Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: cCB0/DmTCcPLSGVv7dZ5C8anfmHLC4jl/2ARg42kMfQ=
Subject key identifier: F5:10:2C:2A:45:33:58:38:4A:8E:4E:7D:4B:DF:C1:18:90:AC:23:82
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 01A08C7AA903DD32E75A0C83152614F90FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:43 +0000
Manifest this update: Thu 10 Sep 2026 18:00:43 +0000
Manifest next update: Fri 11 Sep 2026 18:00:43 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: qBwllHbkphxJYywW0OKPzo+qzzRw+WS0Rrvo0/N0wQk=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:a9:03:dd:32:e7:5a:0c:83:15:26:14:f9:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Sep 10 18:00:43 2026 GMT
Not After : Sep 11 18:00:43 2026 GMT
Subject: CN=f5102c2a453358384a8e4e7d4bdfc11890ac2382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:78:62:64:96:04:3e:69:9b:37:0e:b5:51:
b9:6b:fd:1c:1d:b1:c3:19:a8:5b:9b:c1:1e:d7:35:
d3:a6:9c:53:76:75:5b:f7:24:b8:6f:f1:9a:93:c6:
e9:29:51:6b:f9:d7:08:f7:6f:57:75:10:40:9c:19:
8b:fe:56:6b:a8:59:6d:64:97:66:3e:8a:e5:2f:59:
34:81:b2:f2:73:9a:96:40:5b:03:5c:66:6f:a8:0d:
2c:e9:97:eb:4a:a2:51:0d:91:fd:64:00:2d:99:57:
79:52:4d:fe:a3:cf:d2:ea:31:c3:bb:2c:80:6e:bc:
0d:95:6b:ca:23:5d:43:fe:fa:6a:6a:f5:da:24:f1:
56:08:5e:69:ff:22:03:cf:ee:91:58:02:9e:51:a2:
63:23:2e:fb:c0:09:62:b6:f9:d6:11:8f:60:6d:ae:
b7:fe:20:01:f2:66:b6:2a:a7:58:16:9f:76:19:9c:
1b:22:44:c8:bb:ae:8c:a1:21:6c:e9:ed:72:51:01:
c2:9a:f1:0f:7a:e6:0d:73:a2:5a:55:f5:bb:ed:ee:
4f:70:e4:ef:3c:59:c5:2b:61:ce:a0:de:7f:d2:e8:
4a:fa:69:35:8a:21:23:1e:d8:6f:75:35:86:fc:04:
f9:ed:02:59:fc:a9:d4:8b:b8:05:de:10:b0:ae:7f:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:2C:2A:45:33:58:38:4A:8E:4E:7D:4B:DF:C1:18:90:AC:23:82
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:15:be:31:c8:bd:e1:97:b3:3b:1a:6a:3c:0c:1b:15:44:
d0:50:d5:8e:e6:88:b2:9a:9e:5e:27:70:fe:ca:e4:f4:94:92:
28:8b:62:5d:0f:0e:3b:49:0f:3a:f1:9a:a6:17:e3:05:98:d4:
a9:1d:f8:93:ad:43:c3:f3:51:17:ab:e9:eb:e9:b8:df:03:5a:
52:b6:85:76:36:b2:14:2b:b2:82:10:44:dc:7b:df:6e:29:2f:
c8:43:5e:6a:90:8f:62:ab:0e:75:ad:0f:a9:85:c9:73:e4:16:
89:0a:46:9a:30:b8:c9:1b:fe:a0:24:5f:1c:e9:8c:9f:69:8a:
d4:46:f7:3b:69:bc:96:ae:50:63:90:bc:74:37:fd:25:84:ea:
7c:6a:bf:9b:1a:06:6e:ec:81:87:63:6d:21:92:c9:2c:ec:8d:
ea:e9:a7:76:bb:33:50:fd:2c:fb:80:11:78:ce:50:d2:50:1e:
2a:8f:c9:ec:93:f0:6e:e8:64:0d:cf:f4:72:d0:e8:07:a1:fb:
67:1e:41:9f:ac:08:64:6e:ac:f3:5f:90:1b:04:f0:19:3f:7c:
98:08:8d:b1:c3:27:2e:09:c2:3c:76:8f:7a:7c:34:a8:ca:8b:
f6:f1:d1:26:1b:62:27:80:cb:ef:fb:53:93:44:f6:6c:eb:ba:
de:b6:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:31 2026 by rpki-client