
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: 3UziOnITpSqUs/wsX5IDfliGp4ehDHl4ufsmWMPgatE=
Subject key identifier: 6E:EC:0C:CF:9A:7C:C2:B8:D4:C0:1A:A4:0E:FE:B1:EB:6E:3A:7D:DA
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01A0CDEC96182FE0AD5AFFBDAA5DFA380FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 133D
Signing time: Wed 23 Sep 2026 11:00:29 +0000
Manifest this update: Wed 23 Sep 2026 11:00:29 +0000
Manifest next update: Thu 24 Sep 2026 11:00:29 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: ioeZyM8O8X4DGlbOFIo/LStihoNetqWYYe86vxmJTSQ=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:96:18:2f:e0:ad:5a:ff:bd:aa:5d:fa:38:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Sep 23 11:00:29 2026 GMT
Not After : Sep 24 11:00:29 2026 GMT
Subject: CN=6eec0ccf9a7cc2b8d4c01aa40efeb1eb6e3a7dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:c1:8f:34:e0:b7:78:53:0e:25:da:c7:a7:
93:18:27:21:7d:27:5b:80:c0:be:34:70:e9:0a:5f:
62:3c:a2:6e:c3:bb:0a:4a:27:c7:20:4d:cd:43:df:
73:dc:1d:22:22:20:75:51:62:16:b6:d8:73:e5:c8:
24:43:70:c6:0b:5d:16:7e:0a:47:af:2a:f4:b3:02:
96:b5:8d:bf:96:54:60:78:e2:71:ef:57:48:78:e9:
8c:49:91:c9:52:c4:6d:f0:92:1a:08:62:bb:64:a3:
ef:82:f2:23:21:c4:f1:8d:6c:15:36:bd:c8:9d:e4:
03:a7:e7:eb:5f:1b:f0:f0:7c:06:dc:ee:b1:66:77:
57:51:62:dd:19:e4:c1:a7:e2:12:46:00:9a:41:f0:
68:9c:67:8f:8b:cf:4f:19:78:f2:8a:93:d6:7c:fb:
1b:dd:45:f1:c6:bb:74:0b:08:97:9b:44:9c:77:45:
f7:4a:ca:1e:b2:33:54:d2:cc:cb:47:f3:f6:83:c9:
2c:84:00:81:d5:d1:5e:b0:0f:e3:1c:7f:4a:4f:c9:
75:de:c5:fc:26:ce:7d:31:ac:67:38:76:b6:3d:39:
2d:5f:af:10:62:cc:cc:64:df:11:fa:12:8c:c9:87:
92:19:06:2d:0b:d4:c0:16:58:2d:c1:48:cf:c1:a9:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:0C:CF:9A:7C:C2:B8:D4:C0:1A:A4:0E:FE:B1:EB:6E:3A:7D:DA
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:4e:ae:f6:13:6b:8f:bc:de:f3:8f:ee:a6:b3:b2:63:29:
55:3c:96:02:cd:a1:8b:bc:00:f5:be:9a:95:7e:d0:d7:ea:f2:
29:41:e5:df:a0:6b:15:6d:6f:d8:3e:b4:7d:88:22:04:b9:6d:
1c:c8:c9:9a:bb:1e:4f:34:be:a5:fa:97:6c:00:5a:21:b6:08:
85:42:a5:2c:c9:29:01:5e:ac:68:6d:25:3a:09:da:64:05:cf:
3c:67:db:c7:c6:d4:47:db:c6:2f:2f:4f:18:66:d4:37:77:26:
00:cb:42:70:4a:60:b9:1c:4e:93:0b:51:e3:4f:c0:9d:ce:e8:
3a:d7:e7:94:42:a3:ac:e2:ce:eb:f7:c6:d3:e3:53:19:79:8c:
bd:d2:46:58:53:4e:db:24:33:c5:60:45:81:7d:f5:09:ea:a5:
60:2a:e3:95:da:10:91:d7:7a:81:77:58:7e:af:ae:79:7b:8d:
54:1b:22:db:6b:3a:f6:ac:78:7b:41:57:88:b1:d0:1d:01:4a:
f8:64:95:2c:71:4d:62:47:45:97:61:93:25:56:23:88:22:eb:
10:62:3d:da:21:44:f5:d7:af:c9:73:82:20:c0:c9:c5:3a:3c:
54:16:bc:9f:4e:a0:eb:20:ca:77:e4:ff:5d:05:df:55:52:d2:
95:db:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:01:25 2026 by rpki-client