Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: WtXWIrvQxKmCsqcr/Lz+W8KbWKv+FFrtePT5llaCCJY=
Subject key identifier: 32:DF:4B:62:B0:AD:04:2D:23:DA:A1:38:52:E7:9C:0E:34:D9:FB:BA
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01A0016F572B0655C7D9436FA0107EFDAF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 18:01:09 +0000
Manifest this update: Fri 14 Aug 2026 18:01:09 +0000
Manifest next update: Sat 15 Aug 2026 18:01:09 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: KbO4viv3cp50abDioUg/1Frb/wieJkDnKKmj0THmae4=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:57:2b:06:55:c7:d9:43:6f:a0:10:7e:fd:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Aug 14 18:01:09 2026 GMT
Not After : Aug 15 18:01:09 2026 GMT
Subject: CN=32df4b62b0ad042d23daa13852e79c0e34d9fbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:01:ff:96:c8:d8:70:a2:c5:5d:7f:b5:82:
02:e0:2e:9f:02:23:9c:a1:95:13:30:25:f3:c4:34:
48:07:f2:42:31:34:f5:ce:ed:20:c9:75:5a:38:55:
d3:c6:84:4c:a9:02:81:bf:a4:ae:6a:1f:70:e1:f9:
f7:04:fd:76:17:8c:eb:03:15:a4:c8:b8:73:b7:ec:
7c:62:00:6c:f0:be:3d:16:4b:f0:b2:fc:b2:db:c0:
85:c7:35:8c:e6:e4:e1:52:32:d8:8b:da:4a:6e:61:
2c:f7:a0:09:00:2c:27:20:59:3f:4e:cb:5e:b0:19:
91:25:b4:f8:e6:13:f5:d3:c0:0c:da:6f:13:98:44:
07:bd:cb:70:a3:72:3d:26:b7:d7:db:7e:04:57:e8:
8b:3e:6c:c0:83:be:c4:6a:7c:55:9c:d4:fa:e3:4d:
82:86:ed:cb:32:57:a5:9c:aa:b6:8e:b4:ba:d5:5b:
d7:33:ce:73:ed:8c:6f:71:da:a2:29:0f:3f:73:89:
ec:3b:c0:b0:aa:81:1b:9e:dc:8f:2e:1f:ed:98:d8:
ee:a4:13:8b:f5:29:3b:d6:4e:df:21:90:82:5c:af:
8e:1d:2b:28:de:9e:88:c2:6b:19:6b:50:8c:fd:70:
0f:8e:e3:1e:44:7f:89:5b:f2:28:68:16:eb:38:9c:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:4B:62:B0:AD:04:2D:23:DA:A1:38:52:E7:9C:0E:34:D9:FB:BA
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6e:70:72:bc:ea:61:ef:a7:c7:ad:c7:00:a0:fe:d3:20:59:
af:f1:f3:b3:bc:6b:82:9f:93:cd:2b:07:38:56:e0:90:d5:f3:
02:bb:25:88:58:94:8d:36:8a:47:69:cf:e0:a2:91:b1:1d:43:
e8:5d:c0:67:2e:cc:ad:f5:dd:72:50:21:85:26:db:36:ad:10:
a7:dc:da:aa:4d:1c:28:d1:4a:94:7e:02:a6:f8:a5:ab:8e:7a:
f9:b2:da:4f:00:49:e7:a7:22:b5:84:0e:a4:69:ed:bb:a7:77:
4c:8a:98:5f:78:ce:5d:0d:27:5b:59:6b:32:b6:d4:2f:2b:e7:
53:2d:b3:7d:b1:73:76:f3:9f:05:c0:ca:86:99:44:e2:d5:4b:
ab:e5:38:b9:24:3d:6e:31:85:1c:16:ac:f1:ef:41:76:36:d1:
cc:b0:5b:11:a5:11:00:69:42:be:08:58:a8:27:9a:47:d3:2a:
8c:3e:46:06:e5:ec:c9:c1:7b:a1:d0:ed:47:87:06:c8:16:eb:
36:79:0e:94:65:f8:8c:7a:9f:dd:a7:62:22:7e:ce:a4:6f:fc:
ef:f9:1c:5d:49:c1:28:bb:e7:53:06:dc:55:bc:e3:7a:60:ab:
a9:e7:a4:e5:e5:3f:fa:c8:9c:01:6d:ef:87:b2:8a:20:ba:ff:
92:00:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:07 2026 by rpki-client