Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: K/hkjXplXrcEdwQFHWEbUsXmVjyoOIMCDfOTKSVrSnk=
Subject key identifier: 14:A9:D7:FE:66:24:47:2E:A5:4E:B7:9C:43:B1:12:F9:DE:25:FA:7B
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 01A15FD647F38A62BF4AABB7BE6DEA19D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0EE8
Signing time: Wed 21 Oct 2026 19:00:40 +0000
Manifest this update: Wed 21 Oct 2026 19:00:40 +0000
Manifest next update: Thu 22 Oct 2026 19:00:40 +0000
Files and hashes: 1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: /b8szkbT8Mfm6ITaZodD/hDvmsbT4XORnunW5jf5Tq0=)
3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:47:f3:8a:62:bf:4a:ab:b7:be:6d:ea:19:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Oct 21 19:00:40 2026 GMT
Not After : Oct 22 19:00:40 2026 GMT
Subject: CN=14a9d7fe6624472ea54eb79c43b112f9de25fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:83:2e:8e:87:de:31:ce:6f:7a:ce:1d:1a:
69:78:88:ab:3c:6e:b8:38:70:c5:e8:1d:38:d7:43:
9e:d6:c4:6c:9d:90:8d:25:1f:2f:bc:41:90:40:01:
be:3f:82:c5:ef:58:9c:c2:a7:6d:cf:5c:ac:dd:be:
82:50:89:dc:5a:51:07:24:03:54:9b:81:a5:c6:d2:
2c:b2:60:6c:2c:8d:4e:7e:91:fa:10:2f:55:c0:b8:
73:9d:7f:74:f6:5f:9d:9c:c0:c0:42:30:2d:e4:45:
12:8d:6b:7d:3f:6a:cd:d4:56:1c:a7:c0:51:16:61:
fa:2a:5e:0f:ee:71:9c:03:e6:c2:63:94:76:e9:5c:
a3:b3:57:ba:99:25:12:31:27:88:ca:ef:bc:d4:e3:
d5:45:e3:46:28:9d:31:95:ad:92:d9:18:c5:ad:56:
f0:8b:09:89:f1:6a:d7:e9:b8:59:1a:4f:8d:24:28:
db:31:de:c8:b2:cd:52:95:8f:83:61:62:4d:e4:e5:
a5:84:15:e3:90:3f:ef:45:70:14:32:1b:39:90:81:
a2:7d:70:d7:6a:31:aa:2a:1a:33:94:61:ad:36:f2:
0e:fc:39:f3:f6:f7:b0:8a:c3:68:a3:a4:f7:63:4c:
e2:61:e3:b1:90:35:fb:96:7b:b5:2b:da:9a:67:49:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:D7:FE:66:24:47:2E:A5:4E:B7:9C:43:B1:12:F9:DE:25:FA:7B
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4b:5a:79:85:c2:41:54:4c:f1:06:60:b6:1d:81:31:cf:a5:
f4:82:6c:c9:5e:ff:63:01:4c:43:b8:e0:09:49:49:b9:9e:cd:
da:ab:f3:9a:80:a4:d8:de:77:4d:b7:c4:19:59:28:55:59:16:
fc:ca:ed:b3:fa:fb:2e:bf:ac:50:ac:9b:6f:20:ff:6a:29:a8:
b4:d2:16:bc:bf:d7:8d:4f:f9:7f:eb:0f:fb:9c:e7:01:69:0b:
95:8a:f7:b7:73:fc:ff:b6:d8:c8:e8:16:61:c7:02:a5:28:5a:
29:2b:20:c7:42:42:39:48:65:71:be:fd:07:31:d3:4e:e3:96:
a4:c8:fb:5e:cb:8b:2d:bb:bd:f6:24:06:7e:56:77:91:1d:3d:
44:2c:90:70:74:db:90:35:26:09:4f:1d:d3:95:48:49:97:8c:
b6:46:be:c4:a3:f9:e8:e4:b3:c6:19:ff:33:43:fb:7f:cc:34:
81:de:02:6b:b8:17:eb:38:40:e8:30:60:a7:ea:54:f3:f1:58:
35:41:77:18:5d:b1:93:95:66:8c:67:33:57:70:50:60:fb:c6:
29:35:9a:7f:a5:cd:ef:91:91:9b:72:fe:bb:bd:2c:8f:1e:19:
0c:3c:0d:5b:99:47:04:49:6f:f6:74:1a:23:0e:e3:1c:74:d5:
e1:10:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:14:46 2026 by rpki-client