Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: AJ1QsHZyx99oyciJWNtXJW6ygX0eVZJllbhI20F9SO4=
Subject key identifier: BB:44:16:76:5D:A5:99:20:D3:EF:FB:E7:1A:A8:57:7E:43:78:3A:25
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01A002144B43A311C3407D5B9EE408C8ADEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 1145
Signing time: Fri 14 Aug 2026 21:01:19 +0000
Manifest this update: Fri 14 Aug 2026 21:01:19 +0000
Manifest next update: Sat 15 Aug 2026 21:01:19 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: VSnlTuxynH76QmmTenRUxDeb865LNe7WXcwRcGPrgWE=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:4b:43:a3:11:c3:40:7d:5b:9e:e4:08:c8:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Aug 14 21:01:19 2026 GMT
Not After : Aug 15 21:01:19 2026 GMT
Subject: CN=bb4416765da59920d3effbe71aa8577e43783a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:60:73:4f:0f:32:1d:0a:86:13:6c:93:de:
ea:19:67:55:a9:f4:a3:e6:96:5e:b0:30:e8:1c:f7:
71:38:da:b5:d3:f9:6e:aa:43:bd:6f:45:00:26:f4:
3a:34:6b:5c:73:58:80:2d:4a:9c:84:44:db:ed:2c:
57:88:c3:90:fc:f3:3e:26:00:66:36:28:75:3c:89:
a9:b1:97:9b:91:1e:80:96:a8:e8:67:d2:a0:cf:12:
0f:20:90:97:5a:9d:72:10:e7:ed:c2:f2:1e:0d:bf:
c3:25:3e:02:d3:0c:f1:0b:7f:37:71:0a:11:aa:3a:
58:fd:a3:f3:2a:51:c0:16:91:af:51:8a:2f:5d:77:
a1:b5:08:47:fa:b2:94:73:48:32:45:a2:75:6c:55:
43:c7:fd:c1:65:f1:17:fa:e3:84:24:c4:2d:07:42:
2b:5e:54:ec:d0:9f:c5:44:a1:f7:22:3e:36:b9:a4:
32:5e:f7:c4:9c:a8:44:47:76:1c:08:52:e5:3c:2f:
c2:c6:1d:50:f6:ed:a3:0b:fe:21:0e:7a:e2:fe:c2:
ae:90:b9:41:57:07:5d:5e:01:ec:6a:9f:a2:10:a6:
3a:25:7e:7f:9b:ac:6c:f0:d3:cf:e9:dd:c6:e7:0a:
e8:e6:41:ec:f8:49:6b:3a:75:89:05:4d:fb:46:e4:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:16:76:5D:A5:99:20:D3:EF:FB:E7:1A:A8:57:7E:43:78:3A:25
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:90:fa:18:45:68:4f:01:d8:70:93:b7:9e:f8:58:a6:cc:ea:
f9:84:14:bd:06:fa:f2:a4:9d:91:e8:89:c5:af:5c:b9:90:69:
07:1b:ed:74:7e:84:73:0e:b2:4b:d0:a0:00:1b:3d:99:d7:04:
e1:a5:15:8d:f8:ff:c6:74:46:7e:31:69:b5:2f:b5:a1:be:50:
27:cb:8f:39:78:9e:6b:a5:9a:e0:4f:09:c8:b3:5b:c2:81:3f:
b2:2d:82:7a:ef:cd:d2:26:80:b1:2d:ec:4a:1f:89:6f:1b:6a:
e5:a1:7f:fa:93:62:07:5a:c0:59:5d:62:b2:4d:f8:1f:25:5b:
a4:9b:63:bc:9b:5c:b0:9d:a2:fe:b9:ea:43:9f:55:91:e3:22:
fe:e6:14:d0:cf:49:b7:3e:5e:6e:a1:2c:59:e0:9e:cf:b3:50:
f0:cd:52:b4:63:41:c5:7d:8a:d3:4b:b7:ed:d4:1e:90:a9:d0:
ea:72:7d:de:e7:ec:d6:e2:b4:c5:3b:82:a7:2b:83:0f:09:ce:
17:aa:66:c1:ca:90:8e:be:d4:4a:ea:63:15:31:35:c1:38:4e:
b9:ff:57:bb:18:ff:38:77:33:28:a5:3a:c6:85:6b:c1:49:44:
58:f6:d6:20:ac:96:27:fd:b3:54:25:22:0b:7a:33:17:4f:9e:
b1:e3:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:36 2026 by rpki-client