Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
File: 2shrTkbnV9HOeo2AfDvNLf2AEHo.mft (raw, json)
Hash identifier: GzqsJ8XLrQa1ApdsQJcTP+H2Iy30Ykb7FboRoZeZ2Hc=
Subject key identifier: E5:39:3D:9D:F2:B9:EE:55:7E:6A:C4:35:34:77:B7:C1:15:79:D5:A9
Authority key identifier: DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
Certificate issuer: /CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Certificate serial: 01A0D0EE0B451AA130E803EEAD88A69CB274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
Manifest number: 8D
Signing time: Thu 24 Sep 2026 01:00:56 +0000
Manifest this update: Thu 24 Sep 2026 01:00:56 +0000
Manifest next update: Fri 25 Sep 2026 01:00:56 +0000
Files and hashes: 1: 2shrTkbnV9HOeo2AfDvNLf2AEHo.crl (hash: P4ltsTcrHCbWO9+HTShhONiP5GOeRBaMB1bP/JuOigY=)
2: ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa (hash: cFakUTOmj1JV5hfxE5yE0hEvYoySNj+UV/6/MHSkYGc=)
3: bf76c_RBoxlQYKBIyUE41s22DZw.asa (hash: tzIsB3gmTmwMB3iO3YI/Je1p9PWZvorFEWv6UfwZj6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:0b:45:1a:a1:30:e8:03:ee:ad:88:a6:9c:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Validity
Not Before: Sep 24 01:00:56 2026 GMT
Not After : Sep 25 01:00:56 2026 GMT
Subject: CN=e5393d9df2b9ee557e6ac4353477b7c11579d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:4e:bf:bb:3d:b5:34:02:35:4e:55:1d:32:
1b:03:f5:db:f0:16:0d:36:b5:cd:a6:c9:28:a7:51:
fd:6b:7b:ce:d6:bd:39:d6:1d:cc:75:97:cb:22:d2:
8c:a0:6b:30:ae:0d:4c:d3:eb:aa:bb:d5:9e:e5:cd:
d5:93:0d:39:01:ed:6f:dc:0b:9b:52:99:11:47:66:
54:12:88:59:24:8c:73:ff:ed:b9:1f:c4:91:b3:63:
40:9a:02:df:f1:ce:1f:1a:38:c5:dd:2d:82:15:2c:
7b:60:64:15:c2:43:0d:3b:b4:73:62:6d:89:c0:44:
96:ad:8e:4d:54:bd:f2:08:82:a8:e2:5c:26:96:0c:
1d:18:f9:fe:1e:01:9b:85:24:8c:b9:b6:72:d8:c9:
88:b1:78:5e:25:53:32:32:88:97:fc:f9:d8:c6:28:
82:c0:85:bf:ac:dd:ac:6d:c7:19:eb:7b:f5:5f:26:
ed:b7:e7:25:b6:4f:85:a6:ca:1d:d3:94:1e:a5:5b:
a4:14:f6:1f:bf:39:fd:c6:df:18:9d:f4:af:c3:54:
8d:ea:6f:a7:75:77:6b:bf:34:3f:b0:41:d6:e3:af:
40:12:92:8c:0c:f8:a6:ac:ea:9a:ca:f6:d3:d4:31:
89:0d:f3:c5:37:8c:d9:ee:35:36:4b:b0:bc:c3:7b:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:3D:9D:F2:B9:EE:55:7E:6A:C4:35:34:77:B7:C1:15:79:D5:A9
X509v3 Authority Key Identifier:
keyid:DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:eb:91:8d:21:52:6e:c2:a8:b3:06:22:ac:ea:9e:57:60:ca:
14:11:69:8b:91:3f:4c:27:0e:df:e3:a1:b1:be:4e:f1:cf:6f:
54:e2:26:90:3a:6f:0d:7e:f6:c3:b0:12:71:3e:2c:5e:27:fb:
37:0a:fe:fc:75:09:04:05:13:22:48:61:49:ee:d2:45:4c:31:
15:51:4b:7a:4e:af:80:15:a1:3e:f6:57:5d:25:5a:96:8c:ee:
de:e1:46:6b:44:46:37:47:3e:9f:99:5f:9b:02:bf:bc:00:8d:
fb:66:47:66:24:5a:63:35:ab:98:85:3a:a7:7d:2c:49:67:5b:
e7:54:11:0d:00:84:ff:a0:de:9d:eb:2f:ca:80:f7:df:6b:d1:
b3:df:1b:20:df:5a:68:5a:f3:94:d7:68:e3:0f:4a:21:4a:63:
89:10:05:79:f9:c3:40:49:6f:5c:92:5f:ee:c2:77:2f:fe:49:
a3:21:5f:98:76:fb:38:31:9f:39:2b:d6:db:29:a9:33:a0:e2:
bc:5d:ec:c2:80:41:8a:0b:8d:b5:ec:d8:d4:5e:00:84:8c:48:
eb:02:56:62:e0:98:7a:4e:67:cb:da:3c:38:f1:6a:b3:cc:e4:
90:03:4d:21:bc:2e:15:e4:ca:50:77:78:17:fd:28:8e:31:cf:
24:83:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:50:44 2026 by rpki-client