Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File: 2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier: 4Tf1QrTcsTk5cIK5AbyHP/iJclcQYIqZOVJyQlHDIv0=
Subject key identifier: A6:01:A4:18:7D:DA:C9:6A:65:A9:43:FE:62:35:5D:7C:38:11:7F:E2
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer: /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial: 01A000CA5D5BC7A0223E8454DADE13645408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:00:57 +0000
Manifest this update: Fri 14 Aug 2026 15:00:57 +0000
Manifest next update: Sat 15 Aug 2026 15:00:57 +0000
Files and hashes: 1: 1-BTuYEiDE2mEIP2dyXdE1PSMv3c.roa (hash: tBxS565NzZV2f/vbdXm3F39V84JJovJ6zXMOf+itJ6Q=)
2: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: JDiinuz89n9brS1lm04qt27X/hFaKyREAxUeCqVkm5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:5d:5b:c7:a0:22:3e:84:54:da:de:13:64:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Validity
Not Before: Aug 14 15:00:57 2026 GMT
Not After : Aug 15 15:00:57 2026 GMT
Subject: CN=a601a4187ddac96a65a943fe62355d7c38117fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:4f:2c:cb:49:3c:37:fc:9a:77:f8:2f:6e:
c8:d6:cc:4c:4d:3a:b1:0e:fb:40:f5:2f:46:5c:8e:
9e:79:62:58:71:31:fa:57:8b:49:88:61:b7:db:67:
ec:eb:e8:f8:84:bc:d8:26:2b:f8:f8:fa:b8:c1:c8:
37:84:1a:ec:d3:45:17:ee:11:43:8a:5c:f5:15:30:
cf:25:53:fb:99:3e:ba:1f:0d:f9:51:39:20:e0:ec:
aa:d7:02:08:f5:4e:58:08:1c:a3:b7:a1:34:a0:83:
b3:c5:65:a9:9d:40:f3:00:17:b2:6d:ff:1d:19:4b:
0c:ea:82:04:db:93:02:8c:74:27:29:97:0a:bb:05:
e9:e6:eb:83:98:0d:15:00:f1:8a:46:80:e3:40:73:
ea:7b:bc:d9:da:f4:59:d4:e0:4a:e9:b7:4c:ce:f5:
9d:3c:9a:10:87:00:0a:77:58:57:58:8c:97:41:25:
e0:f5:68:c0:7d:d7:05:f9:aa:15:a5:f1:2e:14:53:
59:dc:08:30:f0:0c:03:a2:f2:e9:ce:b9:d6:b1:04:
37:41:b2:3c:e1:b7:27:8e:90:29:19:bc:e4:69:0f:
74:d8:c1:89:4a:71:a2:ea:91:35:21:94:69:e7:3d:
6c:37:54:9c:dd:f0:89:5f:7f:80:25:b3:b5:68:82:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:A4:18:7D:DA:C9:6A:65:A9:43:FE:62:35:5D:7C:38:11:7F:E2
X509v3 Authority Key Identifier:
keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:12:81:13:a3:9d:d1:fc:d7:d8:d9:1e:cc:d6:05:61:7b:
73:02:be:61:b1:ad:39:a4:95:f8:68:54:20:4e:9c:72:15:5b:
b6:9b:50:b5:17:4d:e6:69:03:21:4e:fc:28:92:5f:b1:47:76:
3e:c7:1d:28:67:a6:ea:fc:59:4a:93:24:ca:c9:0d:e8:79:32:
f6:89:b2:df:38:78:34:1c:c1:55:5e:1e:c6:ab:e5:59:f0:51:
cd:8b:be:2d:c2:35:8f:37:e1:cc:c0:fb:3e:e5:06:66:01:d3:
7d:22:43:6a:54:70:30:7f:db:d9:d9:75:da:52:6e:77:4e:79:
f6:94:2c:ca:e3:7d:b5:49:02:47:a4:47:87:5c:fc:7b:8a:91:
86:45:07:79:50:b0:5a:5b:3b:7d:82:d9:d1:de:4c:53:55:6d:
71:e5:27:47:36:dc:bc:c9:15:b2:e9:19:a8:9e:78:93:31:31:
32:50:a7:18:7a:70:cc:cc:3f:20:37:88:06:3b:2b:1a:6d:f5:
40:59:1a:5d:5d:ce:c5:17:27:ee:50:c1:79:38:6b:f9:35:07:
27:f1:48:7c:fb:9d:ab:d7:3c:30:99:be:a6:b3:00:5e:24:bf:
49:ca:ad:4d:ce:27:1c:b2:40:78:7e:2b:52:cc:19:c8:e9:95:
8b:89:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:43 2026 by rpki-client