Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: viIxDecRA4Pe7aQzXw8Ekv+s+A32FbXcScTLs7RXbh4=
Subject key identifier: 87:4A:0E:9F:9A:3E:DE:EC:B8:4E:63:34:9F:8B:F9:FB:15:B4:A5:E4
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01A13DB8D900A6230DDB7E7C45D2737B8595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1AAF
Signing time: Thu 15 Oct 2026 04:01:26 +0000
Manifest this update: Thu 15 Oct 2026 04:01:26 +0000
Manifest next update: Fri 16 Oct 2026 04:01:26 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: amu1gXQQ8S9kwW5fQR1fKTDwj3GgVZRxfG4Ad9yglWY=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: PjXn4QKAdMOghKALRISTm4-IqL0.roa (hash: h+icQLZcnaE6F7dT/QwpZl3/e8E8hD66lAljtUEwLoo=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
5: q59nE80Upmr8VSTN3A3NbMeVWLA.asa (hash: Yn2ATkZKh87+XmNxohzr8sRlPqZd+ozHrAoAFn2FIq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d9:00:a6:23:0d:db:7e:7c:45:d2:73:7b:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Oct 15 04:01:26 2026 GMT
Not After : Oct 16 04:01:26 2026 GMT
Subject: CN=874a0e9f9a3edeecb84e63349f8bf9fb15b4a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:26:7d:06:78:89:f4:e2:55:ce:0b:b1:bc:
2e:42:11:65:dc:d2:60:0c:ae:9c:85:02:48:cd:63:
9f:ea:ec:13:99:68:70:2d:df:a0:5a:f7:88:d4:fb:
b2:16:db:49:69:cc:36:20:92:6c:45:b6:49:e9:54:
71:e1:b7:17:84:20:af:33:fd:8d:e8:87:94:01:4a:
10:6c:84:18:c0:f2:23:63:b4:8b:26:1e:32:b1:22:
22:66:e6:af:bb:a7:c0:84:df:ff:a2:9a:03:ee:46:
0c:16:3a:37:7f:2d:4d:8e:ed:c5:63:6a:09:b7:22:
4c:f7:ed:2f:72:ce:ef:05:0f:16:51:cd:ee:a5:c7:
3a:28:b6:f6:4b:df:9a:6c:ca:9e:10:0d:e3:53:b1:
1e:e4:8c:ab:8f:56:e5:b4:c8:05:ee:43:84:1c:9d:
8b:69:d7:fe:ac:d9:83:59:34:5d:61:2d:72:71:d3:
86:71:da:12:e6:5b:6f:38:f1:ba:d7:47:51:e1:5a:
59:79:44:59:9d:9a:d0:60:99:d8:b0:51:75:81:ef:
ec:8c:89:07:f9:73:00:ca:ed:3e:4f:1f:3f:fc:64:
86:a8:cb:6a:6c:b5:52:dc:9d:18:c5:65:e8:c6:39:
f9:57:39:70:6f:e2:af:05:42:4b:d5:50:7a:46:38:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:0E:9F:9A:3E:DE:EC:B8:4E:63:34:9F:8B:F9:FB:15:B4:A5:E4
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e7:6b:c5:1d:04:5c:1c:14:80:47:15:16:a3:e0:f5:3d:9e:
61:07:fe:19:e2:48:17:3d:6e:34:64:b3:d1:28:36:92:a1:4a:
2c:db:6a:d2:1f:f8:93:cd:dd:90:56:b4:20:36:50:c3:10:e1:
db:1b:da:b4:99:6f:5c:a3:85:77:94:2f:a3:73:d6:c0:4a:88:
e4:80:44:f0:f3:be:0f:4b:51:1e:d1:3d:ae:ff:27:bd:d2:80:
35:22:7f:75:c9:27:fe:46:6c:1f:32:9a:1f:cf:c0:a4:5f:8c:
11:31:a1:a0:6e:aa:6c:d0:ba:5e:ec:23:4a:04:85:23:e2:20:
27:43:4e:de:8c:7a:74:49:de:4e:fe:68:7d:82:04:3b:3e:8c:
05:db:90:1f:2e:3f:be:49:19:da:a2:89:19:20:5b:94:d0:45:
be:2b:f3:e0:1e:67:e9:1c:9e:ad:f3:40:ec:f6:98:66:c3:56:
eb:40:37:c0:10:21:d3:2e:72:63:34:bc:a1:30:fd:6f:1a:c3:
39:d7:28:dc:7e:4b:d3:e0:e7:1f:85:0c:88:7d:87:c0:f5:71:
b7:02:9b:ed:f7:8c:24:fc:b9:7d:22:ea:6f:63:83:db:81:8e:
28:07:7b:f5:86:39:8f:a9:d8:f8:74:92:43:e2:ea:53:42:8d:
24:7a:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:31 2026 by rpki-client