Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: W24v0qt4yn58OgAB9g9Sb9gSQDvPozFSoNEraVJ3pRs=
Subject key identifier: 5F:24:D2:A6:0A:61:D3:CD:4E:77:B3:FD:D5:CC:49:D1:1F:35:B8:B7
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01A08CE8D612483DA3A4E5E538F74ED9B24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1A5E
Signing time: Thu 10 Sep 2026 20:01:04 +0000
Manifest this update: Thu 10 Sep 2026 20:01:04 +0000
Manifest next update: Fri 11 Sep 2026 20:01:04 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: NhUAs+o/sCrUq5gXcFieZj+Qz7slXqKI+gTfAY9xOfc=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:d6:12:48:3d:a3:a4:e5:e5:38:f7:4e:d9:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Sep 10 20:01:04 2026 GMT
Not After : Sep 11 20:01:04 2026 GMT
Subject: CN=5f24d2a60a61d3cd4e77b3fdd5cc49d11f35b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:97:29:ba:ac:f7:db:8a:f2:31:07:7f:36:
d2:ed:74:f5:0d:84:62:9b:4b:8c:43:68:aa:48:3f:
4c:c6:3f:6f:1e:ab:cf:90:48:7a:0b:64:61:95:57:
d7:6e:88:f6:6e:8a:cd:d6:2a:ae:33:65:58:55:80:
c2:f5:fd:af:a1:d1:06:6a:c7:92:c2:fa:06:e6:89:
4c:68:d2:1b:ab:21:78:93:68:6b:a6:6a:76:43:43:
0d:a3:73:fa:bd:01:dc:c3:bb:08:6c:e4:00:80:e8:
dc:74:47:56:57:af:1f:fd:94:fa:92:c0:76:db:6e:
06:83:ea:03:28:04:78:75:30:9b:20:57:12:51:e0:
85:7e:0a:fe:f4:31:cf:73:26:06:9f:b9:7a:70:ac:
14:96:27:6b:ab:9c:e3:2f:51:99:7a:59:05:02:ab:
e2:aa:99:c2:27:98:8a:bc:ae:fb:f4:d5:a8:7a:5c:
02:9f:16:ad:6c:78:3c:3d:92:71:e9:f6:7f:10:e1:
6f:85:5b:2d:68:53:ae:7a:ca:0f:4a:34:3e:94:a6:
e8:de:5a:43:59:62:a3:7e:e2:72:25:15:5e:e7:67:
54:dc:23:f5:d2:ba:16:9a:60:8f:19:cd:fa:89:95:
45:14:de:0d:47:9d:be:6f:03:a6:d1:68:c1:40:94:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:D2:A6:0A:61:D3:CD:4E:77:B3:FD:D5:CC:49:D1:1F:35:B8:B7
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:c9:fc:a0:99:b9:f1:0b:cc:a7:f1:5a:bc:99:c8:54:b3:
d7:68:6c:f8:9d:10:81:ef:56:8d:14:a9:8e:f9:97:74:f8:52:
2e:7a:33:1b:3a:12:98:a7:32:a1:5b:81:d2:2d:be:91:eb:03:
a2:cd:62:cc:ae:29:13:81:40:5d:d7:de:b3:99:f2:9c:b9:3b:
20:26:98:46:3d:e3:ea:59:31:e3:b5:68:fe:6b:d8:42:91:e1:
45:f3:77:77:b8:0f:8f:2e:b9:66:6d:37:c8:ef:f9:c2:dd:56:
6b:cf:9b:ab:6c:59:d9:56:fd:17:81:8d:4b:c0:e2:7b:5b:9d:
ce:11:19:da:e5:a4:1f:76:07:ee:45:35:d8:b4:e6:89:ae:42:
77:34:d3:b7:46:b4:0f:59:b0:18:bf:f5:35:1c:46:69:75:ed:
e3:71:9f:f8:7e:ba:53:f1:d7:4e:25:b7:17:d0:72:c1:69:e1:
88:1b:85:a6:d2:7b:91:41:1e:4d:b6:b5:98:bc:e5:5f:38:12:
4c:bd:35:27:5e:e8:41:88:4c:29:25:ca:ff:90:3e:93:60:e9:
2b:50:83:bf:2d:07:ce:bb:3a:54:2a:1c:69:35:d8:bc:31:6f:
f4:da:89:29:c6:00:fc:32:40:71:3b:5e:07:6c:45:22:5f:44:
f1:8c:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:10 2026 by rpki-client