Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
File: 2UxqDiFt4bpgtuBRuhcCZ49naaI.mft (raw, json)
Hash identifier: +iLoTLQYuofjk47cjqrmSksDIXRyznO0EHE1jy5eCSg=
Subject key identifier: 19:AC:5A:14:BF:8F:1B:45:B5:54:2F:73:F4:CF:D0:62:91:1F:D9:60
Authority key identifier: D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2
Certificate issuer: /CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
Certificate serial: 01A0EDAF7FBC4F71E8F89F08EAE0B9A67D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
Manifest number: 25
Signing time: Tue 29 Sep 2026 15:01:36 +0000
Manifest this update: Tue 29 Sep 2026 15:01:36 +0000
Manifest next update: Wed 30 Sep 2026 15:01:36 +0000
Files and hashes: 1: 2UxqDiFt4bpgtuBRuhcCZ49naaI.crl (hash: Aq1caNX6O9Dvkn1CtPnxvmeB9MRNuysbwDetThIvUlw=)
2: nn3-Nc19uQpF1qtjhKcyJzD8RHE.asa (hash: mahrtyb/erZ88C0Jjyf46lIPEWXfHIkWk1CA7KUFLY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:7f:bc:4f:71:e8:f8:9f:08:ea:e0:b9:a6:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
Validity
Not Before: Sep 29 15:01:36 2026 GMT
Not After : Sep 30 15:01:36 2026 GMT
Subject: CN=19ac5a14bf8f1b45b5542f73f4cfd062911fd960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:c1:3d:35:3a:fc:62:2b:9f:09:37:22:d5:
a7:2c:90:6b:5a:8a:a2:aa:12:a9:dd:3b:12:82:14:
c2:6c:61:f4:07:a9:94:42:4c:9b:78:95:91:75:a6:
9a:b8:6b:34:ca:ca:78:31:31:13:c9:cb:64:bf:ef:
0e:ef:8e:45:50:32:2d:01:9c:ac:3e:48:ce:ba:bc:
16:fa:6c:fd:60:1f:ac:b7:10:ec:9e:8b:24:8d:57:
2a:60:16:0f:04:24:0b:8f:3b:7a:70:de:ab:f7:2e:
33:bf:1b:aa:d8:68:1a:64:45:cc:34:c0:0d:12:48:
0e:48:35:4d:79:df:8e:34:ce:05:72:59:41:0b:e2:
bf:ee:ab:80:de:41:41:91:db:5c:5c:0c:b6:fc:aa:
9b:e8:0c:f3:8f:c4:83:3d:29:ab:95:3e:16:3c:06:
c2:0b:ee:25:c9:5b:35:49:4a:14:db:71:c5:0a:18:
71:40:db:89:75:14:60:de:10:ee:cd:9e:c9:f7:cd:
fb:4a:2a:d3:b1:36:ef:df:a9:f8:2a:cb:85:d2:13:
df:71:3b:82:ed:4c:be:b5:3f:ac:f4:4e:f7:a8:01:
8e:14:0c:78:38:eb:34:d1:b6:0d:6c:dd:98:99:5b:
bf:27:2e:0c:dc:7c:58:80:a1:76:19:87:f7:60:34:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:5A:14:BF:8F:1B:45:B5:54:2F:73:F4:CF:D0:62:91:1F:D9:60
X509v3 Authority Key Identifier:
keyid:D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:36:51:ae:91:53:ed:9a:7e:f3:b2:f2:be:46:fb:f4:55:85:
87:c5:10:e9:a4:57:1e:92:e4:bb:b9:46:61:4b:86:70:11:ef:
f8:c6:e9:6e:d0:b3:ac:28:df:b9:0a:11:a3:a2:4f:27:13:e8:
69:b6:b9:03:fe:f4:32:4c:1c:c8:76:3c:f3:31:d8:36:9a:8c:
f1:6e:c3:d8:a2:55:b4:81:a2:5a:f5:8f:be:e9:27:b0:d4:c4:
92:56:26:8b:da:69:fa:25:79:d2:1e:a5:52:65:a6:6f:18:84:
90:30:6f:da:b4:da:98:8d:a3:ac:09:6b:be:10:e1:05:68:f1:
fd:99:10:ff:0f:7b:3f:49:5b:ac:7b:eb:51:15:e1:80:6c:1a:
7e:78:f2:e3:7e:c2:4e:d9:0e:94:d9:98:f4:49:fd:2c:4a:fb:
c3:08:b4:f4:91:86:7d:93:c3:80:c0:b9:81:55:af:9a:e5:8d:
1b:c1:44:65:4e:44:f7:d1:69:c2:b3:f1:56:bd:88:8a:c7:74:
98:67:c6:19:0f:d9:3a:e9:d1:01:1b:7c:f7:df:8b:6f:b7:37:
65:1a:22:81:e1:2d:b8:65:86:95:55:8d:5d:49:62:90:22:fb:
bd:e7:ab:97:16:04:04:c3:94:cf:92:07:4c:f9:ba:41:6d:b0:
36:55:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:59:01 2026 by rpki-client