Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: 7wfhvh3qK0QolERr0NxAs3YgrpPwMGy21/ZLcmernmI=
Subject key identifier: D6:DA:CC:14:C2:CB:0F:83:26:FD:98:E0:D9:99:ED:29:4D:25:9A:20
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 01A103C93EF4F5FB17DBF5053E5D2A6378E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 07D8
Signing time: Sat 03 Oct 2026 22:01:22 +0000
Manifest this update: Sat 03 Oct 2026 22:01:22 +0000
Manifest next update: Sun 04 Oct 2026 22:01:22 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: 2bsXZp8AQU2wU5p624+rOdm4PdTabmdAWahTkJEjMeU=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:3e:f4:f5:fb:17:db:f5:05:3e:5d:2a:63:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Oct 3 22:01:22 2026 GMT
Not After : Oct 4 22:01:22 2026 GMT
Subject: CN=d6dacc14c2cb0f8326fd98e0d999ed294d259a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:3d:77:e9:50:9d:8d:c8:47:69:0c:ab:08:
8c:d5:ee:26:90:1b:75:89:e8:d4:0f:bc:c4:1e:e3:
92:9f:d3:12:ee:da:a7:2a:d4:e9:f9:5c:d0:f9:24:
e2:73:44:b8:0f:1c:35:08:33:9f:92:27:ed:46:7f:
98:a6:09:04:21:b1:55:4b:8c:05:7f:d1:75:0a:a3:
66:5e:34:9a:6a:aa:21:bf:11:ff:30:4f:6b:76:17:
b5:5f:3f:b6:2b:86:a6:1a:59:4b:53:8e:26:40:fa:
69:98:e3:7c:48:40:b1:de:2a:61:55:21:19:18:69:
67:0e:32:ce:37:9b:0a:5a:fd:9b:56:f0:7b:e9:17:
3f:36:ee:cc:47:ab:0e:05:60:a6:a7:6d:e6:3a:fd:
f6:a7:59:dc:e2:71:9b:67:68:7c:9b:f0:9d:8e:c2:
db:86:81:83:b6:8c:71:78:20:72:8e:99:6d:c0:3e:
96:df:33:2a:29:b2:13:fc:0d:02:7e:f5:2f:af:42:
e6:77:f0:a2:63:29:ac:7a:53:c3:fd:44:48:d4:ae:
11:9c:a0:e1:ed:69:24:24:cf:10:c4:89:d8:4e:d5:
f4:e7:6c:83:67:73:aa:f8:85:2a:df:7e:5d:75:70:
6d:3a:11:16:6f:4a:4a:4c:5c:03:54:28:0d:83:f5:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:CC:14:C2:CB:0F:83:26:FD:98:E0:D9:99:ED:29:4D:25:9A:20
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0f:ea:ef:70:b0:a5:9d:25:ad:a6:e1:ae:01:29:1a:ac:c7:
a3:17:64:d3:e3:75:a4:b5:43:ac:a9:cc:0f:b0:62:15:f2:3d:
67:da:7a:8a:3e:c1:a6:ca:07:1b:fe:af:fa:1e:7b:93:e1:62:
ae:33:a6:91:73:7d:71:fb:2a:09:94:be:f7:e3:3f:a0:66:78:
45:a6:b6:83:c9:14:d6:f7:25:16:49:dd:15:b9:fc:d2:76:87:
c4:57:8e:c5:34:06:21:eb:c5:71:31:09:81:9f:1b:f0:cc:69:
16:28:8e:71:85:60:b7:e2:8c:78:8f:be:0c:31:d4:93:41:83:
39:74:94:e6:bd:81:99:e9:2b:c2:ef:9b:f8:32:80:4d:79:90:
91:76:38:ed:d9:72:e3:f1:b9:e5:ca:28:d4:3b:8e:e3:d9:64:
a1:da:96:83:7c:0f:58:1a:a3:2c:a8:72:43:4d:a2:69:6d:4c:
57:66:9c:47:17:51:38:e0:e2:b4:9e:bc:ff:28:02:ae:0c:4b:
4b:00:c5:01:78:00:0f:8e:89:7b:cd:a6:8e:5d:d5:87:a4:5a:
30:2a:a2:2d:d4:ae:2e:43:c8:79:63:bd:64:34:6a:55:71:34:
b8:80:b0:fd:ef:3d:fd:d7:e6:98:84:ff:25:14:ab:ea:3f:4f:
fc:01:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:40:31 2026 by rpki-client