Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
File: 2unfRXblxlT_VX2fm-ox8rZ3hgg.mft (raw, json)
Hash identifier: Erlf7AiCGvizBt5KMaF2Gfggc7tq4WgaV2S9IzI3Gcw=
Subject key identifier: 50:A2:D7:10:0E:77:93:F1:E3:B8:E4:ED:94:57:FE:1D:F8:DC:72:5F
Authority key identifier: DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
Certificate issuer: /CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Certificate serial: 01A187894FAD272A0068B5845866A2E133EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
Manifest number: 01AD
Signing time: Thu 29 Oct 2026 12:01:25 +0000
Manifest this update: Thu 29 Oct 2026 12:01:25 +0000
Manifest next update: Fri 30 Oct 2026 12:01:25 +0000
Files and hashes: 1: 2unfRXblxlT_VX2fm-ox8rZ3hgg.crl (hash: FSSXGbkkluJF8fSoBt2v5SFstixWSQZcQdyfh4UVTfc=)
2: TGOOYRcNmV295qXxS4iLaJusiBo.roa (hash: oqdkVui8+d5XgQplzUQ+/bNjoHy7U9CmnNlp4TiyCZ0=)
3: TaFHcEVpHBuOtmOo9bfUHF86wA8.roa (hash: W6pJRD0Lz0NwRk9iK9nsLKMeEmNlAixYW23qwf2NLk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:4f:ad:27:2a:00:68:b5:84:58:66:a2:e1:33:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Validity
Not Before: Oct 29 12:01:25 2026 GMT
Not After : Oct 30 12:01:25 2026 GMT
Subject: CN=50a2d7100e7793f1e3b8e4ed9457fe1df8dc725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:41:36:6f:5a:28:25:36:c9:c7:56:89:af:e6:
df:1f:5f:41:62:3d:2d:34:0a:5e:94:56:eb:57:5c:
34:64:6a:cd:ef:7e:5f:67:b7:ff:cd:b8:f3:52:e6:
f3:d1:6c:43:52:c3:f5:09:c7:76:5f:2a:e9:9a:c2:
b8:e7:5a:2e:64:4c:0d:5b:5c:f6:87:d6:ca:de:69:
fc:1b:5a:b1:4c:e8:59:d0:e8:af:39:27:e0:2c:e3:
d3:19:17:9e:29:94:12:a6:8d:0c:db:40:f1:df:7e:
a8:39:1c:a1:0e:66:75:cb:04:e1:20:c1:82:40:55:
74:10:ce:39:74:dc:bf:5d:d5:13:0c:64:70:e3:ec:
75:d4:de:e0:83:02:9e:a1:f1:91:65:ce:b5:88:6d:
52:8e:f1:e0:e2:98:c6:82:65:c3:e6:61:27:44:31:
a4:9f:af:9f:88:e0:9b:b3:19:81:6d:23:6b:c5:92:
d2:04:a0:62:ba:4c:d0:d6:ac:e9:ab:bc:f1:b5:43:
d2:1c:81:b9:0e:31:02:9e:91:cf:87:09:f9:1f:a5:
e8:0f:18:d7:80:e4:db:da:e0:95:fe:a4:0d:87:b4:
c0:95:92:e6:c7:06:44:5c:9c:20:fa:e2:95:21:99:
d3:15:e7:1c:48:97:35:df:c5:4b:b9:46:fa:50:17:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A2:D7:10:0E:77:93:F1:E3:B8:E4:ED:94:57:FE:1D:F8:DC:72:5F
X509v3 Authority Key Identifier:
keyid:DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:2c:23:98:96:98:26:6b:f5:37:63:b4:be:c5:5c:b4:77:
63:2d:42:8e:8e:f4:90:e7:83:a2:e3:ab:40:7e:cc:b4:0e:af:
22:1e:91:de:69:f0:cc:a6:4c:f7:ec:81:dd:12:4f:6c:3d:3f:
b8:bd:c4:bb:b1:bb:fc:3c:96:34:c6:c9:5b:e4:e9:eb:b6:f0:
26:f0:07:9f:31:ca:46:67:21:3e:7d:39:c4:b2:b1:e3:0e:d9:
df:bb:a5:b7:e4:35:94:30:48:14:1a:a9:0e:81:5c:13:5e:bf:
89:66:9e:4e:b5:87:a3:f3:ab:e3:88:89:0f:16:29:8e:82:fb:
1d:b1:10:75:3a:cc:24:07:a5:f0:cd:9a:9e:79:c4:02:24:90:
70:a4:61:72:06:a4:d3:1c:4f:94:23:ae:d6:6d:9c:70:bd:3d:
aa:27:6f:86:41:6f:03:6b:b2:24:a0:70:76:36:15:e0:19:3b:
b4:83:cc:e2:50:5a:b3:86:90:34:1b:fd:9d:44:0b:43:f8:60:
e5:34:70:d7:b1:66:6d:c8:29:83:c8:e4:20:0c:c8:20:be:a1:
54:a8:67:63:6a:d6:ee:0a:88:b5:9f:f5:4d:d9:7b:0f:55:1e:
93:09:ba:02:3f:d5:fc:18:6a:2e:8a:28:e1:2a:42:fa:ad:ed:
5b:f8:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:56 2026 by rpki-client