Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier: Epb+JN0ShHGuhbjBSUX42djbuKRJqLbCB+p5ohTZwA4=
Subject key identifier: C3:E9:6D:AF:63:48:8E:DE:EC:37:85:35:43:0D:FD:AC:CF:00:4B:F6
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 01A125B06CDE7B4B8852462625B2FF6C2237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number: 0FF0
Signing time: Sat 10 Oct 2026 12:01:21 +0000
Manifest this update: Sat 10 Oct 2026 12:01:21 +0000
Manifest next update: Sun 11 Oct 2026 12:01:21 +0000
Files and hashes: 1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: RfG8jPcRjI3g/cNRC6vsCTBkFFP/QK/A4kC6fyNLocw=)
2: 55I-KJfDZCQf3-WIzaOmHLDw0UA.roa (hash: CHL8cZMB7OLAW5NGioo9AKdHll+9RPJn2SB7b3DCiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:6c:de:7b:4b:88:52:46:26:25:b2:ff:6c:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Oct 10 12:01:21 2026 GMT
Not After : Oct 11 12:01:21 2026 GMT
Subject: CN=c3e96daf63488edeec378535430dfdaccf004bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:2a:7e:1d:dd:d4:c7:07:54:7c:4e:de:d3:
da:ea:3d:5f:75:20:98:15:94:6b:85:e2:16:20:1b:
0a:9d:36:37:68:d2:f0:d4:4b:5e:a4:b0:f5:13:07:
b0:17:8e:c5:dd:fd:b6:81:60:e5:64:a5:bd:53:d0:
85:23:fa:87:bd:d0:0b:fe:18:4b:f7:34:ed:de:01:
23:e2:f6:ca:5e:b9:30:7c:e1:74:27:82:b9:4f:2b:
c0:12:f9:51:12:45:6f:04:bf:6a:dc:c6:12:eb:e7:
fd:88:0e:7f:72:5d:b5:90:c8:86:45:66:9a:56:cb:
5a:a4:08:12:16:d4:a6:89:6f:5c:18:54:43:1d:1b:
32:b5:dc:10:54:4b:57:56:09:5f:e0:97:84:61:26:
36:9a:09:4c:18:e0:c0:ce:f1:e6:08:95:b3:fe:9a:
9c:aa:47:b1:03:25:08:72:a3:e3:23:1f:f4:be:47:
dc:17:d1:0f:e9:1d:6a:3d:56:06:ac:07:42:8b:a8:
63:d7:14:c8:b9:2b:50:97:ae:cd:11:69:17:21:f1:
59:ad:f2:a3:b9:a4:1a:fe:11:ae:47:79:2c:b3:cd:
28:79:87:e4:af:a2:5f:06:fb:7e:1e:78:bb:32:61:
d5:51:cc:f2:90:70:68:b6:99:91:8b:24:ba:f8:d7:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:6D:AF:63:48:8E:DE:EC:37:85:35:43:0D:FD:AC:CF:00:4B:F6
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:9a:ef:de:63:e4:f0:a4:eb:45:7c:d7:20:0c:74:2e:e7:
11:c8:40:bf:ec:d4:d9:39:f2:30:17:2b:30:e6:d5:dd:02:54:
22:98:77:af:a1:ba:53:57:95:76:32:81:1b:7a:47:85:62:43:
85:0d:dd:7c:63:6b:b5:de:77:f0:72:83:9b:cf:aa:fd:ed:04:
13:b9:ac:d1:37:59:ba:7f:0a:5c:db:a4:7e:a6:fa:62:35:b7:
10:a7:71:49:92:62:8a:ff:05:ac:23:ec:f3:20:ad:7f:88:5a:
c6:76:e0:ec:a8:25:98:47:4d:8b:83:43:1c:f3:92:e0:8d:83:
79:e6:62:f7:50:9c:ec:80:69:76:13:e4:ac:7a:ea:1b:06:ed:
58:08:47:3a:79:61:64:0e:a1:e6:7f:84:55:4a:89:5a:d4:d3:
8d:c6:99:49:bd:fc:d8:63:82:09:44:86:81:9f:f1:20:ae:ae:
25:1d:51:7d:51:ec:c6:bb:47:ba:67:4b:b0:78:b8:09:3f:61:
70:d9:72:b6:0c:e0:6a:6b:d1:36:9e:fe:b0:d4:33:c4:69:1a:
ef:58:92:ab:7d:02:69:39:0b:30:9a:3c:fc:c3:ce:96:6b:4a:
ec:4a:96:88:8c:c8:b3:4f:6f:83:c1:9c:14:cf:f6:68:33:bb:
f7:98:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:22:33 2026 by rpki-client