Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: mssmIAGSHksTlRmKYegETl+UrMvR4lrTFad/8oQIw/I=
Subject key identifier: 00:E3:96:50:A3:78:52:38:B9:CE:94:C5:62:1A:88:82:74:CE:E0:4D
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01A1C4B09EE230F9E6265F2AC1E484E13863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 1231
Signing time: Tue 10 Nov 2026 09:01:11 +0000
Manifest this update: Tue 10 Nov 2026 09:01:11 +0000
Manifest next update: Wed 11 Nov 2026 09:01:11 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: skiGOG5ci+A3kUvBtLSJtQaWjV97uVPK6Y3yY9wYWKw=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b0:9e:e2:30:f9:e6:26:5f:2a:c1:e4:84:e1:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Nov 10 09:01:11 2026 GMT
Not After : Nov 11 09:01:11 2026 GMT
Subject: CN=00e39650a3785238b9ce94c5621a888274cee04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:f8:80:7b:f9:32:5d:b6:41:94:1e:16:25:
55:2f:62:bf:ad:f1:9e:6d:73:36:ba:7d:17:05:af:
74:33:8e:67:83:03:47:0b:c7:ce:92:4f:23:fc:3b:
e3:18:ef:6e:ae:8a:b9:75:31:36:0f:d7:d6:df:c1:
4a:08:72:88:f7:08:ce:0f:5a:e9:ad:04:bd:90:97:
23:9f:f5:cd:4f:e2:72:13:60:c5:e6:7a:26:bf:1d:
76:62:10:74:94:bb:5f:95:e1:cb:52:68:19:32:7f:
75:09:00:e1:c5:b2:0d:5c:3a:dd:bd:15:73:89:55:
78:aa:7e:86:37:8f:b2:07:a7:f5:d3:5e:d6:52:6a:
77:11:d9:5a:d9:8d:11:93:1c:9b:ce:a2:41:a8:7c:
29:eb:49:84:cc:37:00:56:4f:56:57:c6:f8:c7:79:
fc:73:ab:a9:3f:b3:75:c3:73:8a:f0:5a:62:f0:44:
33:20:41:6b:6e:9f:4f:f3:ac:32:c0:9e:7c:48:5d:
40:b4:3d:4d:51:04:c4:eb:ac:4a:e1:45:b9:60:98:
8e:7c:89:f6:87:1f:34:6d:1d:dc:8e:0f:71:c7:e7:
b0:de:e1:5b:07:15:43:2f:29:93:24:81:aa:ea:69:
d7:e3:c8:02:6f:0e:4c:a5:48:e4:31:12:d9:0f:d3:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:96:50:A3:78:52:38:B9:CE:94:C5:62:1A:88:82:74:CE:E0:4D
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ae:60:6a:a5:ef:45:c6:2c:ea:ce:15:47:07:f1:01:0c:67:
05:57:2a:f8:eb:7f:e5:67:73:81:df:08:0d:0d:98:87:97:38:
b3:c7:42:24:86:f9:e0:28:4f:92:72:27:fe:fa:95:c5:8c:c6:
85:bd:14:04:8c:08:73:c7:6a:1d:0c:b9:ea:c7:fa:44:36:65:
73:14:d5:c4:c8:b8:15:22:7c:5c:f0:f3:55:74:b3:a1:a0:73:
7e:16:ea:ae:53:ac:5c:8c:be:ae:5f:2b:14:ff:bd:d4:06:87:
b3:aa:9a:8f:3c:bf:db:39:66:ce:d1:bc:39:6b:b5:76:37:f4:
00:d0:e6:c3:69:c4:ca:1d:5d:47:b3:ab:fb:1e:1c:e1:32:ac:
e6:34:d5:c8:37:68:24:bb:ec:3f:07:60:5f:99:04:04:fc:a6:
e6:a7:d9:5c:19:9c:13:c3:6f:7d:b6:d0:2f:a2:30:0b:d2:db:
0b:c4:8b:9e:fa:59:0c:73:55:0e:fa:c4:52:ad:f2:a9:0d:fa:
e3:2b:29:18:53:ce:f3:15:73:a5:9b:98:b4:1c:4e:3d:ef:be:
15:d9:3a:c2:9c:6d:d8:5e:44:a7:8e:84:ab:ee:ba:6e:65:22:
77:2c:ff:65:0e:b8:05:e5:4b:b6:cf:9f:df:47:fd:dd:60:ff:
61:17:91:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:44:36 2026 by rpki-client