Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: NJNFb+NAW4/HdPln1pdiNiWTewb7X/IEBFBV2kadR18=
Subject key identifier: CF:DC:68:FA:FF:38:0B:42:98:EE:5C:59:65:0A:E4:A5:AC:2E:3C:F6
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 01A14ACF3181DE0A5065E9A47D215F6E1D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 15BE
Signing time: Sat 17 Oct 2026 17:00:54 +0000
Manifest this update: Sat 17 Oct 2026 17:00:54 +0000
Manifest next update: Sun 18 Oct 2026 17:00:54 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: /XUPjQ44ffwBxjEFSDMmVJ18vThh+MLAot+25e6AWH0=)
2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cf:31:81:de:0a:50:65:e9:a4:7d:21:5f:6e:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Oct 17 17:00:54 2026 GMT
Not After : Oct 18 17:00:54 2026 GMT
Subject: CN=cfdc68faff380b4298ee5c59650ae4a5ac2e3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:42:49:74:22:07:8b:4c:da:5e:ea:ab:78:
a1:22:4a:27:77:bb:9a:cb:69:ed:32:0e:8f:14:85:
f6:c1:39:5b:e0:df:84:c6:4c:9f:b7:fe:bd:34:6b:
dc:4d:bc:03:1e:2b:01:63:48:39:c6:f7:eb:a7:58:
77:9d:a1:97:a3:09:cb:f0:37:16:2e:24:ac:6b:1b:
00:99:3e:da:1d:97:7d:77:a1:53:5b:85:29:f3:d3:
e8:26:69:d0:fd:94:69:6d:96:ea:24:22:af:c6:7c:
61:b8:e9:cf:a8:69:18:f3:12:d9:13:d3:f7:a7:68:
e3:e2:7e:d4:97:41:d6:5b:51:69:39:56:75:3c:75:
50:c6:bd:3d:9d:27:3f:a9:83:f0:a7:d0:72:03:4a:
1c:25:6d:d2:1a:25:42:c8:5d:a6:5b:8f:ed:2d:b3:
3b:7c:60:97:b5:80:96:92:5b:01:04:97:84:87:78:
f1:b0:e6:49:62:59:e0:a3:4b:1a:11:06:f0:cc:ec:
c3:8c:b2:6b:45:66:9b:2c:7f:95:a8:16:2a:21:1c:
81:39:54:c4:eb:b8:dc:f3:72:1e:6a:a8:4d:e4:c1:
bd:cd:26:bd:ea:37:e7:4f:49:92:d0:e4:da:f0:db:
61:f3:c8:3b:61:6f:74:89:b1:a9:79:a5:36:1a:04:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:68:FA:FF:38:0B:42:98:EE:5C:59:65:0A:E4:A5:AC:2E:3C:F6
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:3c:34:40:a0:ea:cc:64:22:06:e8:61:73:a5:56:7c:29:
95:a2:77:01:3c:a9:e4:28:72:bd:ff:19:67:c3:ea:cc:cf:a6:
f2:d3:4a:0d:1f:75:37:9b:49:2b:ae:ba:52:b0:3f:cb:a7:d4:
a4:5f:69:44:3c:df:41:c4:66:bd:5a:a0:99:ce:52:8c:52:e9:
78:f8:65:2c:b7:09:f5:2c:f6:16:74:9e:4f:25:9a:45:27:de:
44:de:0d:9a:7b:d9:5e:df:e3:7d:15:72:ea:43:a2:75:c4:ba:
59:70:36:ae:a8:01:82:4e:52:81:32:65:30:0e:52:dd:84:b5:
51:9a:5d:b0:f7:d4:cd:36:a8:55:3a:2f:7f:51:18:52:72:48:
26:6f:39:e4:34:8e:b4:ab:1e:c7:70:18:c6:ec:b3:cb:80:e9:
56:dd:a6:a4:b3:b6:8e:77:a6:90:7a:f5:61:b9:26:f2:d8:40:
85:73:be:1c:c6:13:df:7f:1c:39:51:db:2d:c1:73:04:d6:5d:
86:a8:c6:13:fe:83:40:de:90:53:c3:ce:5b:81:f3:07:df:af:
a5:11:4b:8d:d6:19:05:69:05:3d:e9:cb:37:40:77:15:51:1e:
1c:89:90:9e:66:a2:81:2e:80:ce:a7:e0:6c:cb:32:88:8b:b4:
d1:77:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:36 2026 by rpki-client