Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
File: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft (raw, json)
Hash identifier: zeC1h3Q52uyLTSw2v54a9bB9jF47RrLXMvvw44ah7kI=
Subject key identifier: FF:7D:74:AC:FC:3A:B0:2B:C5:CE:81:51:06:66:78:3F:B7:6F:B0:AB
Authority key identifier: DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
Certificate issuer: /CN=dad370668e7283500eb708183744371e429a85e0
Certificate serial: 01A03F3BC0AD94D81D894D6B24641A0BE5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:15 +0000
Manifest this update: Wed 26 Aug 2026 18:01:15 +0000
Manifest next update: Thu 27 Aug 2026 18:01:15 +0000
Files and hashes: 1: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl (hash: XzELi7SwShXoxsaoLhfE+y27I4Hd+YXwnynnant/Rm0=)
2: YRs_QI7zgxVrkN0RQbqIXsoAg50.roa (hash: 5qwG/8GveM14Sa66Ok5aIoiuPZ7/iHryFybesAmLnK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:c0:ad:94:d8:1d:89:4d:6b:24:64:1a:0b:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad370668e7283500eb708183744371e429a85e0
Validity
Not Before: Aug 26 18:01:15 2026 GMT
Not After : Aug 27 18:01:15 2026 GMT
Subject: CN=ff7d74acfc3ab02bc5ce81510666783fb76fb0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:7e:f6:d1:29:5b:1c:9a:8b:fb:a9:f9:a9:
57:09:14:80:be:69:09:85:4b:05:ae:f4:19:8b:d1:
7f:a5:5c:3e:0f:d2:e4:c9:81:a1:36:ae:11:fe:86:
ef:32:df:2a:54:c4:d1:f6:08:3f:ac:8c:97:7c:29:
9c:de:ba:02:b5:e7:48:13:77:c7:05:2f:77:0b:1b:
d1:a1:5b:80:00:84:ff:04:26:2c:12:26:bf:4b:d0:
60:93:f2:7f:de:a0:31:3e:e7:45:d7:3d:32:4b:a8:
6c:64:44:0c:6a:d3:49:45:52:fc:38:4f:cc:4c:0e:
80:2d:0a:ee:d4:50:02:d5:1f:db:ca:83:46:7a:57:
e6:8c:b8:fe:a9:c3:1c:de:35:16:96:7d:12:8c:31:
2a:d0:04:e8:af:72:b7:cb:3a:19:9f:51:89:12:0e:
86:1b:9f:5e:bd:81:ac:47:97:f8:89:0c:f7:e4:c2:
d9:15:2c:79:d0:9b:cf:1d:55:02:e4:05:cb:5f:43:
25:03:a8:db:3f:4d:fb:62:1c:ad:76:10:9c:af:f1:
22:cb:3f:80:75:99:14:02:2a:da:2f:de:ec:b2:ad:
15:f1:3d:2f:cb:73:be:71:b4:83:57:6e:15:bb:77:
3b:21:f9:3b:db:52:87:44:a4:9e:b1:6f:06:77:f5:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:74:AC:FC:3A:B0:2B:C5:CE:81:51:06:66:78:3F:B7:6F:B0:AB
X509v3 Authority Key Identifier:
keyid:DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:88:ba:47:29:ce:db:4a:41:47:02:f5:8f:89:ff:f4:dc:
98:bf:43:25:ef:27:27:3a:ea:37:e5:69:4a:1c:aa:a5:38:a1:
c2:c3:c9:59:9d:46:ba:25:5c:de:5d:f9:37:42:82:9b:fd:3f:
7d:6c:c9:7a:e5:cf:91:74:21:f0:41:e9:33:2f:5a:5b:5d:80:
10:5c:8c:c2:19:d8:5c:65:9c:79:fc:c0:ee:4f:b3:2c:9c:1f:
bd:ea:42:76:cc:97:85:e9:e0:d8:05:e1:b1:9a:a9:ff:d5:85:
7b:2d:e8:4d:54:22:9c:b7:e2:f4:b2:ab:a7:82:9a:e9:0c:5b:
b2:85:c4:bf:a6:df:f2:4a:2d:88:01:0e:80:eb:bd:d1:0c:6a:
d8:0c:17:0f:bd:81:cd:cd:e5:53:2f:36:72:54:df:77:10:8a:
43:2d:65:9f:e2:5b:4a:0c:76:dd:b9:bd:7e:5c:3e:de:a1:89:
51:88:a9:8b:69:e7:cb:7c:19:31:6a:af:80:28:6a:cd:f5:42:
63:48:08:fd:d0:10:b8:38:bd:66:85:f1:4a:b3:1f:40:0c:d7:
d9:45:a8:dd:cb:25:66:17:ff:52:c2:ac:0e:ea:66:42:c9:7e:
06:cc:69:b2:38:0d:24:99:d9:21:16:cb:8a:b2:f2:8b:9e:d6:
c7:49:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:27 2026 by rpki-client