Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: j2rPrtCRX4hlg4PmNqShYiGj6M7sD7PWxyCpKTYYEyU=
Subject key identifier: CA:F7:F6:60:D0:B6:C1:BB:5C:A9:04:04:08:07:62:B3:9A:13:7B:96
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 01A0E32B39B0C810877478F49AC11E59CAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 054E
Signing time: Sun 27 Sep 2026 14:00:55 +0000
Manifest this update: Sun 27 Sep 2026 14:00:55 +0000
Manifest next update: Mon 28 Sep 2026 14:00:55 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: HBn8lUjeauW8HaXhS1Hb2tGr1gSk/NJ7VKBU/pr65nc=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:39:b0:c8:10:87:74:78:f4:9a:c1:1e:59:ca:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Sep 27 14:00:55 2026 GMT
Not After : Sep 28 14:00:55 2026 GMT
Subject: CN=caf7f660d0b6c1bb5ca90404080762b39a137b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:ae:67:b7:6f:0b:ff:96:e5:25:81:6b:11:
ac:9c:e7:6b:c5:fa:72:ab:00:0a:d1:55:46:3f:f6:
c9:49:1e:e8:90:32:17:a4:9d:65:e4:73:cb:3c:45:
7c:56:f0:f5:3a:cc:1a:bc:fb:1f:f2:13:3b:5e:0f:
6d:e6:08:0e:99:3c:62:b8:12:36:4e:9a:a9:43:cd:
a3:0f:60:c7:ad:b3:34:44:7b:c6:78:2c:ca:6e:9c:
6d:0a:01:25:b6:23:c8:0b:b2:29:c8:9e:d0:bc:6a:
87:f6:b8:1a:8f:6e:2c:b8:fc:71:f5:7d:c5:5b:30:
b7:0b:73:a0:2f:2d:61:4b:e3:d0:e5:21:40:20:17:
2f:83:91:6c:44:2b:6b:f6:ba:7f:dd:4c:1f:26:84:
7a:1b:d0:ad:7e:99:36:b9:16:e8:4b:a7:44:92:da:
84:96:1f:9a:c7:b2:4c:28:fe:01:eb:08:01:29:5d:
70:e9:c3:f4:65:4f:50:bc:6a:54:28:03:8f:ee:e5:
45:72:ad:21:d6:74:aa:57:22:e1:fe:4b:ee:e9:39:
2c:6e:ec:bc:dc:7d:a5:e9:11:08:e2:4e:a6:e7:e9:
f6:f9:4a:d4:c7:c0:f4:fa:fb:0d:bc:88:c4:6d:2f:
ed:68:9c:31:30:2e:d1:79:12:b1:e8:c7:c6:45:8b:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:F6:60:D0:B6:C1:BB:5C:A9:04:04:08:07:62:B3:9A:13:7B:96
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:1d:f7:16:30:e3:72:73:91:45:2a:eb:a9:6e:63:87:55:
05:2f:32:40:4b:a0:66:e6:af:79:3f:f9:6b:8e:4b:a1:9e:69:
24:e2:05:39:ea:4d:f7:57:00:de:5e:d4:4d:9f:3a:06:ae:4e:
c4:54:9f:de:72:87:0c:74:cc:39:2d:01:91:b1:03:b3:74:df:
4d:69:2d:97:b4:9b:28:cd:df:4c:fc:c4:b5:1f:72:39:3e:58:
7b:cf:2e:92:a3:8a:5b:d5:d9:b7:ed:c4:d8:b3:0a:af:af:eb:
91:4a:a0:0e:18:89:fc:2e:b9:46:c4:89:d9:9e:48:b3:e3:52:
01:37:bc:da:65:17:eb:64:e7:54:6c:21:2e:98:db:49:f3:d9:
2d:ae:25:a0:68:c3:cc:9f:58:c4:df:de:44:86:55:3f:6b:07:
2e:47:9f:54:57:3b:5a:51:02:24:65:ed:63:14:d1:76:4b:71:
7e:0e:03:78:1c:0e:7e:c0:ab:81:3e:c7:a8:7f:32:dd:3e:cb:
1a:7e:1b:79:a6:b6:80:55:cc:8d:f5:db:ae:94:4e:bd:ef:3d:
4c:7f:50:f5:92:10:1e:e4:fe:86:87:12:3b:4e:5c:fd:b2:36:
6d:9f:92:1d:84:b4:04:25:f8:c7:4c:50:f5:ce:fd:7a:cb:73:
a5:24:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:46:33 2026 by rpki-client