Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: T9FhHejl3Vl+zZDowKhEsIhBvT8f09aoCiNnpEMk+0k=
Subject key identifier: B8:AA:41:90:63:65:2E:78:E8:EE:71:6F:37:04:03:FA:69:31:BD:12
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 01A03FE04CB317ADFEA75C28B947CB12AE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 049C
Signing time: Wed 26 Aug 2026 21:00:59 +0000
Manifest this update: Wed 26 Aug 2026 21:00:59 +0000
Manifest next update: Thu 27 Aug 2026 21:00:59 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: 4P5K1dHadcA86JKq0SrtBkwDNgQ3dppPI0Y0cCCZksU=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:4c:b3:17:ad:fe:a7:5c:28:b9:47:cb:12:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Aug 26 21:00:59 2026 GMT
Not After : Aug 27 21:00:59 2026 GMT
Subject: CN=b8aa419063652e78e8ee716f370403fa6931bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:ad:bf:4c:06:65:b8:42:6b:bc:21:3a:77:
ed:1c:cd:8b:10:cb:18:3c:de:cb:5e:4a:27:d3:5e:
4b:7c:6b:d5:e6:75:99:7c:b7:dd:df:9a:bc:e8:26:
f8:05:ae:cb:ca:78:cf:9a:41:63:b4:12:16:3b:5f:
54:51:c0:c8:cd:3c:58:c6:d5:8d:7b:1e:f2:76:ea:
17:97:ae:3d:35:f6:c4:0d:72:81:3b:14:a2:11:7d:
2a:ff:36:b1:c7:c7:22:fa:6a:1b:98:45:bd:87:04:
d7:fd:82:cf:0e:c2:96:4a:6b:54:e9:ea:e8:1f:cd:
bc:1b:14:c4:d6:06:c8:1b:ff:a8:2f:32:35:90:e5:
a2:8e:ab:1e:7a:4e:ba:d1:56:0b:49:02:77:86:ac:
01:34:cc:46:4e:c8:ee:65:0a:88:8c:fc:67:ca:3c:
ed:91:2e:3c:ba:37:b6:5c:02:57:3f:f5:c9:f3:c8:
ba:17:7b:a4:78:3c:13:99:bf:1e:80:8c:a3:c5:2c:
9b:e7:0c:07:82:43:4d:4f:a4:9c:ea:3a:b9:92:10:
1c:18:90:b9:25:28:f0:4f:60:12:bf:f1:12:d7:30:
d3:cc:2e:20:6c:fd:7e:aa:3d:fd:08:d0:28:67:bf:
29:31:59:28:01:04:b9:d8:f9:19:90:27:98:49:53:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AA:41:90:63:65:2E:78:E8:EE:71:6F:37:04:03:FA:69:31:BD:12
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:aa:b4:c5:fe:e0:01:d6:59:b4:d4:4b:71:1d:e6:47:5d:14:
41:21:9d:ca:15:d4:2e:b2:63:4c:7e:b4:73:01:1b:60:4f:8c:
4c:26:e7:8c:43:89:b2:22:fc:b6:58:6c:41:64:38:83:8c:11:
53:a9:9f:02:29:db:7f:29:33:40:17:b8:d6:18:63:f2:9b:82:
65:94:73:38:08:d5:17:5c:ea:f9:2d:e8:ed:bd:14:b9:0e:0a:
b9:61:7f:5d:ed:b5:c2:d8:cc:82:36:0d:46:14:fc:11:8a:86:
d4:9b:9d:fd:94:d0:57:d2:45:e9:4a:0f:3b:f9:27:92:67:ae:
67:91:87:01:cb:f2:3a:02:ea:9a:c0:e1:c2:50:b3:d5:19:73:
2b:c7:82:3a:bf:36:37:08:71:37:3f:3f:94:c5:2f:81:c7:90:
73:5c:2a:6e:df:d1:bd:78:04:41:09:83:35:e5:e8:5d:ec:91:
65:f1:ed:38:dd:f1:7f:6a:9d:c4:bf:66:fd:dd:84:c5:17:2e:
18:ea:53:8d:af:c7:25:23:4a:8b:66:6a:27:aa:df:37:e9:77:
35:76:23:67:39:f8:41:de:a3:64:a9:c4:33:1f:b9:37:7f:b2:
bd:ce:64:62:02:1e:7d:58:bf:36:c6:81:f3:2c:06:a1:ef:58:
6b:f6:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:51 2026 by rpki-client