Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: pWtwhKytjHLX3Q1qeP6nTOmYka0gG8zeukZsJLB57UI=
Subject key identifier: F0:5A:98:25:FF:DD:65:F0:45:DD:5E:88:CB:CA:11:3A:20:C0:7E:9E
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 01A0C6D7FFC65E080B4F8DFA7BBE75A127E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0C0F
Signing time: Tue 22 Sep 2026 02:00:39 +0000
Manifest this update: Tue 22 Sep 2026 02:00:39 +0000
Manifest next update: Wed 23 Sep 2026 02:00:39 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: NUjQrNcitQ96ijQPLEhl0EwEVL3eMSbAHWSCMQ8GDHw=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ff:c6:5e:08:0b:4f:8d:fa:7b:be:75:a1:27:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Sep 22 02:00:39 2026 GMT
Not After : Sep 23 02:00:39 2026 GMT
Subject: CN=f05a9825ffdd65f045dd5e88cbca113a20c07e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:b8:24:d3:e8:cc:8d:e3:dd:fe:27:81:aa:
f1:72:31:dc:e4:31:e5:fd:75:66:63:89:23:d8:e0:
a6:18:7b:90:98:e5:14:d5:d2:dd:0c:d9:af:68:85:
0c:0d:98:33:0f:4b:29:eb:0c:68:aa:7b:09:bd:a4:
86:46:61:88:9c:00:0e:05:49:16:b5:a0:f8:28:53:
ba:cf:75:39:c5:4c:de:16:2e:bd:d7:cc:43:4d:bb:
39:7e:5c:56:f1:8a:ed:b8:54:7d:32:ca:38:e6:c7:
be:8c:02:d6:15:7e:74:fd:cd:b6:08:83:7d:af:ab:
4c:29:0a:bc:9f:c7:ec:e5:77:1f:e5:b8:63:3b:e3:
5f:d5:fe:d5:55:69:58:4a:0c:07:76:6e:4e:e2:34:
3a:4f:7c:16:06:fd:9e:96:50:45:be:0b:ba:f6:89:
0a:07:f5:96:17:d1:91:f7:d7:a5:7d:79:97:b7:99:
6f:8d:96:d4:61:46:d4:80:d2:69:9b:19:56:4f:73:
00:8f:bc:fd:a5:f5:4a:78:20:58:18:38:d3:2c:d1:
6b:62:39:ef:d5:74:dc:c0:24:39:c5:cf:c6:09:d0:
ac:43:65:9a:a5:44:55:72:26:72:3c:13:0d:f3:16:
aa:6b:72:39:9f:b4:a0:f3:49:93:5a:13:f8:0c:c3:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:98:25:FF:DD:65:F0:45:DD:5E:88:CB:CA:11:3A:20:C0:7E:9E
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:4f:7e:2d:a8:12:9a:0e:dc:9a:4e:82:35:e0:58:7c:11:
80:c0:4b:15:4b:f8:e6:f8:f0:df:6c:6d:f2:b2:1c:d7:2e:03:
40:67:41:05:3a:5f:8c:37:2a:0e:96:d9:73:cd:bf:bb:3e:5d:
39:2b:25:5e:6f:4a:34:f2:9a:78:35:f7:2e:7b:e1:73:ae:19:
42:f6:41:d7:8b:65:76:0f:f9:fa:a8:8d:21:5f:a8:39:49:1a:
ac:35:16:5f:ed:18:17:09:b9:93:9c:fe:6d:22:2f:8c:d8:1a:
74:b8:57:fb:06:08:45:9c:ab:18:da:a9:b9:ce:44:4b:27:52:
c7:dd:e5:e3:53:b3:19:ab:d8:2c:0e:f1:3c:c0:86:e7:53:df:
01:87:df:ea:e4:0f:7a:e2:fc:3d:ff:14:23:c6:08:f1:fd:7f:
05:d2:b6:88:55:0b:05:40:8c:a5:b1:dc:a8:dd:97:6a:04:5f:
60:a6:57:6d:bc:90:87:30:19:b1:24:0a:19:09:90:6d:0f:c0:
69:cf:e5:6f:7c:75:39:0c:75:2f:14:96:a7:4d:fa:e0:c7:26:
d7:2a:cc:51:9b:4e:c7:32:67:05:70:6a:5c:7a:b0:73:7f:2b:
54:e9:c1:92:4e:47:86:ef:2e:4f:f9:08:88:59:c6:99:90:53:
cf:f5:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:37 2026 by rpki-client