Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: vvTADY9MuD6Oy3bEw+7Ue9fLVfqctWOvCqICj7v1uH4=
Subject key identifier: 4E:22:1D:70:5C:66:5E:80:36:3F:35:B2:2C:24:80:FE:28:E8:01:4A
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 01A08AFA005D5AB0DD37E92A679CED0E2AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 11:00:34 +0000
Manifest this update: Thu 10 Sep 2026 11:00:34 +0000
Manifest next update: Fri 11 Sep 2026 11:00:34 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: WRP/we7iGJMPrZif19zl8eFBaoSfZSkXU6st+RmpMvQ=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:00:5d:5a:b0:dd:37:e9:2a:67:9c:ed:0e:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Sep 10 11:00:34 2026 GMT
Not After : Sep 11 11:00:34 2026 GMT
Subject: CN=4e221d705c665e80363f35b22c2480fe28e8014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:f6:a4:c2:80:ec:97:82:8a:a8:9a:ab:b6:
2a:5b:27:22:82:e7:b3:2a:b3:ef:f8:52:fd:ed:2b:
26:53:ff:97:0e:45:8e:72:97:75:bc:f3:f8:ce:85:
2a:ad:17:96:8e:93:13:62:0c:05:25:40:cb:74:a1:
4a:17:58:6a:2d:0d:f5:2e:65:4c:73:a2:f2:53:0a:
3c:80:0c:f1:43:3f:c4:5b:ca:ea:a7:3c:7b:63:89:
07:57:3f:b5:f1:2e:79:43:b3:c7:76:05:96:b6:00:
c4:ae:7d:2e:9e:5c:2e:90:ab:58:9c:fb:44:2f:f1:
ea:7f:28:35:6d:c0:f6:19:7e:13:db:52:f1:53:5c:
ab:fc:36:16:b9:09:a6:6c:f1:3e:ee:b2:25:f8:42:
29:d1:91:58:94:57:20:f1:4f:2b:6f:95:67:26:03:
a7:49:45:30:fd:aa:e0:34:65:79:08:d0:58:2b:d2:
66:aa:1d:a2:ff:a0:b3:51:61:5b:06:b7:4b:36:46:
a0:fa:fb:01:fe:67:22:c6:00:e1:fa:f3:ed:94:3e:
c7:67:59:f8:7c:25:42:77:8d:64:53:19:04:67:5f:
b9:39:d8:b2:08:99:03:02:c9:8d:48:ec:ec:79:d3:
5b:89:3b:6b:03:87:d8:7e:56:98:eb:98:53:f0:25:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:1D:70:5C:66:5E:80:36:3F:35:B2:2C:24:80:FE:28:E8:01:4A
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:42:de:af:72:5d:65:05:79:c6:fb:0c:9c:e0:8a:4f:07:
df:68:97:9e:58:9e:d3:dc:fc:fd:af:e8:3c:4c:51:43:de:29:
1a:49:fd:be:2a:ee:0c:aa:88:5b:1d:2a:af:fa:28:f7:eb:ac:
bd:81:40:15:13:19:cd:8d:c4:44:04:1c:a4:42:3d:b6:f8:90:
5c:8d:e0:3b:7e:af:07:45:8c:e6:30:0a:d9:3c:db:a5:89:0a:
d4:6c:9f:f0:77:65:85:18:11:62:cc:4a:bd:e8:52:c0:88:4a:
28:ab:36:5c:d2:a3:df:c1:6c:ff:65:b5:9e:57:83:c1:77:83:
7d:7f:b5:cb:ec:4e:81:c5:c5:ae:91:f5:d5:b1:d7:7f:61:1e:
9a:12:67:82:65:6e:b8:26:9b:c2:0c:ff:61:e0:97:1a:21:44:
4d:27:fb:08:08:18:7a:a3:b7:a8:f6:73:87:22:26:1f:e3:d3:
10:49:71:89:57:8f:98:61:46:0d:56:19:a7:87:d1:7f:51:cc:
aa:4f:a6:42:5c:7e:6c:5d:57:7d:ef:18:be:aa:69:6c:35:a7:
83:cd:33:f6:38:fb:1b:cd:af:90:02:e6:34:f4:16:00:bb:32:
c9:7c:f3:be:e3:82:55:64:01:ab:21:be:2c:1a:7d:19:7d:ae:
e2:6b:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:23 2026 by rpki-client