Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
File: 2ddyZTONdKLvZWzYmC0-ee4scws.mft (raw, json)
Hash identifier: VIT+KhsCndteWTeDbmZ6obJgHUDb2ck7k8atz/7UD8U=
Subject key identifier: 23:00:30:FD:68:78:94:CF:A4:8F:D5:E4:81:C8:B0:74:58:10:71:DD
Authority key identifier: D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
Certificate issuer: /CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Certificate serial: 01A0C5FBF1E8F93BA7725E16CBEB445E04E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
Manifest number: 26
Signing time: Mon 21 Sep 2026 22:00:18 +0000
Manifest this update: Mon 21 Sep 2026 22:00:18 +0000
Manifest next update: Tue 22 Sep 2026 22:00:18 +0000
Files and hashes: 1: 2ddyZTONdKLvZWzYmC0-ee4scws.crl (hash: JEZFuDUjGom65ZOPmi2n1MxQEVih4OINDys5tlmalBc=)
2: GyAPdxHlXvRo5tDkDVenq5fjP4k.roa (hash: 0ah8uxz8w/BQqOF2DO2niuzwg5BTV6cRax+iO+7Pk7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:f1:e8:f9:3b:a7:72:5e:16:cb:eb:44:5e:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Validity
Not Before: Sep 21 22:00:18 2026 GMT
Not After : Sep 22 22:00:18 2026 GMT
Subject: CN=230030fd687894cfa48fd5e481c8b074581071dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:92:ef:1f:2a:f3:ae:56:c8:b3:cb:4f:05:
28:84:f6:6e:ff:52:bb:8e:83:bf:78:7a:a0:ef:78:
ef:b3:7e:37:11:6a:f9:82:d3:66:11:fa:b7:cc:44:
dd:aa:df:dd:3d:64:16:16:8f:08:34:16:cb:07:fa:
a1:15:02:84:7c:f4:e0:a1:28:7e:69:a1:1a:d9:04:
1f:1f:c2:c7:9e:a1:58:e8:7f:70:6f:cd:f7:77:82:
05:94:21:b1:89:d2:ed:be:83:b0:72:d4:a6:da:7c:
0b:87:75:82:7a:c1:9e:80:06:9c:83:12:83:de:d9:
c0:9c:07:4f:3c:2a:2f:f1:5e:7a:1a:e3:98:e8:aa:
b9:b4:83:b1:ee:41:f1:5b:95:11:bd:61:3e:23:90:
22:a5:77:d9:9d:66:e4:73:db:ba:3e:d2:52:eb:a1:
29:af:8d:fd:ac:de:ec:e3:65:1a:b2:50:77:d4:8b:
03:e7:33:95:38:d9:38:bc:96:64:a5:a6:96:db:e2:
23:86:3b:ec:40:27:66:8d:b4:6f:bb:95:c0:f6:4f:
98:52:36:e7:ca:99:71:68:e6:a2:6c:94:eb:2d:6c:
5d:e8:73:b4:b6:d7:51:75:87:9b:bb:a6:cc:76:7b:
20:f6:6f:93:1a:30:77:1f:03:67:03:28:63:e7:62:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:30:FD:68:78:94:CF:A4:8F:D5:E4:81:C8:B0:74:58:10:71:DD
X509v3 Authority Key Identifier:
keyid:D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:75:ae:e3:8a:7b:4b:85:ea:eb:ef:7b:15:f0:54:67:89:
0a:74:cc:b6:a5:ee:e2:c1:de:44:26:90:1a:f1:41:a7:6e:bc:
df:96:79:e2:f7:84:eb:84:5e:f5:01:f8:9a:41:76:2b:22:6a:
38:34:81:85:7e:eb:0f:84:78:ea:56:78:24:60:51:36:16:cf:
4f:01:7a:59:24:0c:17:5c:49:7e:4c:8b:0d:9f:ae:4a:68:ad:
67:82:fc:68:67:4c:21:fe:d5:0e:21:00:99:55:43:d4:77:75:
5e:d9:a7:95:60:3b:7f:ed:85:48:af:6d:b3:ea:f4:d2:81:be:
74:ee:05:db:b0:8e:a5:73:1d:3d:5e:45:51:17:23:60:96:bb:
75:5a:81:d2:0a:49:57:7a:86:28:7f:20:93:ef:b3:04:29:4a:
c1:c3:db:b2:fe:79:fe:9c:7d:68:c6:32:1f:d2:a5:4b:f4:5d:
bc:64:9a:f5:f0:5f:77:41:0f:97:b4:7f:c5:e7:ec:da:9d:82:
59:57:0d:cd:f1:99:d4:a6:6e:b8:b0:4b:ec:e5:58:c7:9a:b9:
ed:3e:d8:d4:8a:1c:3f:ac:49:06:7b:e9:e0:39:c4:32:16:29:
4c:99:aa:05:a1:97:9c:6b:7f:52:45:a8:c9:46:13:03:b0:f2:
e1:0f:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:18 2026 by rpki-client