Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: chGBh+bLu6pog9ou9JtznUBJXU0C3U61GNIM4mPVQII=
Subject key identifier: 36:10:23:2D:16:BC:9F:36:8E:C9:0D:26:05:D4:D1:8B:20:AA:94:F8
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01A1822B9E02EED2502B507885C5A77B0DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1ADD
Signing time: Wed 28 Oct 2026 11:00:58 +0000
Manifest this update: Wed 28 Oct 2026 11:00:58 +0000
Manifest next update: Thu 29 Oct 2026 11:00:58 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: KEkGZRdO2ZFgSjO09OmD5yMiUov3Y1uBKxFH4S+DQBA=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:9e:02:ee:d2:50:2b:50:78:85:c5:a7:7b:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Oct 28 11:00:58 2026 GMT
Not After : Oct 29 11:00:58 2026 GMT
Subject: CN=3610232d16bc9f368ec90d2605d4d18b20aa94f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:92:6b:9f:53:fb:cc:72:25:14:66:a9:69:
57:37:f9:62:6a:57:b9:9c:09:75:15:ff:bf:17:dd:
64:2b:7c:30:0b:b2:f9:24:03:85:fc:63:c5:06:8f:
1b:af:c5:4e:86:19:ae:28:99:a3:89:48:af:41:28:
67:8b:6b:10:43:af:85:53:cb:9d:2e:56:dc:cb:17:
8d:12:a0:8d:5e:85:e9:0b:c4:67:d4:d5:ff:c6:1a:
63:97:17:8e:86:34:72:ed:ee:ff:a7:69:87:32:30:
b6:b0:cc:36:8d:77:1f:4b:22:1a:37:b2:a6:55:d8:
71:d1:39:93:44:c6:d6:73:ee:31:7a:89:10:3f:ee:
d2:c6:41:25:e1:29:88:dc:52:43:c6:69:60:27:98:
62:c0:1e:10:cd:95:8b:fd:1f:ef:3e:1c:30:6e:f8:
82:38:dc:21:76:27:79:0c:9b:d3:a6:41:3e:08:44:
a0:40:a4:81:68:ff:d6:3f:98:8a:de:54:d8:9f:4e:
88:80:a8:df:92:24:44:c8:1a:5e:c0:0f:19:cf:c2:
c4:88:3b:5b:08:83:c3:65:75:43:53:46:f7:3b:5a:
d0:0e:70:bc:9b:c2:fa:ed:d0:8e:bb:1b:ab:f8:b5:
7b:eb:42:6a:c9:c9:60:95:b7:93:36:7c:f3:81:9c:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:23:2D:16:BC:9F:36:8E:C9:0D:26:05:D4:D1:8B:20:AA:94:F8
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:96:92:1f:d5:25:c6:8f:2e:8a:50:b2:87:b1:34:d4:95:
dd:0d:02:cd:1f:b8:53:69:96:8d:b8:2b:88:82:b0:87:a9:7a:
4c:22:e0:37:cb:dc:31:2c:10:b2:4a:7d:e8:47:e2:26:e3:85:
4d:56:44:b1:fa:da:2f:5c:ce:a6:cd:58:3a:6d:48:46:5c:44:
39:c6:26:16:b6:99:74:0c:d2:6e:25:12:ee:71:10:10:fd:8a:
fd:3c:d6:a6:10:d4:b3:97:6e:05:e7:8d:0f:dc:8e:a5:e9:70:
33:a4:34:72:13:11:5e:92:10:3a:7b:17:0b:3f:55:9e:e0:ff:
99:a4:14:33:2a:8e:ec:81:05:f7:f8:8e:a9:86:97:29:51:66:
0a:9a:5a:22:a4:40:75:de:e9:1d:af:0c:3c:1b:dc:14:d1:40:
40:73:9d:fc:c5:db:46:25:4e:75:0f:73:4b:da:e9:62:1a:3e:
c5:11:f6:13:4a:60:6f:85:3f:44:fb:42:91:16:e1:d8:a5:ea:
ed:86:7c:02:be:b6:5f:f2:98:14:76:31:fb:90:4a:5a:3c:91:
55:34:92:8a:12:06:88:4e:fa:47:34:e6:93:88:41:6b:b2:5a:
56:f9:56:70:ee:72:e8:97:86:1c:25:d1:28:26:be:7a:8e:a5:
e7:3d:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:01 2026 by rpki-client