Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: bzeqSw7mzvnAD66fEAIKL2BAwbE6n6TtIKdRL5e253U=
Subject key identifier: C8:E6:0C:D3:FA:1E:81:4D:52:65:5F:CB:24:24:F3:C2:83:36:CA:82
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01A0C1E88DE984FFC2E868C6DEB58707418A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 11AB
Signing time: Mon 21 Sep 2026 03:00:38 +0000
Manifest this update: Mon 21 Sep 2026 03:00:38 +0000
Manifest next update: Tue 22 Sep 2026 03:00:38 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: jsC8XTr8YEDC+Xy+VbbLzMz/qJNgeD7zoqax3Eq9jBU=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:8d:e9:84:ff:c2:e8:68:c6:de:b5:87:07:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Sep 21 03:00:38 2026 GMT
Not After : Sep 22 03:00:38 2026 GMT
Subject: CN=c8e60cd3fa1e814d52655fcb2424f3c28336ca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:5e:0e:b1:11:4c:50:07:30:49:b4:eb:7b:
0e:b4:f1:fa:78:3a:4a:d5:63:97:00:83:97:f4:42:
2a:f4:f2:ef:cf:59:44:db:fb:17:73:24:54:d2:38:
73:c9:d7:fc:af:08:93:09:bc:1c:9f:c1:dd:1e:0c:
fb:f3:f3:88:0c:ef:03:68:7e:07:10:cd:f3:d9:85:
3d:f0:7d:70:93:5e:39:39:d4:d2:78:af:d6:67:f5:
45:11:d4:37:b9:7d:8a:93:4c:23:7d:df:79:b8:31:
41:da:85:06:b0:c0:59:c2:02:94:e8:fc:d8:c5:77:
d7:f7:b7:0d:77:8c:d2:ac:00:52:e3:cb:d1:95:11:
ca:70:95:40:f3:6a:20:62:c0:de:af:86:80:ac:cc:
1d:84:57:13:76:15:75:95:50:6b:f2:65:4c:fa:55:
71:50:67:5d:29:80:fe:bf:46:3b:a3:e4:af:38:88:
3d:e5:e3:6a:b1:a9:7d:77:3b:9a:c3:ed:82:b2:21:
9b:d1:97:95:51:18:15:af:63:b8:94:65:35:90:ab:
9d:34:55:04:ca:b0:fb:31:21:1a:97:7e:9e:33:59:
2d:42:00:1d:ac:be:79:a8:24:27:46:e2:e2:19:ca:
93:a3:5f:c5:b0:a6:d3:2b:30:7d:d7:39:75:4c:be:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:0C:D3:FA:1E:81:4D:52:65:5F:CB:24:24:F3:C2:83:36:CA:82
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:c0:4b:62:1b:d4:19:07:ad:fb:e6:b4:77:b7:79:b5:29:
fe:46:81:cf:21:c3:ab:ff:30:e7:01:c0:5a:ee:9a:8c:bd:5d:
37:22:f1:87:9a:8c:53:bf:b5:ac:3a:41:74:83:ab:60:71:df:
b6:a8:5c:77:49:ca:72:fa:d1:6f:a3:55:b7:5c:51:67:df:a7:
87:9c:65:81:d4:e7:99:f2:65:98:9c:ff:94:74:c6:17:63:99:
9e:d1:34:65:da:d7:b7:eb:eb:e8:9f:16:80:b3:4e:62:84:e9:
01:67:6b:86:f5:23:1b:bd:28:8e:44:3d:05:e1:62:ed:45:63:
9f:1a:8e:70:a4:26:0e:2f:5b:8c:56:c1:8e:3c:56:94:2d:04:
c5:cb:f6:50:47:26:b6:b6:8a:aa:51:c4:a8:40:75:56:2f:90:
5a:51:b6:75:8c:9a:a5:10:14:12:4e:76:c3:b4:5c:16:ce:4e:
e5:5b:80:0f:81:58:03:37:4c:07:fa:a9:3d:b6:1f:85:54:87:
1f:6c:98:0a:c4:46:d0:b6:37:5b:23:1e:64:e7:8c:79:53:42:
e4:57:47:df:ca:09:a9:a8:85:bb:a4:bc:1b:e5:3f:1f:04:1b:
e4:de:91:53:8c:6f:79:ce:59:1a:9c:c0:d7:74:a7:c2:5c:01:
10:f3:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:46:02 2026 by rpki-client