Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: bnpy5wSeingrbdwgasngZJkbpQCZ/WZJc7ISpxYaqSg=
Subject key identifier: 09:E4:6E:50:4E:67:5E:31:92:5E:9E:50:FE:8F:57:A2:7E:A8:BA:5F
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 01A0C2C4394BAD92D05E6B345FF831381F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 07:00:34 +0000
Manifest this update: Mon 21 Sep 2026 07:00:34 +0000
Manifest next update: Tue 22 Sep 2026 07:00:34 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: ldxxRlJamtQhx4cCZKYehTSL+RhggkK6thxO4rw8ObQ=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:39:4b:ad:92:d0:5e:6b:34:5f:f8:31:38:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Sep 21 07:00:34 2026 GMT
Not After : Sep 22 07:00:34 2026 GMT
Subject: CN=09e46e504e675e31925e9e50fe8f57a27ea8ba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:aa:5e:73:6f:00:28:bb:8e:54:a5:2c:ef:
6b:90:1f:e2:2f:14:f4:94:2a:46:9c:aa:61:bc:63:
6d:a4:2d:9f:fa:18:56:73:c6:45:b2:32:8e:b1:e1:
e3:b3:b0:24:57:95:cf:ac:2a:93:5e:20:49:af:14:
56:a6:0b:59:a9:7e:06:41:cb:69:51:e2:a9:9f:19:
62:7e:80:52:a9:f6:4c:1e:70:aa:ac:9a:0f:76:32:
ab:49:14:55:7d:cd:69:eb:40:c7:c7:21:12:45:85:
67:93:66:51:30:de:9e:5c:92:0a:c4:94:bd:03:c5:
96:af:e6:34:36:52:74:79:0b:f3:89:17:a7:65:36:
07:c8:0a:ea:d8:c2:09:01:f1:4e:3d:30:ed:70:ef:
81:4d:85:6f:e0:3e:e1:13:30:88:35:0b:ab:37:1d:
40:ab:3d:16:fd:e0:30:66:a6:c8:de:3c:fb:93:6f:
b3:66:21:cc:43:58:36:17:f0:ca:79:15:da:03:7c:
6a:77:ee:1a:dc:bf:ab:a9:5a:bd:cb:1d:06:d9:ee:
a7:17:51:23:64:44:1b:e1:1b:33:25:6b:03:4b:ab:
68:4d:78:6e:8b:1e:20:37:5a:a5:1e:f8:04:82:2f:
ce:56:fb:32:7a:a0:f5:25:d2:bd:34:a2:6e:d3:75:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:6E:50:4E:67:5E:31:92:5E:9E:50:FE:8F:57:A2:7E:A8:BA:5F
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f1:45:1b:8e:1d:38:87:90:bd:25:a1:6c:2d:00:8e:a2:29:
05:16:33:25:bd:30:4e:85:8e:c3:36:f1:7a:87:ee:b7:34:42:
cf:b3:42:8e:ae:3d:38:d5:bb:35:46:d0:fc:3e:1b:af:13:08:
4d:ae:c5:6b:f3:e8:88:cd:c0:09:d9:ed:ed:9e:6d:18:da:c0:
09:b8:a7:6c:ca:b2:09:4b:a6:7d:4a:6f:87:d6:b3:26:1b:2c:
12:20:93:f6:a1:e8:84:d4:39:1e:fe:f0:a6:9b:86:8f:c3:de:
9e:cd:30:31:ee:1e:49:63:bb:76:69:9a:d4:06:45:37:42:a5:
b0:dd:b4:10:99:cd:50:ad:cb:12:e8:ec:60:fd:1b:77:64:39:
90:c3:4d:b1:f6:57:b3:f1:84:c5:24:7c:65:3e:92:8c:3d:e6:
27:bf:ab:db:8f:05:0e:66:03:c2:7f:0c:bc:4f:85:fc:8f:71:
e4:57:87:1a:2d:94:17:42:75:a4:42:bc:22:dc:50:9b:3e:f9:
ba:26:77:45:f7:f2:f1:a4:3d:e1:ad:b2:87:c9:78:ee:cd:50:
b1:d4:21:69:73:b3:2e:2c:1f:61:32:d0:64:0f:f2:54:8c:7a:
c3:61:b1:64:53:fe:5d:04:59:ae:f8:4d:da:16:3f:41:55:50:
7d:bc:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:06:48 2026 by rpki-client