Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: sxg3ES+PTx3kWtMiTbWZAUfbIKXyya7YsaeKnkKfpNw=
Subject key identifier: 3C:7E:78:28:42:BB:55:F5:D4:71:86:4A:6B:9E:1D:64:11:48:48:15
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 01A13FDE7355BDF17FE8113898B08FBC3CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 18CA
Signing time: Thu 15 Oct 2026 14:01:45 +0000
Manifest this update: Thu 15 Oct 2026 14:01:45 +0000
Manifest next update: Fri 16 Oct 2026 14:01:45 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: 5XQBEOh/COT6YoWc7jt9aOK0IL6barkKhxQCYEjZWYM=)
2: JKIhvk4nR2Yatg3LSMzcvAB5gDY.roa (hash: Wu8o0XpgB80LZ5YT5dratdi0qOmv7LG2bN4vwgSeFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:73:55:bd:f1:7f:e8:11:38:98:b0:8f:bc:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Oct 15 14:01:45 2026 GMT
Not After : Oct 16 14:01:45 2026 GMT
Subject: CN=3c7e782842bb55f5d471864a6b9e1d6411484815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:58:c6:89:43:2d:a9:8e:62:1d:b6:c0:3a:
45:ce:7d:74:4d:20:21:38:79:8f:fc:a4:15:34:e1:
cb:a8:34:04:13:39:b6:c9:cb:5c:92:78:3c:90:3a:
1b:6a:61:d9:4c:ad:df:ec:9f:57:41:8c:4a:5f:da:
3b:2d:8c:ab:db:b0:27:81:94:fe:2c:4d:ba:18:9f:
cf:fd:86:38:b8:1c:bb:d9:f6:bb:47:f2:20:2c:df:
ed:b3:03:58:a9:7a:33:63:f9:d8:57:61:38:19:72:
e2:ce:06:01:7e:8e:19:a3:04:38:87:da:9c:65:01:
eb:c6:6b:5b:43:6e:e0:49:29:42:20:34:7c:87:89:
f3:0b:f3:b0:52:5f:39:65:38:bb:fd:1f:ea:0b:0a:
9a:c0:b3:86:45:a1:59:b6:f4:b1:68:f1:39:3f:35:
b6:ec:ab:93:26:79:0b:34:da:45:2e:6f:93:da:1a:
9e:62:7c:2a:37:b1:23:3f:df:27:e2:24:92:fc:bc:
d3:13:10:74:a2:4f:90:0f:69:c7:0a:88:d9:51:c2:
16:04:1a:bd:d1:fe:23:3d:98:32:59:52:09:1b:f8:
66:74:73:09:21:18:6c:68:f6:a3:a1:83:c5:23:1c:
ec:7a:50:c7:40:82:84:e4:db:86:a5:71:71:ad:0e:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:78:28:42:BB:55:F5:D4:71:86:4A:6B:9E:1D:64:11:48:48:15
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fa:69:01:da:32:48:2a:8d:2d:c3:09:8f:ee:31:95:e0:58:
c0:8f:4f:39:ad:f3:87:89:7a:bd:35:19:38:ab:a8:51:0a:b0:
d5:3f:53:4a:65:30:d4:a0:b2:74:7d:b1:04:d6:5a:78:a5:5c:
c5:13:9f:2c:f4:49:40:9f:99:d3:43:f8:ea:4a:c5:4d:d2:1e:
9c:8b:e5:26:d7:de:c3:db:a0:cd:b3:8a:e6:29:17:f0:4a:2b:
98:1b:9b:14:61:37:5d:ef:16:ea:c6:47:ad:61:fb:d0:bf:15:
19:d8:87:96:40:b3:5c:0a:a5:21:f4:8f:8b:7d:25:73:b1:51:
04:f9:ac:b8:dd:ad:9c:e1:96:87:f8:48:d3:24:9c:f7:c7:4c:
fc:50:8b:c2:a4:72:cd:89:cb:69:a0:6d:97:f4:68:24:76:fb:
25:9e:94:83:9f:64:31:97:3b:7c:5b:03:33:e9:2c:aa:6a:08:
43:27:49:9b:dd:83:d1:68:25:d0:9e:26:f6:cd:29:a9:45:22:
d0:1e:5e:74:56:42:3a:fb:b1:ac:97:e4:9e:bd:10:9a:16:1f:
95:66:01:d9:70:4c:b8:6f:d3:e8:d9:9c:f6:e8:32:d6:cb:8d:
c3:89:24:4d:8f:2e:06:13:24:71:5e:7d:11:94:ca:7e:63:13:
ed:47:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:17 2026 by rpki-client