Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: rtHcqDWJL4RBuYuhaUa1uSF/akTUwu7FgaeZDkRKgfo=
Subject key identifier: 8C:A4:D4:70:92:13:07:85:D6:E3:67:7D:1D:0E:07:B8:EB:77:CB:90
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01A13ECB897BB63173E00922D0081032A55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 09:01:28 +0000
Manifest this update: Thu 15 Oct 2026 09:01:28 +0000
Manifest next update: Fri 16 Oct 2026 09:01:28 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: hpD6UucL6BwlRBxLkoowk1jNICciP2NQYLXuSnWACJ8=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:89:7b:b6:31:73:e0:09:22:d0:08:10:32:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Oct 15 09:01:28 2026 GMT
Not After : Oct 16 09:01:28 2026 GMT
Subject: CN=8ca4d47092130785d6e3677d1d0e07b8eb77cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:57:2e:c2:d1:d6:07:61:25:32:fe:08:41:e7:
96:5a:c8:94:f9:2e:21:d2:8e:0a:52:7a:65:38:e7:
48:91:be:aa:31:cf:1a:ec:14:77:37:b2:c1:a0:b2:
df:82:b6:72:88:23:3f:c2:7f:0a:11:3b:07:38:c1:
2d:68:b3:6a:3c:28:20:f7:76:ed:e0:53:6a:e5:e1:
65:f3:3f:ff:5b:05:bb:c1:27:54:78:34:98:86:64:
15:f7:5b:f4:05:54:d0:63:2c:79:80:3a:47:31:65:
c2:e8:81:c3:ac:5f:ee:64:79:95:72:a2:14:74:73:
25:67:f7:a6:a5:28:ef:e8:41:0d:76:e5:d8:03:0e:
d9:3a:78:f5:f4:35:82:17:b3:7d:98:28:35:c8:70:
82:b1:7d:01:74:3a:5f:f2:e6:88:e7:b6:67:12:ed:
fe:63:07:ee:b8:7d:80:0c:b8:73:e3:05:f2:ad:f9:
9b:f2:21:1e:ff:69:3a:f6:33:2f:24:95:ee:bf:48:
dc:e6:06:f0:18:af:60:c7:29:2a:62:5b:69:17:bd:
28:67:ab:48:f3:4d:22:b6:9e:6a:31:4d:7f:40:d0:
7b:7a:97:a1:ae:02:a6:80:9b:ae:b9:40:e9:b7:97:
84:44:0d:cf:dc:ed:24:c2:76:cc:dd:46:6a:90:4f:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:D4:70:92:13:07:85:D6:E3:67:7D:1D:0E:07:B8:EB:77:CB:90
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:d0:04:84:36:1f:c3:d6:51:67:1c:59:fd:08:4f:17:bc:
5c:08:54:82:ac:83:ee:27:e2:c9:76:4f:56:8d:9d:69:d7:37:
9f:15:d4:f2:4a:00:8e:f0:0e:30:c5:9a:84:f6:ac:d9:c4:1c:
22:48:f2:62:93:22:88:08:dd:2b:19:2b:de:69:38:b7:99:aa:
b3:dc:93:76:0e:68:31:e1:c3:d4:bd:45:f2:2c:31:37:d0:64:
80:fe:c2:60:2a:bb:e5:15:5e:78:f4:dd:07:fc:cb:35:34:c3:
c8:69:c5:65:5a:e2:4f:df:c4:62:77:a0:fc:50:1f:47:d2:b9:
0b:06:3b:a0:df:d8:b0:a2:6d:56:88:27:49:70:e2:8c:96:46:
31:6d:3a:c4:91:95:ed:f5:40:43:1c:a9:5d:2d:df:19:76:2d:
f1:bd:12:cf:89:80:6d:3d:09:c0:ba:06:89:e4:31:c7:d8:a4:
ea:06:94:e4:f9:6b:62:ef:1b:d5:ba:de:89:f3:c3:61:15:66:
fb:32:d7:55:ee:e2:61:20:53:35:81:41:70:3a:57:67:c1:ca:
b5:e2:8a:77:77:4d:96:97:58:4a:85:b5:8d:35:a3:9c:d0:1f:
b3:f8:e3:4a:a0:70:82:5e:93:f4:7f:75:a9:ee:d0:eb:21:5c:
83:28:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:32 2026 by rpki-client