Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: iome0+XkZYpGH9Kvq5F8mB0hgMvl39Bzqf/SvxhGhMI=
Subject key identifier: EB:B3:26:92:25:1C:57:1A:8C:EA:8B:59:D4:51:87:34:DF:22:B7:EE
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 01A0C9A25CB17583241CE50059F698B5E5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: 0253
Signing time: Tue 22 Sep 2026 15:00:55 +0000
Manifest this update: Tue 22 Sep 2026 15:00:55 +0000
Manifest next update: Wed 23 Sep 2026 15:00:55 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: +CqiqPtENHLIiNhOEzmEV4thGoHjiKAFjzVzbCMdUh0=)
2: gymKXorNDDp8x3PYy2044v75QFA.roa (hash: 0rzdf9ANtdDtf/hP67m2732x5lm9z0lPUGsmoQ5Cu10=)
3: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
4: wlE-n-v4vhVQ0V8BrCRy7vygKkk.roa (hash: GtlwHi8+nqqIfT+DJBH/zU6X+J1M23P7PC88GLuf8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:5c:b1:75:83:24:1c:e5:00:59:f6:98:b5:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Sep 22 15:00:55 2026 GMT
Not After : Sep 23 15:00:55 2026 GMT
Subject: CN=ebb32692251c571a8cea8b59d4518734df22b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:b4:f2:67:41:4e:39:ad:e9:82:9e:13:53:
7c:12:5a:29:31:28:60:a8:89:05:db:44:4b:a3:77:
dd:03:20:33:18:fb:44:7f:42:cc:79:8b:01:88:25:
42:bd:8b:2a:b0:30:01:4e:04:73:84:af:4a:63:f1:
7f:d4:0a:73:74:5c:bd:83:d7:82:1e:ee:8b:a1:a9:
35:97:d4:fd:76:0b:c5:3a:68:fb:8a:f0:6d:1e:4a:
c0:46:8f:0f:e3:be:ea:21:91:21:20:77:f3:f0:39:
3d:73:4d:ae:dd:64:cd:57:ea:89:2a:5d:3a:c7:89:
df:db:5f:6e:6e:25:d6:b6:68:8f:18:8d:11:c3:2c:
8e:2b:14:31:28:ae:c0:4b:f0:ab:8f:40:b7:0b:12:
07:d8:0d:09:20:6a:61:97:76:c8:2b:0e:cb:7a:bd:
42:d2:48:ec:d3:d7:ca:01:0b:f5:5b:6c:b6:31:30:
e7:15:03:5c:db:24:2e:e6:1c:3e:10:d5:a9:1f:11:
cd:47:a5:e1:a2:99:6c:b4:77:46:a0:ea:3e:cd:37:
8c:25:ed:dc:55:0a:c1:af:e1:a5:ab:b7:70:a7:61:
e1:5e:b2:ea:b2:fb:39:0d:40:34:1f:77:35:df:1a:
92:16:3b:d4:2a:56:57:ee:bf:21:c1:67:85:51:cb:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:26:92:25:1C:57:1A:8C:EA:8B:59:D4:51:87:34:DF:22:B7:EE
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:2d:52:f2:7a:f3:47:0b:49:ba:95:f1:00:7e:e4:17:7e:
9e:86:6f:6d:1c:17:30:32:a8:81:21:4d:d7:d1:d2:0c:eb:a9:
b8:ca:64:73:47:ee:d1:09:cd:ad:77:55:a3:ba:25:7a:0b:32:
8b:0f:3e:63:5c:72:38:f8:76:e0:68:f5:7b:d0:96:94:75:8d:
0e:e5:53:4a:bd:0b:ae:18:57:47:2c:02:b0:6f:02:93:71:1a:
5f:2b:c1:9d:e6:83:2b:32:05:2e:35:46:f7:f4:c3:f3:6e:79:
de:ec:10:b1:a3:28:80:bf:92:dc:3b:82:c8:b3:f6:ac:1e:cb:
61:26:41:a7:21:b8:bc:98:16:a4:1c:ce:ea:91:13:da:ec:05:
90:1b:4b:db:64:d7:53:6c:f3:3e:11:86:9f:16:da:a1:33:58:
2d:0f:3e:e0:dd:93:1d:dd:06:71:89:96:b6:7b:b9:13:ee:a3:
35:3c:04:7e:bd:a8:6f:de:28:ad:7e:59:d0:cd:21:fb:18:64:
eb:a3:d3:40:ce:4e:da:76:97:bf:ac:9b:91:d6:14:61:bc:cc:
af:ec:59:98:9d:ec:57:5c:55:51:2e:53:2d:9e:9a:ff:c4:f5:
45:44:01:8e:ff:ef:4c:d9:54:cc:93:22:46:e9:61:f9:4e:50:
86:d6:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:10 2026 by rpki-client