Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
File: 2f8DY0XtlWcmR-U2aB82Dy36g_8.mft (raw, json)
Hash identifier: UZWOpCxdP/8HAuD1CJdWGBjc13G3bzu92s17T1pxgRQ=
Subject key identifier: 7D:C0:95:DE:6E:4D:0B:EF:8C:90:18:BC:77:C2:16:9D:39:90:12:E5
Authority key identifier: D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
Certificate issuer: /CN=d9ff036345ed95672647e536681f360f2dfa83ff
Certificate serial: 01A040BC38762C2FCAEC1B531AB24B205F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
Manifest number: AA
Signing time: Thu 27 Aug 2026 01:01:12 +0000
Manifest this update: Thu 27 Aug 2026 01:01:12 +0000
Manifest next update: Fri 28 Aug 2026 01:01:12 +0000
Files and hashes: 1: 2f8DY0XtlWcmR-U2aB82Dy36g_8.crl (hash: kb2nl9CN4WQzBB5AUgF1/27hOOsbP04a+qgCLh0M0so=)
2: It5cbOgz2y72fjZZnZVlVg4gUp4.roa (hash: a450t8uMkdYjk8suu61d1NDEpbQ077pWciP2jMuUUw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:38:76:2c:2f:ca:ec:1b:53:1a:b2:4b:20:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff036345ed95672647e536681f360f2dfa83ff
Validity
Not Before: Aug 27 01:01:12 2026 GMT
Not After : Aug 28 01:01:12 2026 GMT
Subject: CN=7dc095de6e4d0bef8c9018bc77c2169d399012e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:be:bd:96:db:8a:ab:d4:89:16:a3:31:21:14:
8f:b8:7d:85:5c:8c:a3:ce:91:f0:2c:d8:1b:7a:d6:
09:a8:24:cf:49:19:32:95:db:a8:6a:10:55:6b:89:
44:a6:a8:ad:3b:c4:83:fe:6c:4c:52:96:b3:2c:e4:
35:b9:be:fe:4f:ac:e8:54:4b:d8:3d:27:7c:7d:95:
87:19:3c:7c:3e:af:38:32:48:67:b2:23:0d:ba:eb:
41:d1:37:53:93:1a:3a:1e:c5:c8:67:a8:7e:58:5c:
26:99:d5:4d:25:34:ae:e7:21:c5:48:69:50:a3:33:
05:f2:b5:33:66:52:06:af:ad:1b:a9:d5:50:32:f5:
08:d0:eb:87:1f:9a:78:99:e4:10:26:06:2d:5d:cf:
a9:d5:bd:c3:21:8c:97:7d:ef:5f:86:17:fd:80:f9:
fb:19:31:3b:9e:ca:68:6d:4b:b6:00:63:5d:1b:66:
72:ab:8e:1f:e0:86:58:f8:68:b5:02:d3:cd:52:5e:
dc:4d:24:03:15:3d:e6:40:c3:66:ca:f0:be:e6:61:
6f:b9:89:31:92:a2:b2:fd:e8:c2:dd:26:c9:f8:ea:
bc:c8:3e:ff:9f:33:e4:6a:44:8b:6f:3a:40:68:da:
53:79:89:4e:e9:fe:fd:92:9d:81:22:2c:e6:30:b5:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:95:DE:6E:4D:0B:EF:8C:90:18:BC:77:C2:16:9D:39:90:12:E5
X509v3 Authority Key Identifier:
keyid:D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:f6:36:9e:22:29:bc:15:53:ff:a4:3e:55:e6:8c:b8:70:
7d:b0:23:b6:5d:3b:23:bc:73:de:30:f7:fa:96:32:cf:b1:83:
df:e1:bb:07:d6:ae:bc:9f:ec:9e:e3:58:55:dc:cd:9e:5b:13:
11:14:ad:88:5a:85:2b:14:53:ef:3c:17:4d:13:04:c8:bd:31:
46:0f:11:d6:9e:ea:5f:33:9a:35:65:65:78:9f:8e:a9:0f:a9:
17:25:dc:c4:e1:48:bf:61:dc:4b:a0:37:9e:13:67:14:35:47:
9a:16:57:01:e6:fd:b4:c0:c9:52:45:eb:57:f6:69:4b:06:63:
dd:6d:88:26:0b:3f:ec:b4:35:7b:d3:bd:8b:f0:32:77:fd:af:
e6:d3:e9:a6:8f:42:66:a2:77:7f:88:ee:5e:2d:aa:3e:a3:13:
7b:cb:01:5b:7f:a6:bf:c9:c7:c3:8c:35:8e:02:58:b7:7f:8c:
d5:1c:75:21:81:88:e5:93:03:81:3c:9f:47:bb:59:44:c3:50:
4d:33:de:c3:09:9e:77:b0:37:5e:fd:bd:f6:2a:ca:b1:36:a2:
aa:49:63:65:13:ba:3f:75:07:33:8c:1d:d5:91:ff:46:39:2c:
41:72:88:12:a5:c0:b8:0f:01:25:e5:9c:77:46:be:da:07:86:
d2:76:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:34 2026 by rpki-client