Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: tkHRWAFpSETLc0NgfvpgAMaxLszZLOpq5gbSGhYQl6E=
Subject key identifier: 4C:CE:C5:49:87:15:9D:D8:85:A1:22:4F:67:65:FE:4D:5C:99:29:CE
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 01A0C5C54C9B8C04CDD45C9A707F3EDDB124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 10D1
Signing time: Mon 21 Sep 2026 21:00:36 +0000
Manifest this update: Mon 21 Sep 2026 21:00:36 +0000
Manifest next update: Tue 22 Sep 2026 21:00:36 +0000
Files and hashes: 1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: LlLDAGgPE+neQ4jH52TnHIdRjppbuatKsdjsV2UmbxM=)
2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:4c:9b:8c:04:cd:d4:5c:9a:70:7f:3e:dd:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Sep 21 21:00:36 2026 GMT
Not After : Sep 22 21:00:36 2026 GMT
Subject: CN=4ccec54987159dd885a1224f6765fe4d5c9929ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:7e:57:ea:6e:43:e9:86:68:06:f4:9a:8b:
12:9e:3d:56:ef:f6:d4:3f:60:f2:35:89:73:07:c3:
14:cf:9a:9b:19:01:33:3a:1b:0b:b7:ce:b7:bb:2a:
1c:25:6c:79:ef:2c:70:f6:38:bc:99:63:d8:6b:94:
ee:e1:60:14:97:0e:4f:b2:e8:e1:c4:b1:1c:04:dd:
6d:b7:fe:ed:36:0e:6d:47:2b:10:fd:a3:d9:97:38:
f0:cf:25:2b:07:72:0d:db:d9:ad:04:a3:0b:bb:91:
57:0a:62:b4:33:c9:8e:db:de:c1:ef:6c:7b:15:b0:
e0:9b:2a:6a:1f:0b:df:4c:80:0b:41:ca:98:06:8b:
d9:c8:4b:55:2e:d4:9a:d3:1d:27:d2:e5:cc:7a:21:
df:05:98:81:da:c5:97:b0:4e:3d:07:4f:f4:b9:79:
81:be:88:1d:c2:bd:16:d7:2c:66:16:99:29:2f:36:
0c:01:98:77:ed:aa:95:e3:f4:f2:ab:7c:ec:6c:4c:
9c:f0:da:f7:78:a6:2e:bb:b8:4b:8e:89:45:09:61:
21:39:9b:ff:73:92:bb:51:2c:1b:60:0d:35:1f:45:
c2:4e:68:b2:17:48:6e:87:6d:b6:89:65:cf:3d:95:
c8:2c:05:35:29:03:71:fe:53:71:82:6d:c7:a3:63:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:C5:49:87:15:9D:D8:85:A1:22:4F:67:65:FE:4D:5C:99:29:CE
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:61:7b:19:6d:63:64:6c:ce:b8:5f:66:76:53:bb:71:64:
2b:89:7d:0d:79:39:be:c5:cd:57:53:0f:33:7d:70:45:22:bb:
eb:c9:0d:37:a6:cb:54:8e:2f:1b:24:83:9a:4f:4c:ad:79:0c:
c5:8f:98:e6:b2:a9:4c:ce:9a:9c:12:07:c2:1e:17:79:76:f9:
6a:75:0e:df:a7:07:91:cd:1e:fd:a6:00:f2:f6:1b:ef:a9:ba:
6d:25:5b:f0:38:d0:ee:52:19:a9:fc:f2:e5:1f:17:ae:1c:e9:
d4:93:d6:48:6a:ce:53:c6:0a:19:e4:67:65:7b:4f:10:10:dd:
7b:b4:2b:44:c1:2e:37:1e:13:17:10:57:61:cc:df:ac:32:0a:
4a:4b:87:76:61:a0:ad:58:be:46:49:8c:a0:84:b1:39:0f:c2:
b9:e2:ef:f2:76:cf:1a:01:d2:81:86:85:df:57:fb:fd:53:f0:
d7:79:ec:96:5d:ce:b9:16:c9:a1:39:36:a5:bb:cd:c4:bb:58:
db:0d:1c:34:7b:90:c3:d3:56:8a:ba:dc:b1:5f:21:4e:5d:3f:
4d:53:92:c6:09:6e:45:c5:6f:a1:ec:e6:30:0c:d5:c1:69:d2:
7d:a0:72:50:a8:8b:e7:ae:cf:0a:9f:aa:22:63:ad:7b:00:74:
b5:41:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:22:03 2026 by rpki-client