Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: 5+KzbOtTfpyxozqPrwCZCmljY/qeSX7rZ5S1CQbPsaw=
Subject key identifier: DD:9A:AB:E3:D8:E1:8C:C0:56:D4:9D:FE:1E:30:64:BC:64:0F:7E:94
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 01A12B44B911F4DC885A49CFBF661EA1635C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 11F6
Signing time: Sun 11 Oct 2026 14:01:26 +0000
Manifest this update: Sun 11 Oct 2026 14:01:26 +0000
Manifest next update: Mon 12 Oct 2026 14:01:26 +0000
Files and hashes: 1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: xDPQBDex32ho62kXHPTjEk/Q/1lGVcwYODlPluv1q3M=)
2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
5: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
6: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
7: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
8: y8v5nA8clWvNSibTRhJn-18_5r4.roa (hash: QFjv2ebqxu/9Ku6e2ADrvhpZM5hc5qGrf6vLHAbvmic=)
9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:b9:11:f4:dc:88:5a:49:cf:bf:66:1e:a1:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Oct 11 14:01:26 2026 GMT
Not After : Oct 12 14:01:26 2026 GMT
Subject: CN=dd9aabe3d8e18cc056d49dfe1e3064bc640f7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:bd:f6:46:cd:34:71:27:49:ba:4c:a2:0a:
9e:59:a4:54:42:29:99:85:db:6c:d9:a6:a0:12:5e:
17:a3:d2:85:7a:cd:47:55:c5:fb:2a:5c:ab:4d:ed:
17:cb:ff:15:2d:b9:6d:23:a0:61:e4:fd:25:c8:d6:
5c:1a:75:1b:57:d2:d5:30:cf:80:5f:69:db:6d:ad:
ab:79:01:ac:53:b0:9c:49:99:37:4d:fa:d9:69:1a:
7f:12:75:92:8b:6b:7e:82:ae:a7:25:45:a6:8a:db:
e0:62:76:77:35:7f:5a:db:df:b0:16:7a:f0:df:00:
05:24:c2:b7:a9:64:bf:8b:ad:5b:92:07:80:55:ef:
62:34:a5:d3:80:bc:4b:61:17:08:5d:3b:21:2d:5b:
55:24:15:c6:01:8e:eb:c9:bd:09:04:9b:0e:b3:dc:
4e:9b:de:e3:f6:17:84:f4:91:ff:a7:51:eb:38:40:
50:5b:ef:39:16:e0:89:0e:42:51:62:13:87:19:0f:
60:f5:aa:cb:a4:e3:d1:db:51:a5:23:f3:72:4e:4a:
92:e6:ee:da:66:25:0c:4c:f5:73:8a:02:fb:f2:46:
14:2d:d1:f2:17:46:33:f2:ca:31:4c:d0:16:05:58:
f4:e9:d8:44:a1:77:fc:93:7a:ed:8a:7a:34:37:fe:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:AB:E3:D8:E1:8C:C0:56:D4:9D:FE:1E:30:64:BC:64:0F:7E:94
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:e0:5c:cb:9c:b4:3a:b8:c0:1d:5a:0e:04:45:98:14:8f:
21:20:4f:dd:fc:b7:22:a6:7f:e8:6c:fc:aa:f9:99:30:e4:e0:
59:3d:68:b5:b8:cd:45:3b:1c:b8:a7:92:2d:49:e1:06:dc:17:
28:38:54:51:7b:66:1b:88:11:06:63:35:04:50:23:7b:09:80:
27:38:12:99:72:3f:fa:6d:b7:d1:65:a1:fc:c0:ee:5f:e7:b0:
f0:a9:03:6e:b1:e0:a2:1c:1f:c6:ed:00:75:f8:6d:7d:ee:45:
a7:ab:2c:04:fd:e6:29:d0:8b:7e:19:b6:31:e6:b9:a5:83:39:
57:02:a1:86:25:f9:29:e1:da:8c:3a:d5:f4:93:8f:eb:4e:6b:
3e:6e:35:37:45:58:ea:85:66:b5:62:7f:9b:f6:57:89:3d:c2:
ff:6a:50:51:18:56:d4:88:48:bf:e6:91:7a:cb:b9:a2:6b:9b:
25:49:08:13:16:09:88:b5:08:f4:88:65:fb:20:f7:48:7a:2b:
33:85:66:01:64:84:9a:5e:6c:05:f2:e8:ae:4e:64:7d:fe:62:
52:31:13:cd:d2:d2:02:ce:2c:74:69:3d:52:46:5f:cd:45:91:
20:a1:7d:f7:35:b0:26:7e:7d:eb:43:81:2e:04:ea:51:01:42:
14:e4:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:15:01 2026 by rpki-client