Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
File: 2unfRXblxlT_VX2fm-ox8rZ3hgg.mft (raw, json)
Hash identifier: es4/S3Pt13krmndnX1qppsV1LFRujCCnAPqbVV7D2XI=
Subject key identifier: E0:E6:7A:D8:22:9A:83:C5:B1:10:8E:05:E7:CA:C1:01:D6:2C:98:99
Authority key identifier: DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
Certificate issuer: /CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Certificate serial: 01A183ACA429453F42A05EF1D4D3BE49B69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
Manifest number: 01AB
Signing time: Wed 28 Oct 2026 18:01:31 +0000
Manifest this update: Wed 28 Oct 2026 18:01:31 +0000
Manifest next update: Thu 29 Oct 2026 18:01:31 +0000
Files and hashes: 1: 2unfRXblxlT_VX2fm-ox8rZ3hgg.crl (hash: 6IrKdOkbg+JtJcp6IDHrkOU4VaV0UgNwI34srWiOXKo=)
2: TGOOYRcNmV295qXxS4iLaJusiBo.roa (hash: oqdkVui8+d5XgQplzUQ+/bNjoHy7U9CmnNlp4TiyCZ0=)
3: TaFHcEVpHBuOtmOo9bfUHF86wA8.roa (hash: W6pJRD0Lz0NwRk9iK9nsLKMeEmNlAixYW23qwf2NLk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:a4:29:45:3f:42:a0:5e:f1:d4:d3:be:49:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Validity
Not Before: Oct 28 18:01:31 2026 GMT
Not After : Oct 29 18:01:31 2026 GMT
Subject: CN=e0e67ad8229a83c5b1108e05e7cac101d62c9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:61:28:39:a1:f9:88:cf:a9:2b:8b:03:0e:
34:74:6d:f0:60:ee:9f:c8:c4:5c:5a:65:0b:79:b4:
21:fd:b9:15:11:ea:54:cd:83:c5:4d:33:0a:2b:c5:
f9:fe:59:4a:cc:1d:c8:49:3b:b0:7b:32:cd:48:6b:
29:5d:a8:65:9d:3d:ce:53:99:8f:c4:a7:57:b6:b7:
64:77:a5:02:a2:80:23:cd:d6:26:c5:ba:34:c0:0b:
e3:9f:0c:ad:70:48:4a:5e:4f:61:e8:88:bc:54:a5:
a4:d9:0f:a6:3d:bc:fd:09:59:d8:94:fd:3b:a9:86:
ad:cc:c5:7c:79:79:5b:cf:5c:59:76:9c:1e:0a:22:
42:a2:ee:88:af:93:b1:98:28:ac:42:00:4a:9d:46:
66:71:3a:f3:0e:83:5b:a0:21:b5:ab:cd:f8:be:f0:
43:91:69:3a:87:c0:88:c7:0e:86:19:0a:69:61:5f:
57:7a:2b:43:b1:d9:c3:2e:92:30:7d:06:ef:68:63:
6c:a5:0d:6f:da:34:81:d7:4f:ed:87:65:3a:ad:1a:
1a:0e:43:9b:68:9c:15:be:9b:ea:7c:38:2b:55:7f:
67:d1:9a:3e:c9:d1:32:81:80:ae:b3:08:f5:ed:ec:
a5:ea:2d:27:d3:8a:5f:ee:2c:08:80:cf:8f:eb:70:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:7A:D8:22:9A:83:C5:B1:10:8E:05:E7:CA:C1:01:D6:2C:98:99
X509v3 Authority Key Identifier:
keyid:DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9c:ce:bd:f9:e7:f5:ec:5c:06:a4:50:63:6c:94:c8:72:60:
af:cc:e7:13:0f:1b:21:75:a5:79:62:4e:c5:78:45:18:5e:06:
3d:08:14:17:52:fd:8e:fa:c8:f1:e3:0d:56:d9:80:fd:f2:84:
4c:26:76:67:df:53:f5:f1:49:ab:0f:b9:0b:bd:a1:97:8a:b1:
5b:04:8c:6a:e0:dc:a3:f2:9a:cd:6a:74:66:f0:43:11:f1:52:
b6:c6:6a:94:5e:3a:67:a9:fb:94:3c:33:9a:c4:6e:0e:42:78:
2c:4a:38:67:60:fe:f5:cc:4b:68:cd:73:69:31:07:6f:ee:eb:
8a:02:68:ef:56:90:0a:8f:73:0b:29:b3:0f:6b:ac:7f:03:63:
47:88:53:78:64:73:0a:8d:7c:1b:4c:10:e8:df:53:34:10:41:
fd:56:7a:5e:b0:40:6b:01:f0:6e:fd:2d:36:60:e5:94:77:79:
3c:70:9e:7c:d3:5f:b0:9d:bf:54:5d:e1:46:9f:d3:7a:a6:b7:
7a:1d:6a:9c:e7:16:3d:35:8c:1e:f3:b2:d0:c2:b9:49:e1:32:
55:c6:ca:4b:06:00:ae:f3:13:53:1c:53:9c:f0:d6:26:55:4b:
14:09:d5:50:9d:95:f0:0a:a5:72:a6:fe:71:5d:99:2d:87:ee:
30:23:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:01:34 2026 by rpki-client