Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: 8L76OGeEeuZkCXtOJ/K1filqYyh0VoRqvRUFsrJw4uE=
Subject key identifier: 31:E4:16:3C:4C:8F:4B:4F:F3:52:B5:81:90:43:D3:CA:2A:D0:A3:DF
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 01A0DB7240C888846F9B5B7E76D754F13FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1A03
Signing time: Sat 26 Sep 2026 02:01:33 +0000
Manifest this update: Sat 26 Sep 2026 02:01:33 +0000
Manifest next update: Sun 27 Sep 2026 02:01:33 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: e0LWY2mA5/mgJGBAIL2aKlIdU4qZtsoNh1Xi4Q9rnko=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:40:c8:88:84:6f:9b:5b:7e:76:d7:54:f1:3f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Sep 26 02:01:33 2026 GMT
Not After : Sep 27 02:01:33 2026 GMT
Subject: CN=31e4163c4c8f4b4ff352b5819043d3ca2ad0a3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:aa:4b:ec:aa:a4:78:3a:77:05:b2:c8:35:
fc:9c:9c:64:d5:78:ab:9f:9b:81:d2:e1:de:d0:84:
49:14:55:19:5d:f6:be:07:9f:74:4c:57:23:08:38:
15:e2:c1:d6:9b:ac:2d:59:6d:b8:35:d8:34:b9:a1:
7e:95:a2:23:0e:6b:08:5e:55:09:f2:0a:b3:34:80:
ff:db:31:02:36:be:fe:09:da:45:cc:a5:75:d9:e4:
71:37:38:59:72:46:80:2d:83:9e:99:22:6f:5c:5b:
b1:a1:15:e8:56:d7:1c:ee:5c:3d:c8:d6:14:6f:d8:
fa:b8:7b:83:c9:14:04:55:96:69:94:74:e0:9e:87:
e0:8f:38:9a:f9:b9:a0:38:93:56:13:27:4d:62:ac:
25:f4:fe:7e:b7:10:ce:9a:8e:4f:91:78:e5:81:38:
4c:41:69:ff:96:25:2c:4a:fe:c6:14:bc:07:2f:57:
61:27:5b:ae:a5:5d:76:71:4e:87:42:5e:5a:a4:01:
97:2c:51:f6:c2:5d:06:0e:0a:2d:63:ec:cf:de:a9:
df:39:c2:64:0b:16:e9:32:f2:6a:4b:58:ee:21:81:
15:99:62:b8:76:f0:f2:e0:56:ff:c4:ce:94:b6:14:
fd:4f:a0:eb:64:8d:db:9b:18:7b:77:fd:e4:71:3b:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:16:3C:4C:8F:4B:4F:F3:52:B5:81:90:43:D3:CA:2A:D0:A3:DF
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:d9:89:cd:a2:0b:0a:bf:33:b7:69:3f:1c:9a:58:64:b7:
38:85:71:5d:e6:b9:b7:fb:e5:30:0d:26:69:cc:5e:f3:7a:a1:
13:5a:17:5c:15:b9:57:b5:76:e0:f6:62:19:4b:de:97:51:0f:
93:05:29:43:6e:5b:94:23:2d:63:ba:8e:db:b2:a8:45:8f:fc:
c9:2f:d1:8f:2c:54:76:8b:7d:e6:77:83:a0:5e:7d:e8:73:39:
d6:f5:5e:94:f1:89:30:06:c4:00:95:ee:fa:57:ee:bc:01:c7:
c4:c0:7d:75:7e:74:d7:fe:fc:50:cc:a4:55:41:35:cb:14:20:
3d:6c:17:cd:ce:3a:30:4b:51:e2:9c:a2:48:a9:4a:35:f5:ce:
35:7a:3e:9e:d2:aa:d2:8b:f1:c4:3f:08:4a:03:b6:3c:6a:05:
a2:ac:d3:9e:d5:18:7c:dd:92:ee:1d:95:bc:67:10:95:70:12:
44:3c:b6:40:1b:39:a1:7c:47:81:52:6e:85:ef:4d:ad:5a:a2:
8d:f4:6c:96:1d:be:95:90:a4:c5:26:8a:5b:75:0b:fa:d6:8e:
f4:f4:dc:e1:5b:97:cd:c9:3c:6e:00:39:c2:9e:8b:92:db:8b:
54:c8:9c:ad:73:77:74:5f:ad:6c:f7:da:c4:b5:02:4b:b0:dc:
e9:55:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:29:37 2026 by rpki-client