Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: TPM2YGoNIkVwTR3AbLTk08DrQfLMSRvpOXq/MkrGC4g=
Subject key identifier: A8:BC:D0:F0:73:A1:54:3D:AD:D1:49:7F:78:07:B2:F7:16:2D:F0:90
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01A06EA7DCA791BE8576EDDA62D38CA35FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 23:01:29 +0000
Manifest this update: Fri 04 Sep 2026 23:01:29 +0000
Manifest next update: Sat 05 Sep 2026 23:01:29 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 4XlzMJqLO6dXpraQILNupYyDL7U4HccgFn8BhyZA7VY=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:dc:a7:91:be:85:76:ed:da:62:d3:8c:a3:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Sep 4 23:01:29 2026 GMT
Not After : Sep 5 23:01:29 2026 GMT
Subject: CN=a8bcd0f073a1543dadd1497f7807b2f7162df090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:23:34:dd:23:8b:bb:77:3c:b4:d4:c6:0c:
b0:91:08:c9:ff:96:a1:b0:09:24:79:6e:f0:60:f9:
78:6a:55:d8:f3:12:ac:31:9c:ec:be:f3:1b:3a:62:
58:09:d0:55:1d:1e:c4:88:aa:76:99:90:57:54:5e:
c7:0a:af:b1:df:48:8a:21:02:1d:87:58:66:74:a4:
a1:82:00:26:2d:c6:53:ab:f9:ac:1e:6f:65:b7:3e:
35:2e:cb:74:ee:c5:d1:b4:28:c4:b2:06:b4:19:f1:
f7:57:aa:23:81:c2:51:c8:67:e3:ce:34:3d:bf:9a:
78:af:0a:4f:fc:8a:d8:4b:1e:2e:62:c7:49:2f:13:
31:07:63:da:38:59:4f:39:02:2b:c8:4e:6e:f9:72:
a3:df:0d:ad:06:7c:a7:3f:99:c7:ed:18:0d:e2:29:
dd:a1:60:e8:33:9b:5f:ce:c5:ba:e0:cd:3d:2c:c8:
04:96:03:87:c9:92:33:65:dc:f8:a6:cf:82:f7:9f:
38:08:e0:80:27:b7:05:61:9d:d2:db:c1:dc:41:16:
51:64:8a:53:a2:f2:be:1d:3e:a3:56:66:c1:2e:1c:
35:3a:0b:13:a2:a7:33:97:9b:3d:dd:2e:16:c9:08:
a6:58:ee:4b:f6:c1:23:83:90:28:14:d6:6f:73:45:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:D0:F0:73:A1:54:3D:AD:D1:49:7F:78:07:B2:F7:16:2D:F0:90
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:66:52:95:bd:b0:4a:68:e9:1a:03:23:12:46:90:f8:a5:a4:
03:41:0d:ff:5a:30:d7:33:b4:91:75:ff:01:6f:93:9b:2b:fd:
bc:b3:5c:68:6d:6a:6e:2e:97:63:4a:6a:46:4c:c6:86:1c:cb:
1a:89:68:68:5f:f0:35:d6:f5:09:65:5f:05:15:d7:e1:a0:32:
75:a1:e1:c1:b1:e2:c3:99:a3:66:ea:4c:18:63:45:ab:b0:64:
86:fb:da:1b:6b:84:a6:b9:1d:c2:1d:ec:e1:98:d5:db:4f:af:
b2:0d:84:17:79:fd:fd:20:2a:f6:03:9a:98:7c:ad:c7:80:5a:
db:df:a2:5f:d4:66:10:f3:41:fb:ce:76:94:a1:26:cb:cc:2b:
ab:a4:1a:68:d4:a6:fa:f3:0e:99:5d:fe:34:8e:2e:f2:43:4f:
0a:36:b2:62:84:51:48:dd:e6:1f:cc:07:6c:69:8b:1b:3d:58:
84:37:fb:f0:e8:29:91:6d:80:ca:b7:5b:46:30:5c:82:97:84:
99:b9:75:44:d3:72:ce:9d:e7:b2:7b:7a:4a:15:b3:e3:d6:c9:
a3:7d:ba:bb:1a:bf:9c:05:a2:e0:cb:6f:67:86:79:0a:d2:af:
b7:ff:ff:19:00:3e:c5:fc:d4:f5:8a:7e:53:43:1e:df:4d:a7:
f7:16:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:21:37 2026 by rpki-client