Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier: j9rpNwzVI6vc0vxAh7w9PQLY887RuthZjxZZ9bJfR0Q=
Subject key identifier: C0:A4:C8:C5:47:96:92:88:E4:A6:D7:16:80:1E:2C:9A:61:82:F1:68
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 01A17F2B0A0DFCFB44C596C2F8D0D34A465C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number: 0823
Signing time: Tue 27 Oct 2026 21:01:29 +0000
Manifest this update: Tue 27 Oct 2026 21:01:29 +0000
Manifest next update: Wed 28 Oct 2026 21:01:29 +0000
Files and hashes: 1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: 4rkIjKh10JVJKCgxjOXREwpvOOz87rTFhGMaGRanuL0=)
2: 5hSNwWLNWCAUYLUKlFOgbC-vsKw.roa (hash: fkCkSIkOMr1NgMDTMDUskq39VJ7KZjaa4kYDj6t+Z0w=)
3: 7CXmH7ThrZok20WiAGjCXCBOzas.roa (hash: ML0vggVdekDweRUo8ISIsoQBBgpWCyTUPYs8nGYXR2s=)
4: 9-C51BQ9GR3x8sWko39QajrgzuQ.roa (hash: 1bZx3qAnqXddYhE0b5hAmr5qKot7DzAZND6Oe0URbRY=)
5: 92Ks2sFC0w0p0AIFF49f1gWqGCY.roa (hash: D1mBgUfkWtkbrrO6F1qZG97Uv8V0Ofc3+kHoQHbc2Zc=)
6: R9yQDUpo9qSNelx0KQxWO9fm9iA.roa (hash: RSvmXKJf5yDyS1EyQpjsuSAr6t0VEWEQu/Rk/10QmtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:0a:0d:fc:fb:44:c5:96:c2:f8:d0:d3:4a:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Oct 27 21:01:29 2026 GMT
Not After : Oct 28 21:01:29 2026 GMT
Subject: CN=c0a4c8c547969288e4a6d716801e2c9a6182f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:a9:2f:6b:b2:aa:85:c9:70:36:ec:c6:0c:
cf:32:13:66:1e:ba:c7:27:36:d0:13:26:1e:95:60:
33:80:1d:cc:9b:2d:91:cc:89:6b:4b:97:9b:b9:92:
e6:ce:c8:07:f1:44:a2:2d:1f:33:28:83:a4:c2:6b:
bc:00:74:d6:71:16:de:c6:cb:b5:56:79:1e:50:f7:
8e:cb:ab:fc:be:ac:e8:53:b8:06:1f:46:71:f2:22:
21:73:6b:66:1d:0e:08:ce:6f:4c:90:98:ff:20:d3:
e6:e7:24:19:43:67:68:9d:f6:12:05:34:c1:df:bb:
d7:14:c2:12:f5:13:d6:11:98:af:6d:8a:8b:13:6f:
06:9c:7e:37:74:f3:9c:ba:83:25:f2:5f:31:4d:e2:
b1:68:80:7c:18:e5:bf:ce:78:b5:aa:b3:ce:fd:38:
be:c4:a7:95:a4:60:e7:be:ae:8d:b9:fa:82:9a:3f:
82:fc:fd:c9:a0:75:01:98:27:28:f3:03:5c:d2:8c:
58:06:68:e0:a0:c6:4c:9b:86:d4:84:72:bf:0b:5d:
34:ef:88:14:79:c2:5d:c7:61:a2:e5:57:a9:a6:9d:
4a:33:82:3d:86:6a:46:b8:38:c4:ea:93:12:95:34:
8b:21:d1:dd:a9:0a:ab:6e:b4:57:7b:3b:55:ff:5a:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:C8:C5:47:96:92:88:E4:A6:D7:16:80:1E:2C:9A:61:82:F1:68
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:1e:88:9f:50:3a:65:0d:f5:31:96:14:a8:88:d6:59:bd:
92:f6:a9:5a:83:ef:8c:90:cf:a9:f7:7a:99:da:47:40:09:84:
d4:88:05:02:84:ad:54:b1:79:aa:37:f4:e9:9c:80:19:1e:b4:
9d:7b:32:21:f9:be:18:9f:4e:26:65:00:32:61:f8:31:f7:3f:
03:6c:8f:10:dc:26:70:8a:ca:08:6b:2a:a7:c5:0a:26:36:4b:
fa:d0:57:45:3c:65:67:e5:a3:af:12:d1:31:94:ae:c1:12:4d:
ea:88:d8:9d:28:78:eb:b0:53:f7:b7:c5:be:05:9f:2a:50:65:
3a:a0:d6:62:ab:5e:ae:b8:fa:81:6b:b5:57:0d:af:09:98:6d:
f3:e8:ff:39:66:0b:6e:03:ea:f5:ce:2b:5f:5f:41:bf:ca:7d:
f1:8f:77:a5:d2:9a:0a:7c:65:a1:e1:ca:e5:ef:94:c5:a5:8c:
37:10:98:15:f7:87:c3:9a:c9:42:2c:cb:1a:df:ae:e0:6a:18:
55:88:32:a0:b0:8b:65:b1:73:07:38:92:39:6e:91:f2:0f:85:
b1:f5:2f:a9:d5:3b:7d:fe:3e:b0:8c:0a:e6:04:4d:95:71:a2:
8c:d2:d2:59:67:45:0e:d2:69:a9:c9:61:71:c0:93:22:31:82:
52:5b:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:56 2026 by rpki-client