Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: PA2ySgJgyvigFpRiIW/hgfrG7E7YXuMmEq5bR0S817g=
Subject key identifier: 22:4D:2A:E7:CC:4D:CD:67:DE:34:B4:38:23:12:7F:4C:17:90:BE:B3
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 01A138C91091EC37751963CD3AC7C2E22D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 05:01:03 +0000
Manifest this update: Wed 14 Oct 2026 05:01:03 +0000
Manifest next update: Thu 15 Oct 2026 05:01:03 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: NzgiumQifxCoJ4cRp/qDQ+6pN62578xvGhuKBrLh5po=)
2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:10:91:ec:37:75:19:63:cd:3a:c7:c2:e2:2d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Oct 14 05:01:03 2026 GMT
Not After : Oct 15 05:01:03 2026 GMT
Subject: CN=224d2ae7cc4dcd67de34b43823127f4c1790beb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:3e:55:0a:9b:b8:9f:d1:34:39:c8:40:34:
7f:c3:f3:34:79:e1:bc:24:b1:4a:4c:92:9a:d7:28:
da:86:25:0f:5c:bd:86:ab:df:54:05:7d:7b:26:4d:
21:a7:a9:91:c5:df:aa:45:01:2c:60:b7:a6:1b:70:
a8:73:ea:b2:f5:8e:01:18:0a:9c:b8:85:1b:97:09:
38:7f:8b:fa:db:78:1d:93:34:70:1d:11:03:e3:af:
e3:63:ac:d6:7d:18:89:64:ba:c9:41:5a:4f:86:40:
1b:2e:85:1b:8f:5d:bb:f8:18:69:8c:8a:b3:ff:b5:
0b:6f:c6:8b:1b:e7:fe:85:09:49:26:70:02:21:42:
83:81:d3:4d:65:77:36:3f:5c:ab:69:be:e1:b9:a2:
f9:9f:22:8b:ec:56:15:c5:ad:82:c2:c2:bf:c6:35:
c3:da:3d:fb:44:3c:d0:48:bb:31:13:1c:17:cc:2b:
4e:c7:40:fd:47:3e:a1:4a:7c:21:3d:c4:63:00:9a:
4e:dc:a4:cb:58:45:3b:c5:1d:1e:10:ba:38:7a:b8:
b5:61:70:87:2e:29:e8:b3:ea:2f:2d:7f:83:58:1d:
c8:c5:cc:f6:46:a8:d3:ec:ec:b1:6c:0c:b4:eb:f5:
43:a3:1b:4b:47:97:30:24:da:95:ac:d3:f7:a5:20:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:2A:E7:CC:4D:CD:67:DE:34:B4:38:23:12:7F:4C:17:90:BE:B3
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:18:a0:98:bf:29:bb:eb:4d:ea:d9:2b:1e:ae:6d:0a:51:ea:
cc:f0:41:84:00:6b:ce:73:80:e5:7b:8f:30:d9:c5:56:c7:ae:
7b:33:71:df:d7:d4:13:67:55:cc:58:58:d9:f7:68:9e:2d:25:
2d:69:ff:ed:45:0b:41:66:7a:93:52:76:d6:87:7c:2e:be:6c:
2d:a8:3f:e5:94:51:c7:25:52:fa:57:c2:96:69:12:75:3f:2a:
47:22:e8:0d:2f:e3:38:15:f9:ab:cf:23:4c:1c:b7:5a:c8:4a:
c0:c0:5d:03:bb:e7:e6:9b:a7:3a:f7:ee:ea:b1:b1:90:1e:9d:
52:93:45:23:35:e8:18:85:f0:da:b8:82:04:67:64:b3:6c:67:
50:ac:d2:56:c3:6c:9e:a1:c2:3e:52:19:48:b9:98:51:f3:44:
f3:93:55:03:7a:55:cc:b4:bd:87:44:b2:71:08:3e:6e:5a:4e:
2f:5d:6f:b3:33:7e:e4:de:90:3a:5f:ff:43:12:73:38:8e:7f:
ff:c4:ca:9d:3d:3b:f9:e4:b8:64:41:dd:96:b3:b1:13:c7:80:
e9:24:70:85:eb:d8:19:2f:84:bd:9c:3f:4d:0a:22:09:4b:f7:
8f:b3:f1:37:34:7b:10:15:1b:04:40:e9:e1:45:b1:c3:11:12:
be:c3:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:53 2026 by rpki-client