Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: yzXA6HVR6L2UTf7TewJ7/7OvHLfCVS8ee0wpQUVSnKA=
Subject key identifier: 20:8D:28:CF:5F:DD:9C:5B:28:6D:B4:31:8D:8B:5C:84:A7:60:5F:D1
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 01A0C74630563463850A45ED44965F8C8DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 1996
Signing time: Tue 22 Sep 2026 04:01:00 +0000
Manifest this update: Tue 22 Sep 2026 04:01:00 +0000
Manifest next update: Wed 23 Sep 2026 04:01:00 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: yFafC6nFWteib3XAm8LzOQdCX9dU7JHJZSj0mcUcOAQ=)
2: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (hash: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:30:56:34:63:85:0a:45:ed:44:96:5f:8c:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Sep 22 04:01:00 2026 GMT
Not After : Sep 23 04:01:00 2026 GMT
Subject: CN=208d28cf5fdd9c5b286db4318d8b5c84a7605fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:64:23:42:a6:87:68:7b:34:f1:7a:88:93:
10:5d:3e:d1:d4:59:ae:49:9d:18:7d:37:ee:ba:b0:
49:b8:bd:93:6d:78:83:03:56:7c:33:7c:bb:15:b0:
06:bd:79:3b:a2:b4:3b:dc:c2:ec:02:76:10:bd:7c:
ee:30:d5:f0:b4:c7:16:38:fa:3d:d0:a7:62:73:65:
06:b9:f2:49:c3:db:fb:a3:96:ef:7e:93:b9:cf:bf:
2e:29:05:4f:43:c7:6d:d6:22:3f:56:f8:74:76:71:
bc:57:06:f4:e0:22:4d:56:f5:b6:94:dc:a3:e5:79:
cf:cf:ae:c1:8a:86:1f:91:1c:3b:be:91:3c:46:5e:
77:14:0d:04:b9:2d:db:a6:c1:5b:11:02:f0:fe:d1:
34:98:21:e9:cc:c5:1a:12:f2:b0:65:25:83:7e:73:
67:5b:bb:62:e9:5c:67:b8:fc:8a:79:6d:5f:e7:81:
9c:91:47:d9:f5:01:c4:a9:a2:72:14:18:58:db:9e:
f6:b9:4d:15:df:df:04:6c:3b:c2:16:d8:1f:31:30:
1e:fb:4c:cf:22:32:e2:97:c4:eb:46:0c:19:5a:9d:
ff:50:9f:7b:a6:ae:69:6f:65:67:73:10:5c:50:95:
83:09:94:11:7b:3a:05:e2:db:a3:90:79:8a:3b:d8:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:28:CF:5F:DD:9C:5B:28:6D:B4:31:8D:8B:5C:84:A7:60:5F:D1
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:c2:ae:85:fc:55:eb:99:19:cb:ed:49:44:1a:7f:c7:4a:
2e:64:70:99:2a:57:65:07:79:dd:9b:34:82:c8:b7:6e:b1:08:
08:38:b3:47:ee:e3:ad:a6:3f:6e:dd:62:49:cd:e7:6d:63:36:
2b:ef:7c:58:d0:a8:af:a1:ab:b6:ca:58:19:36:ce:35:51:ad:
fd:e2:ce:b4:d6:6f:a8:73:46:05:b1:ba:a0:63:2e:07:4c:3c:
db:bb:a1:6b:3a:ec:d9:a4:6f:39:be:b3:d6:4d:18:47:16:56:
34:65:e5:0f:3f:03:18:f7:45:88:5c:76:c1:68:0f:0c:84:ce:
cb:fa:4b:22:1e:8b:25:e0:39:e1:d6:e6:3c:0b:5c:ed:5b:83:
92:4a:3b:8f:67:7b:d9:57:f5:8f:22:c8:36:1b:86:99:c4:a5:
00:bc:63:46:c3:83:b9:96:81:8c:12:f3:4c:19:89:30:28:91:
9e:38:56:c9:26:ae:4c:be:70:b6:53:cf:ee:56:ce:04:13:3e:
9b:a6:46:e9:9c:e2:9f:91:a2:e1:e0:5b:8e:26:bc:79:6d:b0:
af:d4:85:88:61:1e:98:f9:ec:44:f6:4a:c8:e5:f0:65:69:a2:
b0:50:0f:1f:f8:c4:b0:ee:eb:41:a9:d1:7d:d4:f9:95:51:e2:
b9:67:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:18:10 2026 by rpki-client