Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: CSSzaWY1ew0NEctkIsGjexTi6hyv35SZyikByl3eQa4=
Subject key identifier: 9E:B5:08:00:CE:8B:99:4F:7E:AB:67:E7:40:5D:6A:6B:E9:41:BF:F8
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01A17401BC57C4D5F44215ACEA87FCFDDC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 17:00:33 +0000
Manifest this update: Sun 25 Oct 2026 17:00:33 +0000
Manifest next update: Mon 26 Oct 2026 17:00:33 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: y8VMWfpqxmNtiuD8/Y6oLDHs+mrZAkfsnRtZxSsoyEU=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:01:bc:57:c4:d5:f4:42:15:ac:ea:87:fc:fd:dc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Oct 25 17:00:33 2026 GMT
Not After : Oct 26 17:00:33 2026 GMT
Subject: CN=9eb50800ce8b994f7eab67e7405d6a6be941bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:65:fb:3a:6c:1f:ac:5c:0b:80:b9:f4:c8:
f4:29:4f:52:27:54:55:ce:06:ed:18:8e:0e:cf:25:
48:a5:86:4d:fb:10:e1:97:32:10:bc:ec:58:d0:6c:
8b:ee:0d:0c:13:32:f8:0f:c1:50:78:75:ad:71:08:
5c:c0:06:3d:67:c1:34:41:5d:7f:90:fc:ab:72:29:
ce:f4:82:6c:a5:56:81:80:a2:84:ed:b7:6c:51:21:
c0:42:f0:f9:e1:ab:64:f1:90:d5:84:da:a4:33:69:
8f:89:00:d0:5b:f9:3b:f5:b3:16:34:10:63:ec:4c:
4c:71:7b:14:b4:61:22:1d:45:16:f1:d3:88:f7:26:
2e:d0:bb:3f:a2:65:9c:54:da:32:25:43:c7:8b:6b:
fc:d7:87:dd:28:af:ab:d8:5a:80:6e:81:82:64:28:
e5:d6:d7:9e:5f:35:d9:27:63:1e:20:c7:79:76:13:
5f:7e:73:cc:32:87:4e:95:56:8d:a7:45:d1:7b:40:
14:2f:33:50:e9:a2:e9:b1:26:76:b7:be:1a:a4:b0:
3c:0a:89:a9:b8:67:fb:65:3e:79:e0:18:d9:a1:20:
22:a2:26:70:f5:01:fa:1c:21:35:04:b9:bc:7c:96:
f5:23:07:8e:aa:92:4d:99:b9:cc:51:1e:4e:d0:f4:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B5:08:00:CE:8B:99:4F:7E:AB:67:E7:40:5D:6A:6B:E9:41:BF:F8
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:84:64:b0:72:2e:c6:18:2a:c4:e3:36:fe:00:f5:56:91:76:
7a:3a:71:2f:0e:ed:66:9c:b5:a0:58:56:55:46:4d:07:2e:b6:
12:9a:dd:b0:06:b5:d4:cf:c8:e3:69:1e:fe:31:93:e1:6e:f7:
71:41:f9:b5:56:18:87:80:4d:2a:da:51:13:fa:98:40:ce:13:
89:59:ce:2e:c1:94:8a:79:7d:9d:e3:32:c8:ee:d1:7c:0d:ca:
13:50:b6:d4:98:1c:1b:d7:fd:95:a4:16:7f:84:15:a5:37:5d:
5d:9b:9e:24:e9:51:37:dd:d7:7f:b5:be:ff:6a:1a:6a:01:08:
47:e3:a6:8e:41:c1:07:08:10:fb:ae:4a:81:74:1d:b8:29:0a:
22:e9:13:e4:20:d2:91:b5:85:3b:9b:c4:7f:c3:cd:87:ea:2d:
c5:e2:17:64:12:31:14:20:51:f9:56:a8:41:b9:7a:f8:a6:47:
a7:26:48:6d:7c:41:cf:dd:52:89:d5:7a:7c:61:30:43:e5:64:
38:ab:2d:4b:21:89:f5:a3:eb:3a:f7:52:96:6a:8e:da:94:b3:
5e:5a:9e:f2:43:6c:63:0c:24:db:1f:eb:7e:31:6a:84:d4:08:
e3:d1:b0:19:a6:9f:7c:89:0b:7f:99:09:7e:79:30:b9:3a:f6:
7a:1e:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:52 2026 by rpki-client