:f4:70:
7c:ee:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:12:16 2026 by rpki-client