Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
File: 2unfRXblxlT_VX2fm-ox8rZ3hgg.mft (raw, json)
Hash identifier: H3BWb1GQ5Q6iepV3mLdCztVO/3aZtv7SO/JziYwXe8A=
Subject key identifier: DE:A6:57:50:6A:1E:CD:0E:6D:B4:C2:53:C9:4C:D8:44:15:C0:C2:47
Authority key identifier: DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
Certificate issuer: /CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Certificate serial: 01A03F3B3AB60E641272F8C0166957F33A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
Manifest number: 0103
Signing time: Wed 26 Aug 2026 18:00:41 +0000
Manifest this update: Wed 26 Aug 2026 18:00:41 +0000
Manifest next update: Thu 27 Aug 2026 18:00:41 +0000
Files and hashes: 1: 2unfRXblxlT_VX2fm-ox8rZ3hgg.crl (hash: +yn4dK3b3nn784AG4cFA6SiSVOLRM6GC/javzA763i4=)
2: TGOOYRcNmV295qXxS4iLaJusiBo.roa (hash: oqdkVui8+d5XgQplzUQ+/bNjoHy7U9CmnNlp4TiyCZ0=)
3: TaFHcEVpHBuOtmOo9bfUHF86wA8.roa (hash: W6pJRD0Lz0NwRk9iK9nsLKMeEmNlAixYW23qwf2NLk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:3a:b6:0e:64:12:72:f8:c0:16:69:57:f3:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Validity
Not Before: Aug 26 18:00:41 2026 GMT
Not After : Aug 27 18:00:41 2026 GMT
Subject: CN=dea657506a1ecd0e6db4c253c94cd84415c0c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:0f:ab:09:cd:ff:17:72:01:86:27:87:02:
22:b3:00:32:a1:bf:56:91:ce:8d:9a:1d:17:00:c4:
8f:b8:d6:51:e7:1b:0b:95:db:57:1f:30:89:e0:30:
19:7e:80:b4:5a:c4:a4:70:93:6d:8d:96:d1:91:22:
fd:e3:18:4a:19:5b:7d:ce:a3:52:7f:c5:bd:9c:30:
02:a7:7c:cb:ec:dd:a9:ea:8b:2d:b7:95:aa:c3:e6:
91:92:7c:c2:0c:9a:04:5b:3b:59:62:29:fc:52:8d:
88:87:ea:3e:ab:c9:13:27:1d:50:05:2b:d3:be:b8:
d0:bb:be:da:77:e8:80:91:ac:11:5f:06:74:0f:7e:
55:32:75:31:30:85:af:35:c5:81:67:c2:62:25:06:
9e:c9:55:13:f2:b0:3e:66:49:5e:5d:b4:3e:16:93:
fd:8f:5d:56:68:96:4d:b3:91:4c:fe:38:a8:dc:31:
d5:7b:4a:96:5c:0b:7f:ae:37:bf:ff:9e:0e:a4:d9:
9a:45:d2:de:bd:5b:0a:d2:30:df:e8:47:a0:00:1b:
17:6a:81:90:61:ba:53:50:e3:d9:e1:58:35:e3:67:
a8:86:aa:89:a2:c7:05:4a:15:13:1b:5c:3b:37:00:
b4:bf:43:d8:5b:71:4b:c5:97:0e:9c:db:b5:35:64:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:57:50:6A:1E:CD:0E:6D:B4:C2:53:C9:4C:D8:44:15:C0:C2:47
X509v3 Authority Key Identifier:
keyid:DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:40:17:e4:1f:de:d0:ea:85:00:d6:37:8f:1a:e9:63:d9:
4b:b0:62:10:1a:b7:ae:e8:d3:81:02:07:2c:5a:65:26:5d:da:
c7:a6:fc:73:2e:01:b3:08:a0:47:b1:35:09:ad:93:58:04:5a:
85:7f:5a:fd:4a:87:c5:85:31:7e:60:91:bd:53:f0:1a:c1:e8:
27:4c:47:e5:96:b2:db:2b:fc:4f:66:33:e0:2f:da:61:65:27:
68:41:22:4e:bf:f4:87:55:e4:45:fe:d6:f2:34:e4:d7:48:fc:
6a:27:50:68:ea:b8:2f:93:13:97:c8:34:a0:ba:39:4c:a1:f9:
f9:6d:38:3c:a4:60:85:83:30:f5:b2:c1:40:2a:59:98:79:1e:
05:f8:c8:2a:0d:8f:db:a8:94:4a:73:c5:ee:b1:48:a1:29:e4:
09:14:27:85:70:32:86:0c:6c:52:36:f7:40:02:69:b0:5b:01:
03:5f:b0:d5:28:5d:9e:a9:5b:c2:5a:16:eb:8c:78:43:86:fe:
03:e5:00:3e:41:73:ac:5e:ca:73:20:5b:28:ae:dc:e2:c0:b9:
87:67:72:58:b4:19:dd:4f:95:2d:88:14:90:1b:cc:57:e0:eb:
57:fd:59:fa:42:28:6e:fa:e1:16:e5:5f:37:20:1d:2a:10:8f:
bd:67:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:30 2026 by rpki-client