Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: Lgl7z3vET4F5/B+9BDzCgF9f/aIyZ/IZAHR0hnhF2OU=
Subject key identifier: FA:42:A2:36:DC:62:B1:06:AC:87:14:24:82:05:6D:83:9D:3C:AB:71
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01A0C28D0080C38A3CDDDBA46AF0BDF282BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 1404
Signing time: Mon 21 Sep 2026 06:00:15 +0000
Manifest this update: Mon 21 Sep 2026 06:00:15 +0000
Manifest next update: Tue 22 Sep 2026 06:00:15 +0000
Files and hashes: 1: 1-pGUh5eoM3ZeUskzeaaKM7PLY6M.roa (hash: yFYmsEHjskSi49uzOqgkpPy9RGM1shgkNOzvgFJ7/8o=)
2: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: 8aaSXY+2OzF1ZETzwxTnFG6DGqeLuptPIoAMSLcAi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:00:80:c3:8a:3c:dd:db:a4:6a:f0:bd:f2:82:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Sep 21 06:00:15 2026 GMT
Not After : Sep 22 06:00:15 2026 GMT
Subject: CN=fa42a236dc62b106ac87142482056d839d3cab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:62:90:17:b0:f9:fe:25:85:e4:f7:2e:f5:
ac:c8:d4:d4:0f:43:49:fb:bd:5d:76:84:79:e9:e1:
72:ee:12:18:bd:03:14:1d:cc:ef:33:d6:b9:e3:f2:
21:d4:c1:a5:53:d6:57:1b:cc:d2:04:25:02:4e:17:
9b:04:fa:59:5d:ad:e9:b8:29:ac:91:a3:f6:2c:87:
67:bb:b0:87:ff:78:cd:84:db:6f:27:55:7c:66:93:
03:dd:f6:9e:a1:30:f1:9c:b2:d7:df:5b:86:59:20:
be:0d:ef:e5:39:31:0e:48:63:87:83:af:2c:ef:74:
70:e0:a8:24:47:a1:30:2d:96:26:3b:11:8c:69:a6:
0d:09:32:5c:45:61:fb:ad:27:33:22:d8:1b:c9:1f:
77:a2:17:c8:7a:03:fd:49:93:33:b8:00:ce:8b:91:
57:e6:6e:7d:73:77:00:ce:fc:54:b1:f0:4b:a1:70:
1d:53:ca:e8:ef:04:d0:81:c7:af:d8:29:99:a1:1a:
e7:11:ed:18:52:a3:d0:d6:36:95:28:10:53:10:10:
bd:a9:3b:56:67:d8:60:09:eb:20:97:2b:72:db:65:
e2:b4:d2:3b:40:1f:e1:76:df:ec:b8:b9:51:a4:d0:
4d:42:16:46:86:3f:e0:9b:11:f4:4c:cc:6c:a5:25:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:A2:36:DC:62:B1:06:AC:87:14:24:82:05:6D:83:9D:3C:AB:71
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:97:fb:2b:ed:d2:86:74:fc:bb:e8:1b:ec:c8:ad:b3:fc:
3b:cd:5a:04:80:5b:98:da:a0:ef:ad:71:28:4a:9b:14:7f:a2:
e5:5c:19:6c:5c:f1:32:a4:c0:fd:4e:62:21:07:32:cd:ac:7d:
a0:a5:4a:89:ea:3c:b0:71:2a:60:a8:f8:57:22:d9:79:4d:02:
5f:f5:ce:38:5b:ba:97:33:d3:03:e5:c2:27:c5:12:50:5d:a9:
be:38:3e:e2:f1:e1:95:e4:20:b6:c3:18:40:2e:c2:be:80:bc:
e7:4e:5b:38:37:f2:84:8d:b7:2c:68:e3:be:d7:e6:b1:0a:8b:
56:9e:a3:cc:26:6a:ea:3f:f8:c6:38:82:e4:3d:57:d2:73:3c:
c2:de:43:25:86:4c:59:9a:0e:44:af:d2:28:db:b9:a5:b5:9c:
28:a4:24:a8:27:aa:1b:84:09:b9:ed:a9:ea:37:5d:33:3a:51:
9e:48:3c:aa:d5:ad:17:c8:74:2b:2f:96:65:f8:0d:bc:87:f2:
52:66:54:25:ca:ce:1b:3a:07:ce:47:ac:a8:e1:f1:20:97:e1:
16:a2:98:e5:77:9c:4e:71:bc:e2:73:fd:29:3c:9a:10:8c:1c:
8d:42:45:d0:d7:db:de:9a:db:b0:94:f9:2a:a3:f9:1c:22:a8:
f8:a8:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:10:26 2026 by rpki-client