Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: M1XVRuZZbyLJDfMXuQAIjyVF8b4yW31nhK7OSYwMI9s=
Subject key identifier: F0:74:C3:DD:9C:FD:50:41:1F:8A:10:80:10:E0:E5:DB:8B:54:9E:F0
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 01A0BD9DCAA4020ACF3F5B495CBABD21A070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 11F7
Signing time: Sun 20 Sep 2026 07:00:29 +0000
Manifest this update: Sun 20 Sep 2026 07:00:29 +0000
Manifest next update: Mon 21 Sep 2026 07:00:29 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: hq/CC648z/LNxgf7Rcf9ha88x0M2HJMEWgl5d1kPdJQ=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:ca:a4:02:0a:cf:3f:5b:49:5c:ba:bd:21:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Sep 20 07:00:29 2026 GMT
Not After : Sep 21 07:00:29 2026 GMT
Subject: CN=f074c3dd9cfd50411f8a108010e0e5db8b549ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:cb:64:ff:0d:dc:1c:34:49:3c:dd:b6:2f:
97:5f:75:e0:3a:7e:a3:f8:27:c6:e4:6a:95:d2:da:
fc:91:51:b3:c8:d6:01:76:84:d5:81:27:a1:ac:39:
bb:5c:63:f8:d1:19:07:4b:14:aa:e7:7b:51:b4:84:
a8:e4:ae:5d:30:da:61:45:e9:53:39:1d:2f:f0:e6:
1f:a3:12:18:86:e7:3b:5f:63:af:68:5e:b4:df:ff:
c7:0c:07:b0:fb:35:4a:bd:5c:28:f7:c8:6a:ad:3f:
f5:3d:db:0a:4d:b3:5f:1a:fb:08:59:ae:42:45:81:
43:69:fe:86:b4:cf:41:24:dd:3a:cb:19:46:e6:4b:
a2:f0:7b:4f:70:f4:e2:a4:a9:7b:d6:a2:4e:fd:a0:
dd:58:d8:db:86:ed:ed:5e:9f:54:4b:4e:5a:48:a7:
e1:74:1a:df:11:e7:c8:18:53:d8:a5:37:51:df:f9:
bf:ea:66:06:3e:a9:9e:52:77:03:e1:a1:9a:c4:df:
8b:dc:5a:62:66:b6:7d:1e:cd:b5:9c:7f:23:ad:36:
1d:dd:0a:70:91:97:fd:91:1d:e9:0f:6f:01:7b:8e:
b1:cc:0b:15:cd:cc:dc:2d:85:bb:49:12:6d:72:f3:
2e:09:6e:4c:76:4a:c9:a8:ac:bf:b9:71:d8:a7:e1:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:C3:DD:9C:FD:50:41:1F:8A:10:80:10:E0:E5:DB:8B:54:9E:F0
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:c8:72:0d:e9:53:72:dc:eb:85:84:57:0e:7a:dd:44:eb:
4c:46:3a:5c:06:e4:46:35:eb:2c:f1:51:3b:91:e0:d9:b6:9f:
3d:bb:51:06:f6:a5:83:b0:12:2f:02:74:7d:5e:43:04:39:b2:
8a:97:8a:b2:a7:bb:89:07:47:f9:a5:bc:a5:d9:18:a2:11:9c:
79:13:01:c3:c3:bb:97:f9:f6:09:91:87:65:83:02:11:e2:25:
f6:09:cc:55:fb:1f:07:a5:e8:3a:09:50:29:d5:30:34:7a:6a:
b6:5f:2f:03:50:c2:7d:08:91:2e:9b:7f:3c:a9:50:f3:03:b2:
a1:41:13:ac:48:17:22:ce:16:65:91:b8:b8:39:7f:f7:5b:84:
68:c0:89:a0:2a:9a:99:9d:2e:25:3c:2c:8a:78:2c:83:3f:ee:
28:53:a8:d5:35:af:0b:f2:d7:c8:b0:d4:5f:dc:e9:6e:e3:0e:
19:54:77:c0:d5:77:5d:47:3d:66:c0:56:42:50:85:80:a4:dd:
62:c6:1c:e2:22:79:5a:82:24:7a:d4:86:95:94:30:73:5b:11:
c1:5a:27:57:39:47:6f:c1:24:29:df:33:fd:71:b3:fa:a9:fb:
8f:9f:dc:23:94:d7:b6:e4:8b:e2:65:8e:bb:94:1b:4a:0c:3a:
0b:1f:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:33 2026 by rpki-client