Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: RNUrE+Kh/ceKErZky6rm4BvMXL1/yznhHFfZYaApmjg=
Subject key identifier: 5B:85:51:11:83:6E:1E:ED:77:A7:4F:E5:C7:FB:48:BC:31:D1:02:7E
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 01A0C331EB2B1563FDEDEDC41B91509193FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 09:00:23 +0000
Manifest this update: Mon 21 Sep 2026 09:00:23 +0000
Manifest next update: Tue 22 Sep 2026 09:00:23 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: CNyJvzptzcPuuMrLwDNmhYUq0MkH5BPwC1ypPWKHl+k=)
2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:eb:2b:15:63:fd:ed:ed:c4:1b:91:50:91:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Sep 21 09:00:23 2026 GMT
Not After : Sep 22 09:00:23 2026 GMT
Subject: CN=5b855111836e1eed77a74fe5c7fb48bc31d1027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:81:33:da:dd:5b:f1:8d:5f:a1:0a:1a:9f:
49:4e:aa:64:c3:a7:33:81:17:b4:a5:d1:5d:0b:d5:
e7:4a:5d:5d:8f:ad:6f:f6:de:9a:1f:b6:83:85:d4:
a8:ec:18:54:3d:5e:69:da:62:b2:11:30:7e:e0:5f:
40:94:84:b7:eb:df:a4:27:09:17:0f:c3:5c:ee:7d:
37:f8:85:50:ac:24:fb:5b:3a:eb:4d:c4:f6:0b:eb:
91:90:4f:a5:22:81:e0:ba:ea:c1:e9:52:df:66:2b:
f5:f4:bc:4b:83:f7:0f:b1:b2:66:f7:96:1f:d4:96:
04:c3:b8:8c:4a:51:65:6e:c0:97:b3:bf:01:3c:ce:
c0:9d:83:ba:5a:37:d0:8a:8c:fd:a6:7a:dc:72:f8:
63:ed:51:97:fc:12:e3:de:97:c6:6c:8c:88:3f:14:
84:5c:21:7e:bd:35:c6:8d:d3:c7:00:8a:96:31:1c:
9f:88:73:56:02:6b:4b:f1:5a:a2:da:3d:16:35:5c:
e2:7d:db:51:ab:ff:5c:a9:12:af:c4:bf:49:c6:93:
d7:76:b5:52:2a:e2:78:c5:1d:fc:c1:d0:47:4c:75:
a0:e5:a2:e3:24:b3:68:80:3d:85:c0:5d:ef:d9:ae:
84:b1:d8:9a:5c:3a:2e:c8:4c:f4:60:22:6e:a8:97:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:51:11:83:6E:1E:ED:77:A7:4F:E5:C7:FB:48:BC:31:D1:02:7E
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:17:e1:9c:ff:ce:37:59:1e:73:ab:c8:e4:2b:f1:b1:ca:60:
5c:7d:ed:27:35:de:0d:78:44:78:73:14:d9:15:b2:2a:04:02:
89:63:44:cc:17:ce:39:47:16:12:df:2a:a1:c0:43:25:b3:5a:
50:29:71:5e:f6:84:c1:3d:4d:20:98:be:b2:a1:f6:11:38:ee:
b5:4e:3e:81:58:df:07:eb:f4:26:e6:c7:7d:02:19:a9:57:79:
2e:4b:9f:e2:d8:75:11:20:f6:a5:6b:c3:e9:b6:2e:ad:27:14:
d6:f1:45:73:32:db:51:8a:b0:17:a2:8d:11:df:0f:a7:a4:c6:
18:58:af:f2:bf:99:aa:4c:1b:6c:b9:f6:c7:1c:3e:57:3a:b1:
1d:c4:8a:b8:78:a0:fe:e5:fa:65:9a:7a:ec:10:bf:d4:3c:8a:
55:08:50:22:af:7f:3b:04:41:94:6b:09:de:3e:9a:23:3f:78:
25:87:f4:60:3c:61:ef:f7:98:84:dd:30:ca:c1:ee:f0:17:97:
6e:89:8c:21:2a:f6:0d:58:26:b1:b8:01:9c:d7:f6:db:30:15:
ed:04:bd:b5:68:88:ff:31:a3:a4:96:f0:b1:f3:0f:8e:48:34:
2a:10:fa:67:ce:08:b4:2a:72:99:4b:19:f2:ac:55:c2:77:f3:
54:da:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:55:23 2026 by rpki-client