Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: 9e3n8It9MVZqjUxwWgzJS5CMSSoP+RdKMrMSytrZNSg=
Subject key identifier: 92:63:7C:B1:A2:99:D0:45:09:95:FD:46:AC:E9:ED:5E:2A:73:12:C6
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01A0C2C4A070D41F59165EDFC3945F27BBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 07:01:01 +0000
Manifest this update: Mon 21 Sep 2026 07:01:01 +0000
Manifest next update: Tue 22 Sep 2026 07:01:01 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: 9IrEb7YO5NTEIxhsG1sUNv5xBamjXgXniCDN/BolmXo=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:a0:70:d4:1f:59:16:5e:df:c3:94:5f:27:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Sep 21 07:01:01 2026 GMT
Not After : Sep 22 07:01:01 2026 GMT
Subject: CN=92637cb1a299d0450995fd46ace9ed5e2a7312c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:3b:e9:74:95:14:d8:d2:62:2a:10:9a:db:
52:e2:7b:46:58:42:af:56:17:ae:b3:1e:80:ab:ab:
f3:9c:30:a6:60:43:1c:83:e4:45:f5:b9:74:64:50:
1b:59:ef:05:6b:55:1c:cc:c2:b4:4e:6f:d8:98:24:
64:c4:54:f9:60:00:14:1f:50:04:7d:64:16:c9:1d:
5d:41:85:a0:c2:ef:20:33:d5:c8:64:7a:fb:bd:94:
52:ad:00:d8:fd:c5:85:f0:15:9d:a8:36:b7:3d:5a:
e1:5b:2f:a1:15:da:98:4c:b1:e0:fe:8e:38:e4:4d:
29:af:f7:4c:38:27:c4:da:26:8a:ce:50:0c:1e:57:
db:61:9e:b2:84:00:4f:5d:d5:f6:4e:da:c8:c7:42:
70:54:87:ac:f6:fd:47:48:f2:c3:62:d4:7b:e6:e6:
ea:55:21:b0:b7:6b:c0:b8:67:fd:05:55:a6:f8:0f:
1d:00:dc:75:59:2f:15:5a:f2:e2:93:59:f5:f9:3b:
97:89:12:29:c4:f9:a0:8b:3d:3a:d7:0e:61:77:1e:
3f:70:7b:97:32:c0:0c:8d:3c:fe:f0:3f:90:f1:fd:
58:4b:40:18:c8:89:25:0f:30:cd:62:9f:dc:81:06:
66:ed:ae:e4:ba:73:81:d8:3b:55:41:41:a7:68:bb:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:7C:B1:A2:99:D0:45:09:95:FD:46:AC:E9:ED:5E:2A:73:12:C6
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:79:67:da:e5:49:c8:0f:d5:2d:db:02:67:da:6b:c1:75:
2e:51:8b:c5:2f:f3:65:b5:c9:07:b1:6c:96:a5:69:3c:15:6c:
aa:d1:cf:39:ee:5d:9f:58:a9:76:cc:ec:e0:13:5c:f4:dd:28:
5d:3c:30:a0:4f:86:7f:6e:82:2c:54:1d:f4:8b:d7:68:41:8d:
63:3a:d1:11:6a:40:2d:7f:d4:c3:36:4c:ef:3d:1b:e4:d8:ec:
e2:22:fc:10:52:31:0c:35:71:4f:29:96:20:19:ab:da:00:2d:
f1:87:d2:8d:89:65:0c:03:2f:94:57:64:29:7f:92:1b:44:d7:
06:b6:9c:60:e4:af:ab:c0:0b:9a:9c:d8:da:a1:e4:1f:c2:f0:
b5:b3:f8:8d:45:13:90:7c:71:ce:56:18:97:f3:29:d4:4a:e9:
d7:98:1c:07:39:52:89:4a:ca:13:47:b5:14:43:d4:6e:a7:04:
7a:5b:e3:3a:2c:6f:40:a1:41:57:56:15:88:06:5b:ca:5c:d0:
07:b9:b0:0a:ee:c2:5c:f1:d0:f9:3e:33:39:5e:67:8f:85:b0:
8a:e6:96:f7:b0:5e:29:63:8d:96:16:ff:08:16:03:31:7d:c5:
4a:a1:ad:5b:17:b3:86:d0:10:7c:eb:7c:02:52:a7:c8:95:cd:
80:62:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:25:12 2026 by rpki-client