Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: chXwtMkAbM1GzHZRC9lN7E3o5Yqh8s/4HInXPQ6Z1Cg=
Subject key identifier: 8B:67:96:2A:40:90:01:92:74:D0:A8:56:78:85:93:F6:80:B0:8E:33
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 01A130A1FD08319A94F508FF2EB82EA63B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0E67
Signing time: Mon 12 Oct 2026 15:01:24 +0000
Manifest this update: Mon 12 Oct 2026 15:01:24 +0000
Manifest next update: Tue 13 Oct 2026 15:01:24 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: jiXMynYxim9IkmOybqmUoWEpMmdR4QaOFFC+WHPNsCE=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:fd:08:31:9a:94:f5:08:ff:2e:b8:2e:a6:3b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Oct 12 15:01:24 2026 GMT
Not After : Oct 13 15:01:24 2026 GMT
Subject: CN=8b67962a4090019274d0a856788593f680b08e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:d4:17:ef:cf:43:90:37:1c:c4:31:47:50:
ab:44:2d:0b:98:6e:db:7c:ae:77:35:a2:b6:16:c6:
1f:b5:19:7c:f4:eb:d5:0e:6d:a3:9b:46:0c:51:89:
30:07:91:b7:5e:8d:26:40:4e:68:54:16:0e:22:02:
54:0e:db:dd:fb:20:2a:ff:54:88:23:97:9b:86:ef:
58:5e:0f:ec:39:71:0f:fc:25:71:a2:1c:62:46:b4:
4e:32:04:0b:93:c5:ae:00:55:14:b9:45:a5:2d:3e:
43:5d:3c:b0:b1:2b:ea:d6:64:6e:18:e9:4c:56:2e:
d8:a5:e5:aa:65:30:66:6b:94:c8:c3:e8:5a:9c:0d:
76:f0:f8:5a:60:b1:67:65:30:ef:4b:da:a3:e6:54:
13:cf:78:b7:f4:60:e7:73:1e:21:57:85:67:8f:92:
2e:f0:6b:f6:43:c2:54:89:ff:66:62:b9:63:2d:d1:
c7:ef:4b:a4:90:df:a9:2e:5a:14:d3:dd:db:5b:eb:
47:0b:b6:d4:b2:e5:16:3d:6c:34:d4:a0:04:6f:3b:
2d:a6:51:49:59:24:87:6a:fc:06:64:93:de:08:54:
e2:f9:80:79:f8:7e:67:84:c9:5a:d0:29:66:95:64:
05:8d:20:18:da:b2:e8:e8:5b:a3:5b:ed:2f:d4:62:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:96:2A:40:90:01:92:74:D0:A8:56:78:85:93:F6:80:B0:8E:33
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:02:7b:f5:e3:fb:40:1e:70:90:4f:d2:2e:a4:e8:95:e4:f9:
1d:72:0c:6b:fe:00:06:18:1d:da:ae:70:58:9e:c2:18:54:7a:
e3:0b:b7:35:47:a4:e9:bd:33:ce:e6:7c:58:b0:3e:4b:60:48:
31:0e:80:4c:60:a6:3c:8b:51:b4:38:06:b3:1d:48:89:6e:2f:
ca:76:41:c1:0b:bf:ca:d0:a6:f7:54:59:2b:f1:03:9c:d0:14:
7b:66:1a:02:39:87:b7:6c:84:a7:d8:96:5a:c1:ec:ec:5e:78:
4a:26:80:11:90:f6:bb:4f:f1:96:c7:7f:22:84:88:c1:d9:1b:
f1:ce:ca:6f:cd:a2:55:4d:ba:ae:87:d4:d3:08:49:3a:54:cd:
70:a1:44:52:e6:48:d4:7b:bc:42:e4:c3:4c:a3:54:b6:be:b1:
a6:9f:12:e6:40:6a:b7:45:e7:8b:d8:6e:05:c0:9e:01:bc:d9:
58:89:79:62:e6:89:ad:f9:d2:ab:4f:5b:ba:33:eb:a2:19:5b:
86:75:b9:09:0f:4a:b7:5c:ec:12:d0:c1:f2:bb:b6:cb:36:ae:
de:60:19:df:02:ab:bb:ea:5a:5f:4f:cb:6b:cc:91:d4:28:b5:
70:93:6b:d5:60:7a:05:78:50:6e:20:cc:e9:00:50:4c:46:cd:
aa:e4:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:33:28 2026 by rpki-client