Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: FwREeVFz7Qv3JulsqB9+mXTKLvBYYUeeMUc68J5zlpA=
Subject key identifier: C0:24:F7:5D:B5:CD:10:92:EE:25:66:9F:91:0F:DF:32:AD:CD:8B:07
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 01A0C70EB27DAA06EE5232D9D045EAA421F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0DEA
Signing time: Tue 22 Sep 2026 03:00:24 +0000
Manifest this update: Tue 22 Sep 2026 03:00:24 +0000
Manifest next update: Wed 23 Sep 2026 03:00:24 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: G35cFvyBf++R6avVowaU8iPb3ydda37RAGt88xg4Qsc=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:b2:7d:aa:06:ee:52:32:d9:d0:45:ea:a4:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Sep 22 03:00:24 2026 GMT
Not After : Sep 23 03:00:24 2026 GMT
Subject: CN=c024f75db5cd1092ee25669f910fdf32adcd8b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:e3:3a:16:8e:f2:cb:52:53:93:4d:d9:6e:
2b:b1:73:02:d4:a5:8d:de:d7:24:44:8e:59:f2:b0:
b0:44:77:e0:cf:19:39:59:bf:25:b2:6f:5f:83:f8:
3a:de:75:b4:69:e2:1b:bb:8a:0b:b1:8a:90:10:2d:
3a:dd:5b:fa:14:49:1e:11:56:b2:61:d3:d2:0c:68:
b9:b1:fd:1c:29:b1:89:c6:61:95:31:35:ee:83:da:
82:cb:a5:f3:41:00:0a:85:2a:b5:b3:a6:94:d9:06:
0a:80:05:ff:02:68:58:01:69:43:7b:5d:25:55:34:
f6:5d:44:40:b7:d6:7d:c7:7f:aa:48:11:ac:73:48:
85:ae:97:6d:27:19:61:b6:53:60:89:09:b5:88:0d:
ca:e1:83:9f:12:26:f8:d8:f0:14:40:b0:b0:94:8d:
08:3b:79:32:5d:9e:a4:7a:77:2f:fa:37:84:e6:97:
98:d0:39:33:13:98:9d:70:5a:57:21:3e:71:2b:79:
50:93:81:03:31:09:3e:c9:84:4f:03:12:70:68:ff:
54:bf:30:11:b8:f0:44:c8:8e:96:bf:72:18:13:3a:
61:c8:3a:0a:d7:bc:bc:f5:7c:d6:a7:a5:43:c4:8a:
74:7e:dd:cc:a1:40:90:00:0e:4b:97:48:fc:14:a0:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:F7:5D:B5:CD:10:92:EE:25:66:9F:91:0F:DF:32:AD:CD:8B:07
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:a9:49:79:73:6a:26:8f:81:02:01:bf:53:91:f6:ee:a7:
a4:7e:24:7b:1f:58:35:b7:be:6f:46:a5:34:f9:76:07:03:fb:
d5:aa:78:02:37:f9:da:73:ef:d5:91:97:ad:32:81:3f:30:47:
51:ef:59:9f:37:36:7d:ca:86:8c:0a:3b:8b:81:d9:50:53:c9:
ed:f1:8e:67:28:b1:29:b8:14:57:44:ba:83:5a:80:15:c0:f7:
a8:f1:7b:50:0e:f1:d3:61:83:23:ad:28:b7:2a:39:d0:46:1e:
86:8f:96:89:d0:4f:ee:a6:b9:b2:9e:9e:d0:7b:31:4d:79:66:
1f:72:79:08:0d:34:14:35:d7:94:dd:b9:49:06:a7:ba:26:b5:
02:09:8c:34:d3:ae:b4:06:57:41:fb:ae:98:18:d0:c7:d1:a5:
fa:c7:a1:39:27:7c:90:66:24:da:ad:10:c3:81:f7:e9:29:7c:
82:0c:c3:f3:35:00:a5:e1:46:af:f6:49:f9:90:25:16:0d:d1:
e3:fa:d7:08:a0:3b:4a:65:f4:58:ba:3e:6a:c2:76:50:36:a1:
b7:0a:75:2f:ae:d7:4a:fa:4e:0c:04:e6:a8:2f:17:28:fb:b1:
96:cf:45:fb:7e:4a:ce:7c:7b:ec:53:11:8d:df:06:7b:15:f2:
61:8e:25:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDrJ9qgbuUjLZ0EXqpCHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjYwOTIyMDMwMDI0WhcNMjYwOTIzMDMwMDI0WjAzMTEwLwYDVQQD
EyhjMDI0Zjc1ZGI1Y2QxMDkyZWUyNTY2OWY5MTBmZGYzMmFkY2Q4YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE7jOhaO8stSU5NN2W4rsXMC1KWN
3tckRI5Z8rCwRHfgzxk5Wb8lsm9fg/g63nW0aeIbu4oLsYqQEC063Vv6FEkeEVay
YdPSDGi5sf0cKbGJxmGVMTXug9qCy6XzQQAKhSq1s6aU2QYKgAX/AmhYAWlDe10l
VTT2XURAt9Z9x3+qSBGsc0iFrpdtJxlhtlNgiQm1iA3K4YOfEib42PAUQLCwlI0I
O3kyXZ6kencv+jeE5peY0DkzE5idcFpXIT5xK3lQk4EDMQk+yYRPAxJwaP9UvzAR
uPBEyI6Wv3IYEzphyDoK17y89XzWp6VDxIp0ft3MoUCQAA5Ll0j8FKCHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAk9121zRCS7iVmn5EP3zKtzYsHMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm+pSXlz
aiaPgQIBv1OR9u6npH4kex9YNbe+b0alNPl2BwP71ap4Ajf52nPv1ZGXrTKBPzBH
Ue9Znzc2fcqGjAo7i4HZUFPJ7fGOZyixKbgUV0S6g1qAFcD3qPF7UA7x02GDI60o
tyo50EYeho+WidBP7qa5sp6e0HsxTXlmH3J5CA00FDXXlN25SQanuia1AgmMNNOu
tAZXQfuumBjQx9Gl+sehOSd8kGYk2q0Qw4H36Sl8ggzD8zUApeFGr/ZJ+ZAlFg3R
4/rXCKA7SmX0WLo+asJ2UDahtwp1L67XSvpODATmqC8XKPuxls9F+35Kznx77FMR
jd8GexXyYY4leQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:24:18 2026 by rpki-client