Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: vufHOQwIxhuYSWv5/20Nf/tEhNzeTnq+coYGH/kzdjc=
Subject key identifier: 32:2D:0D:EE:7A:32:A5:B5:2D:26:8A:B5:C5:55:96:F8:80:06:A5:FB
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 01A0C8C60FC8A9A6C72C8156BC78CC4858B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0BC7
Signing time: Tue 22 Sep 2026 11:00:18 +0000
Manifest this update: Tue 22 Sep 2026 11:00:18 +0000
Manifest next update: Wed 23 Sep 2026 11:00:18 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: auXNkO0Eho44lmj5vXSyHoAEQmgzQlMOw3hd65nSN8o=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:0f:c8:a9:a6:c7:2c:81:56:bc:78:cc:48:58:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Sep 22 11:00:18 2026 GMT
Not After : Sep 23 11:00:18 2026 GMT
Subject: CN=322d0dee7a32a5b52d268ab5c55596f88006a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:16:aa:27:e1:a4:e9:5a:da:4b:7a:28:34:
4c:72:bb:41:d3:c1:01:79:27:59:77:d3:88:07:b1:
63:e8:68:ec:d1:8d:53:ea:36:3d:d1:5a:74:ea:3d:
96:11:35:5b:a5:f9:5d:5d:43:c5:fc:31:12:97:e2:
60:87:bb:47:39:58:be:a0:17:d9:d6:21:3a:31:bd:
59:04:32:4f:80:89:ad:60:dd:35:94:8a:8a:51:16:
a3:02:83:16:89:db:db:cc:68:6c:4e:ac:4b:b2:9b:
44:6e:58:84:ac:2f:20:e2:dd:a3:bb:7e:73:5e:95:
a6:e2:76:35:88:d6:aa:5b:1f:2d:41:dc:97:39:59:
6c:0e:51:f1:fe:7f:7e:ac:a1:02:56:9f:fd:b3:82:
a7:9e:ee:3c:a2:cf:9b:60:4f:c0:d6:0d:cd:b5:87:
3f:f2:04:03:78:39:76:cb:b5:66:f3:a6:02:15:99:
91:7a:fc:4d:55:e9:8f:60:e9:34:05:d2:70:c5:3b:
54:6d:1a:a7:84:41:3f:1c:9d:5f:ed:84:3b:bf:d9:
c1:7f:19:22:1f:27:85:6f:e0:77:06:23:48:d6:97:
5c:79:99:3a:b9:28:f9:4c:75:cd:d9:93:c3:92:89:
88:44:71:9a:b2:4e:6c:5d:82:4a:cb:74:e8:78:d4:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:0D:EE:7A:32:A5:B5:2D:26:8A:B5:C5:55:96:F8:80:06:A5:FB
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:d0:ff:19:19:c0:8d:11:6c:2b:4d:63:4c:77:0b:1d:f5:
66:67:37:b4:aa:5f:90:23:8c:b1:bf:ea:19:0d:fd:bc:2f:cb:
be:21:ba:d7:63:ad:f0:85:21:fd:ac:ee:c6:ff:39:9c:57:cf:
e4:2a:94:2d:70:59:16:92:60:68:60:82:06:3c:5f:b3:16:96:
b8:8c:4e:dd:84:88:67:15:e0:98:39:c6:9d:7a:7d:65:eb:5b:
6a:d7:d7:69:00:aa:08:fa:f7:a7:1e:34:55:35:34:05:9c:0a:
d9:aa:3a:07:02:d3:8b:10:c7:dc:53:9c:6b:18:79:11:4f:3b:
34:bd:ca:39:50:09:bb:7d:d9:43:58:ec:3a:27:bb:98:15:f0:
04:94:55:1d:39:e7:5f:86:5f:eb:56:69:bd:09:8f:8d:47:13:
51:91:45:da:82:0f:eb:b6:2a:f0:73:f4:42:c6:c2:80:0d:59:
11:88:b4:12:3c:a7:8e:0c:71:f6:9a:6b:08:c9:77:cc:60:ff:
94:39:a6:87:a3:d0:83:0c:f8:2d:66:d0:4c:b6:7f:09:15:d5:
38:bd:10:41:d1:a1:2d:d2:6b:0b:d9:67:24:48:4c:2e:ee:f2:
49:ad:92:4a:71:b6:8f:cc:73:25:30:4c:6b:f9:e6:c1:cf:1e:
21:86:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:57:19 2026 by rpki-client