Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: v460NiikenJ83EgvBq9h0lEc3dvuQJRMotDwj5oQKmA=
Subject key identifier: 37:3C:95:8D:C2:FB:B2:CA:41:98:DF:DD:F2:2E:AE:02:19:05:1D:D3
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 01A0DE72B739A7DBB8310DD96F4F85019914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 0658
Signing time: Sat 26 Sep 2026 16:00:54 +0000
Manifest this update: Sat 26 Sep 2026 16:00:54 +0000
Manifest next update: Sun 27 Sep 2026 16:00:54 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: j6VuMflLy1w1E7iaRBEOoQ0VYxeLulgg4aUJVk0QTHA=)
2: RGLZmI9q0U_rGCj5H0GPgfaFzFs.roa (hash: CzsYzs4D4VP5grse+6TEO1G2n5ReLHWvzW+txSZXVDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:b7:39:a7:db:b8:31:0d:d9:6f:4f:85:01:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Sep 26 16:00:54 2026 GMT
Not After : Sep 27 16:00:54 2026 GMT
Subject: CN=373c958dc2fbb2ca4198dfddf22eae0219051dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:c4:40:51:db:93:1c:b5:80:92:b5:62:29:
0f:5f:14:78:b6:8a:54:d1:b9:df:58:21:bd:93:8d:
39:9a:04:9d:67:fc:5e:1d:81:36:47:6e:9a:34:4e:
42:6f:a4:08:c6:19:0c:e7:cf:34:57:92:c1:b4:0b:
22:16:da:e1:bb:2c:50:f5:9e:48:c5:ac:a1:f0:09:
e6:a5:5b:75:7e:34:a4:82:f0:ea:94:de:86:73:0f:
cc:a4:d9:1f:54:e6:d1:c3:de:ad:b9:d7:25:a8:85:
06:5b:62:8d:70:b5:ff:44:41:27:87:a8:99:4f:3e:
73:5b:e8:a9:da:ef:f0:b0:06:9f:8a:02:c0:c4:49:
44:20:af:3d:b8:b6:18:3f:8d:14:5d:ae:f7:b6:6a:
f3:a7:cb:6a:7a:d2:9c:1c:21:56:ca:0b:f4:36:7e:
91:b8:04:a3:f4:c9:17:07:18:1f:04:68:d0:a0:6b:
b4:c5:27:59:5b:47:5b:7a:aa:a9:5d:8d:6e:17:7c:
21:c9:11:59:94:a9:6e:0c:5a:f4:14:b3:7e:5c:b7:
be:d0:85:49:f1:fd:f6:9b:d0:ef:89:35:32:2e:05:
f1:c4:46:96:eb:92:d8:4d:11:c2:3d:5f:07:88:4b:
06:83:a7:c4:f7:2c:41:0b:7b:ca:aa:50:b1:d9:15:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:95:8D:C2:FB:B2:CA:41:98:DF:DD:F2:2E:AE:02:19:05:1D:D3
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1d:7c:23:96:36:8c:7f:f5:dc:b6:2d:08:15:e6:17:c6:ab:
3a:0b:98:41:d3:fe:c2:72:81:e1:62:d4:bf:9d:67:79:13:63:
a8:37:64:d6:e5:11:d9:8e:be:de:7a:f0:ee:8b:91:bd:40:99:
a6:56:51:5e:0f:d6:12:52:d6:b8:0b:ec:26:d8:8e:42:35:7e:
65:e6:c9:db:23:2c:5f:dd:58:46:28:d8:46:cf:86:2d:0a:5b:
de:26:bf:e9:8b:e4:87:fb:12:a2:69:5f:d9:7d:a0:eb:d9:a1:
14:94:81:de:5c:55:0a:22:99:1a:44:0e:b2:7b:f3:a8:8c:bf:
ff:8e:62:3f:ba:5f:51:14:0d:0e:ca:d9:bd:38:db:54:c6:21:
50:e8:8e:f1:79:43:51:06:c9:18:d1:c7:d8:b0:51:2d:9f:69:
69:f8:aa:96:3a:04:60:28:5d:69:dd:3a:7b:56:a6:d5:41:71:
a7:e3:24:d7:86:90:3a:ca:73:b6:fe:03:63:a6:fb:c7:ec:78:
9c:5f:8a:b8:7b:61:f8:60:a1:25:60:32:92:fb:ad:7a:47:1a:
82:48:48:2b:65:17:e8:f5:79:cc:52:16:0a:35:62:bb:57:c8:
81:a6:26:c6:65:1b:e9:b7:10:89:a0:4c:36:96:d2:43:2f:28:
aa:ce:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:55:24 2026 by rpki-client