Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: rSNLQ7SmPSzsNGlZP/xMjNLINrl+0LJwi005S80YPR4=
Subject key identifier: 24:09:2A:8B:6A:ED:58:39:03:11:F5:13:57:3F:CD:1A:7B:A6:80:C1
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 01A13F70A7344E24EB5D8876AE59005D04CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 12:01:49 +0000
Manifest this update: Thu 15 Oct 2026 12:01:49 +0000
Manifest next update: Fri 16 Oct 2026 12:01:49 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 3ieQSZMV7ztnXH/yIrRScTeY4vf3Gw0thhE9RkautWo=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:a7:34:4e:24:eb:5d:88:76:ae:59:00:5d:04:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Oct 15 12:01:49 2026 GMT
Not After : Oct 16 12:01:49 2026 GMT
Subject: CN=24092a8b6aed58390311f513573fcd1a7ba680c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:0d:f0:de:84:d8:fc:40:19:6f:e4:6c:39:
d6:2b:5c:6c:8f:a3:04:31:b9:6c:73:05:ff:6f:0c:
82:c1:02:e1:07:69:a2:70:9c:61:3e:2d:b9:b7:6e:
7d:12:ea:43:96:82:54:7d:d6:bf:aa:61:e0:94:aa:
d9:3d:bc:cd:7b:3b:00:ed:de:72:3b:62:e2:99:2b:
fe:dd:7a:cf:b8:5e:3f:62:27:a8:d4:7c:36:6d:19:
da:9a:af:51:01:76:6f:a5:38:b7:9b:86:bc:7f:19:
fe:06:27:85:64:96:f7:0f:1c:60:bd:a0:5a:02:1e:
36:e1:08:d5:50:60:d1:9c:ea:b0:eb:c6:4a:1e:05:
8c:38:e8:c8:b8:cd:a6:60:bb:d3:78:f4:57:3a:7c:
1e:eb:6c:f9:ed:95:71:0d:5a:d2:4c:ec:ed:a5:0b:
b9:13:02:f9:8e:9c:c4:bd:ff:14:d8:1a:a9:c3:70:
c5:4e:7e:5c:c9:8a:6e:2d:73:b1:a8:09:ff:cf:cc:
ba:6b:05:93:a4:6c:32:06:6e:68:70:ec:92:e9:83:
c4:aa:bf:72:9a:73:54:52:63:f1:2f:8b:66:a9:bb:
a9:9c:d5:bd:36:25:77:97:d0:07:c2:e8:8c:53:c5:
92:b7:99:86:26:4d:ab:34:fd:48:de:eb:37:37:51:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:2A:8B:6A:ED:58:39:03:11:F5:13:57:3F:CD:1A:7B:A6:80:C1
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c6:7c:1c:af:04:0f:dc:a6:d9:af:af:fd:dd:d6:b1:9d:32:
09:b3:0a:8c:45:d1:ff:da:5c:65:9f:13:3c:f3:0a:45:8c:0c:
bf:26:0c:4c:ce:13:34:eb:5f:d3:7f:1f:1f:ca:27:7d:ca:92:
40:63:fb:37:00:7f:32:8e:af:da:42:b0:65:70:68:e6:ee:05:
aa:44:33:08:37:d2:9e:2e:61:f0:5a:58:d6:16:cd:3a:2b:11:
9b:58:c2:a9:7b:47:e0:78:41:3e:e9:79:5f:67:5b:40:6d:32:
a8:75:0e:6d:54:09:77:0d:f9:c4:a3:8e:eb:4a:5d:06:b7:80:
77:ac:dc:0d:26:18:61:70:ed:23:03:49:04:82:80:13:5f:83:
28:19:95:e8:d2:9c:d9:a0:82:c8:c1:dc:8e:79:2d:73:83:39:
2a:20:b7:38:b2:37:32:71:28:ca:62:33:39:64:34:2d:a3:89:
aa:49:18:bf:11:55:3a:01:be:f7:8d:78:ac:b2:c8:55:12:52:
b9:0c:c4:9a:0f:45:7f:27:b3:82:8c:56:e7:ae:83:73:53:ea:
57:d1:70:fa:1a:7d:37:5c:6b:a7:15:24:ab:7e:6d:b9:6d:08:
5a:2c:52:d5:c8:75:d6:6b:ee:7c:66:f3:c4:87:c5:71:fb:1f:
38:af:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:43 2026 by rpki-client