Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: jtZH06qJZyLo6psR+ohcMDhnl6eTFpNq+dA7z+F0x/o=
Subject key identifier: F7:71:ED:C2:B8:9E:AE:36:09:2A:EF:96:DC:10:48:E6:4D:C4:4C:EC
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01A1231D194660A6E0FB86048780B73A9A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 00:01:11 +0000
Manifest this update: Sat 10 Oct 2026 00:01:11 +0000
Manifest next update: Sun 11 Oct 2026 00:01:11 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: N50UQaBVj6SVb5fnSbzMewfrUFame9yCNMO4HbN+yjs=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:19:46:60:a6:e0:fb:86:04:87:80:b7:3a:9a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Oct 10 00:01:11 2026 GMT
Not After : Oct 11 00:01:11 2026 GMT
Subject: CN=f771edc2b89eae36092aef96dc1048e64dc44cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:42:38:03:ba:ae:b4:a6:7c:b2:70:ac:be:
da:3a:04:48:5a:e8:a5:dc:08:52:06:61:01:a8:34:
a4:b3:94:26:19:fa:94:dc:af:5c:a4:64:09:36:3f:
2c:cf:af:db:3d:be:63:04:7f:c7:62:6d:76:07:20:
14:19:af:de:37:eb:44:07:80:ba:39:14:57:6d:95:
c1:8f:7e:e0:56:88:7e:a3:de:82:da:78:75:fa:f2:
f9:07:84:0d:3b:6b:50:50:fc:ff:d9:22:65:a9:ac:
b6:80:cf:3e:41:e6:5a:31:d6:4a:71:1c:6b:b2:21:
76:1c:e6:9a:7f:68:79:15:2e:75:53:20:b9:d0:03:
c6:ae:b7:42:6a:e0:72:a1:1e:47:8f:45:cb:05:57:
7a:84:7c:c9:77:5d:4a:c6:b3:95:1f:d3:43:7f:56:
79:62:54:09:07:04:78:83:f0:b1:64:94:ed:42:06:
70:7a:97:2b:9c:e7:ac:32:fb:22:b1:d2:94:c0:3f:
63:e7:ef:ef:8d:a6:8a:ea:8c:23:80:ea:86:65:11:
7f:79:ef:33:7d:58:f8:00:0c:6f:04:f1:d3:94:7e:
1b:9d:1b:f4:15:b9:9e:b3:56:18:5e:ff:3c:98:2e:
6e:e9:b6:73:d5:7e:10:d0:c4:15:46:ee:74:fa:bf:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:ED:C2:B8:9E:AE:36:09:2A:EF:96:DC:10:48:E6:4D:C4:4C:EC
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:62:38:6a:fa:95:ba:67:33:ba:c3:2b:d2:55:91:25:1b:
f4:9e:01:74:30:9a:fb:6f:9f:a2:66:ac:7f:13:2a:76:50:d7:
cd:1e:93:8a:73:9f:5e:a1:ae:ea:ae:60:f4:35:0d:6f:70:07:
38:21:64:7a:e7:75:10:23:4e:9d:72:a4:50:ef:2c:ce:67:ff:
4e:98:41:03:47:5c:6e:d7:a5:cf:c0:0a:06:ee:b1:f6:90:a8:
de:22:33:04:e9:b5:db:6e:55:c2:02:7c:55:10:b1:1f:25:b7:
7b:62:e2:e8:ce:38:02:ad:67:dc:21:09:8e:45:90:02:4b:4a:
67:0c:2a:64:f7:a7:f7:71:6b:a4:87:a2:76:8f:75:ab:e8:89:
fd:4d:76:7b:47:9b:67:11:5e:7c:40:15:f5:00:36:65:8f:d1:
ce:60:93:bf:b8:ce:ca:05:bd:9f:8e:8c:be:5c:e5:92:09:9c:
ee:86:05:f6:65:50:3e:a4:21:3e:d2:3f:4b:26:e9:37:37:13:
1b:92:df:53:05:46:70:3e:00:c8:57:fc:58:58:9e:43:f0:f0:
56:03:a6:ab:ad:50:ed:75:9a:07:dd:d5:8f:4e:5e:b5:31:ec:
0c:1b:13:2c:db:72:4c:95:57:2b:a7:f6:f3:80:8b:30:fe:dd:
a8:e6:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:27:31 2026 by rpki-client