
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: lxNtTFJ0Pyyv6M5T5RnVpYJaErm8la97L/JChscjRWA=
Subject key identifier: A7:84:86:16:90:59:AD:32:A4:16:67:7F:9F:EC:E8:FB:1D:16:7C:86
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01A00025F1B6E1DFF9297DD711BD4B056631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1A0A
Signing time: Fri 14 Aug 2026 12:01:21 +0000
Manifest this update: Fri 14 Aug 2026 12:01:21 +0000
Manifest next update: Sat 15 Aug 2026 12:01:21 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: Rba4HTDx5s9b8NW5GEAuJntthKk0GZyOviQZJtKQwPg=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:f1:b6:e1:df:f9:29:7d:d7:11:bd:4b:05:66:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Aug 14 12:01:21 2026 GMT
Not After : Aug 15 12:01:21 2026 GMT
Subject: CN=a78486169059ad32a416677f9fece8fb1d167c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:97:68:59:9b:e1:a7:71:37:c0:cf:c7:6c:
31:14:50:aa:2e:93:1b:c9:a0:8d:88:3a:25:57:d6:
b8:d9:49:fb:00:4f:77:7f:fd:4d:e6:4e:42:00:95:
ea:b8:68:ef:fa:bf:d1:4a:8b:da:af:74:1a:66:ff:
cf:0a:e8:42:eb:30:93:9d:b0:62:55:c3:19:be:2d:
d4:9a:3a:07:8a:fe:41:3f:48:69:59:b7:90:cc:d0:
07:63:47:b1:dd:f1:8d:6d:47:b7:7b:6f:ce:1c:38:
33:92:21:39:d3:49:33:71:93:69:98:ba:98:27:17:
78:19:f7:47:fc:3b:c3:f4:a4:95:6c:79:61:25:35:
3d:f7:6c:6d:1a:c5:46:a9:61:d2:45:78:e6:f9:5a:
bf:b1:a6:a1:5a:ca:9c:8d:65:82:bf:f9:c7:e0:e2:
72:9c:f4:b2:4e:ca:dc:ba:7e:90:c4:69:94:f4:d0:
78:45:25:22:3b:36:27:5d:f5:66:e1:ad:83:78:d2:
fd:cf:a9:7e:e9:0f:ad:24:4b:bd:87:13:0a:ed:ab:
88:be:7b:54:b7:e9:97:67:b8:93:fb:a0:80:92:a9:
90:9e:65:57:13:7b:7b:ee:89:f2:76:e2:6a:99:5c:
01:98:75:1d:61:5e:40:43:97:e5:7d:10:ba:db:e8:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:86:16:90:59:AD:32:A4:16:67:7F:9F:EC:E8:FB:1D:16:7C:86
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:2a:9c:4f:37:f7:fe:3a:6b:c0:52:e7:e3:5f:ef:d4:2f:
7c:74:a7:48:8a:97:63:42:8c:8b:9b:f7:73:36:3c:42:70:83:
06:24:07:35:6e:ec:7d:30:a5:e5:e3:95:ff:cd:9f:36:39:db:
32:4c:37:11:6d:3f:ca:7f:2a:4e:2f:ab:ae:d4:2d:6f:2c:06:
e3:09:e0:61:2a:e3:03:b0:e3:0a:95:37:90:29:e8:5f:95:db:
98:6c:8b:dc:75:f3:a1:96:a8:49:93:5a:86:71:7f:5c:af:6d:
c6:10:c9:de:1a:4e:a3:db:09:9f:77:f2:1f:0d:1d:92:2f:f4:
9f:12:70:2d:53:2b:3f:e0:a8:8d:68:3d:b7:29:17:95:63:7b:
55:5c:2d:ee:d1:42:29:88:fb:2d:0f:f4:82:8d:82:46:3f:a2:
6e:26:b1:56:f5:89:fb:bb:b2:b4:53:cf:83:cd:ee:93:ea:75:
33:60:37:e6:f3:16:bd:94:f8:cb:17:0c:fd:c4:42:a3:ec:9b:
0f:6e:51:a6:f3:5b:fa:de:36:d8:76:dd:2b:59:55:19:3f:1a:
8a:1d:3e:b0:58:7e:82:da:93:d3:76:f9:ee:b3:97:23:c6:aa:
60:28:e2:f1:03:bf:59:9e:4a:bd:df:4b:31:43:5a:0b:36:b3:
e4:80:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:52 2026 by rpki-client