Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: POPRz4oQgggfxT8qb6kHPG8vo5THtftEJChFTcje9AI=
Subject key identifier: D1:C5:1A:CC:0E:A9:8E:08:3E:F7:F2:32:91:22:B2:8C:B5:72:FE:79
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 01A13F3990B77D9CB1FC0D232F405BDDD884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 1AAB
Signing time: Thu 15 Oct 2026 11:01:39 +0000
Manifest this update: Thu 15 Oct 2026 11:01:39 +0000
Manifest next update: Fri 16 Oct 2026 11:01:39 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: H5m+KysmuNK9PP6+KuStza8Kn5Tw2em+XRTHZN+44Iw=)
2: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (hash: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:90:b7:7d:9c:b1:fc:0d:23:2f:40:5b:dd:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Oct 15 11:01:39 2026 GMT
Not After : Oct 16 11:01:39 2026 GMT
Subject: CN=d1c51acc0ea98e083ef7f2329122b28cb572fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:b7:0f:5b:58:ac:5a:b8:63:e0:5e:3f:e6:
d0:7a:71:82:73:37:d5:a2:f7:b9:7a:5b:0d:05:ac:
36:1e:83:e4:82:02:2f:50:27:33:30:66:61:da:7f:
a5:19:aa:da:e5:a0:6c:2f:42:09:99:b8:3d:37:45:
63:5c:42:77:dd:4b:cc:69:93:8b:f0:4d:34:07:a0:
93:ee:97:a8:7d:7d:c5:56:9f:2e:fb:95:48:2b:0c:
29:7d:24:70:ae:61:82:29:53:77:59:a1:45:3c:4b:
a5:9a:31:02:6e:8a:f0:ac:2d:5b:73:75:c8:15:c9:
79:57:e7:39:19:03:03:38:24:d4:d6:3b:08:1e:99:
3c:db:2a:88:b0:af:f5:ff:09:6d:7e:e4:a1:db:7d:
c7:1a:15:0a:1e:36:6a:ce:4b:0b:9f:bc:fd:70:44:
72:3f:57:42:d0:c2:83:d2:f2:a9:2f:1d:c5:e6:35:
6d:cc:5c:32:ee:23:9c:14:20:1c:5c:89:15:ca:d2:
c7:51:a9:fa:5d:75:13:3d:2b:24:67:11:7b:55:95:
6b:91:52:d1:b6:25:eb:77:66:da:ec:19:83:38:c8:
7c:5f:1a:ab:79:9a:5c:f8:41:2c:e9:e4:ab:63:9b:
7d:22:02:3e:e9:3e:f0:2d:b1:46:2e:32:74:77:2f:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:1A:CC:0E:A9:8E:08:3E:F7:F2:32:91:22:B2:8C:B5:72:FE:79
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:8d:5c:07:f7:ff:4c:79:e4:87:0e:18:03:57:aa:b0:f0:
f1:a2:0e:bd:15:a5:05:1b:12:bf:bb:d2:db:9e:95:fd:6b:9c:
8d:62:07:d6:a5:5d:0a:9d:b4:0a:68:aa:8b:58:e1:22:7d:ab:
4c:86:1a:80:6b:11:68:12:94:47:17:cb:08:4a:d7:42:23:e7:
42:fd:9e:89:48:20:e8:a8:bd:c2:73:46:d9:58:3c:3e:4d:88:
2e:fe:8a:e4:df:76:87:88:d2:a1:7c:e1:3d:3b:39:41:c2:7b:
38:ed:7d:f2:6a:9a:de:91:13:b0:db:98:eb:f9:c2:a4:72:f3:
01:4b:11:43:87:58:75:ca:c4:cf:84:2f:32:b4:4c:42:1b:eb:
02:60:2e:fa:f7:ee:3e:7c:3d:07:1c:d0:8d:c3:4f:f7:8b:0d:
f1:3d:9c:61:6f:23:98:4c:1c:db:1f:11:40:2f:87:70:99:c9:
55:e6:cd:2a:b9:96:6a:8f:03:28:16:bd:38:3b:b6:b6:da:fc:
45:81:05:18:28:f5:45:fb:dc:6c:76:71:29:1c:cb:12:24:41:
43:2e:82:ed:ad:7a:09:d3:3d:ab:62:39:36:c1:db:94:49:a3:
6c:49:63:b7:12:04:40:e6:97:9b:9b:d4:97:83:f1:99:f5:76:
43:ea:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:13 2026 by rpki-client