Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: PwjI42/hdC8SeyYEeVbQfXXHDN9fGufKZiOhtUR260c=
Subject key identifier: 15:A1:61:38:66:8C:B1:DE:66:69:DE:AD:AE:2F:32:48:C0:73:22:34
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01A0C444C0C2E57BDBBCD90DFE0F2996703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 14:00:35 +0000
Manifest this update: Mon 21 Sep 2026 14:00:35 +0000
Manifest next update: Tue 22 Sep 2026 14:00:35 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: stm4rNX/OvxGtQLx2HJa8arO/ueKEmtyrZXtKjqjK7w=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:c0:c2:e5:7b:db:bc:d9:0d:fe:0f:29:96:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Sep 21 14:00:35 2026 GMT
Not After : Sep 22 14:00:35 2026 GMT
Subject: CN=15a16138668cb1de6669deadae2f3248c0732234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:07:20:32:85:0c:44:4f:d1:ef:d4:cf:4e:
31:a3:f1:2f:27:33:40:48:14:8a:65:bc:2a:f6:c0:
58:39:a6:96:f0:6d:97:15:9e:11:99:3b:e3:33:27:
25:2a:26:b4:ae:c9:f7:ec:fc:36:0c:ac:ec:39:37:
87:52:3a:95:e4:bb:b5:44:b5:2e:ac:36:7d:97:33:
ea:80:0f:e9:d5:c4:54:37:d7:21:85:74:83:0a:40:
b8:d6:83:fc:23:d6:77:1d:48:f4:c0:a7:d2:0f:69:
ba:6b:67:2a:a5:61:62:78:97:d8:96:18:bf:85:18:
0f:e3:e1:28:5e:1d:e5:7f:92:49:69:c4:f0:72:56:
e6:58:5f:25:5e:bc:36:17:54:ae:69:ff:99:00:a6:
9b:39:fc:31:8b:8f:b3:02:0f:58:c9:1e:66:78:2a:
93:03:73:1e:0f:95:2b:4d:93:82:51:64:bb:7a:fa:
07:2e:4b:d2:06:5f:d7:37:26:28:92:ce:b3:fc:5b:
3b:a4:4b:60:c6:76:b9:65:91:94:6d:0a:9a:b6:28:
df:c3:f2:fb:fa:f7:5e:b4:dd:4c:e2:4d:d1:c0:fc:
fe:6c:67:23:1f:4c:78:b4:5a:43:57:91:3f:1c:92:
62:bb:dc:55:78:20:6d:73:1b:bb:1d:5c:b3:7e:4b:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:61:38:66:8C:B1:DE:66:69:DE:AD:AE:2F:32:48:C0:73:22:34
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:d8:70:22:00:37:96:6c:82:25:c5:08:67:0b:5c:55:e4:
9a:80:99:72:50:97:f0:c4:62:87:e9:7d:37:50:0d:1b:22:d7:
71:62:67:60:60:8b:8c:47:46:73:d6:f1:94:6e:1b:fa:c0:94:
ca:fd:49:80:a2:7c:a8:1e:bd:3f:24:b9:26:6d:0f:2f:67:9e:
0d:67:84:15:b9:ed:72:04:37:96:26:89:4b:69:9a:15:66:41:
2a:67:fb:c7:69:03:8a:9b:99:c7:7a:de:2a:2a:0f:a1:e9:6d:
c8:3a:ab:7f:b0:c0:b1:68:61:2c:a5:84:a5:dd:9e:7a:51:8f:
6f:d9:67:d1:e8:7f:39:28:2b:9c:8b:27:7c:60:73:b7:68:f0:
1b:c2:ff:4b:8a:41:ca:0c:37:6a:c1:56:c3:03:72:d8:ee:0b:
af:25:6b:4d:d7:89:c4:9c:a0:57:97:96:de:e1:6e:1c:e3:4a:
1c:da:90:e6:56:d3:9d:8b:59:b9:c9:fa:79:b9:32:8f:6f:05:
2c:a6:12:0f:66:d3:d1:07:8a:7a:ae:05:c7:3d:38:01:fd:97:
85:3d:30:1f:fd:06:5f:d1:cd:eb:aa:10:c3:5d:72:02:ae:e2:
fb:88:d3:a2:4b:70:16:04:f4:ae:3b:85:30:07:63:92:d9:88:
23:dc:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:53:21 2026 by rpki-client