Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: HZ8GxSTZ+Te25+V/KO0N+1qWxqSPWGf15SKsVolu05Q=
Subject key identifier: 8C:19:B9:11:5B:C9:21:B6:88:45:5B:9E:95:F9:6A:C8:F9:BA:21:02
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01A0016F677D80D95D05D14A5929F5C771BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:13 +0000
Manifest this update: Fri 14 Aug 2026 18:01:13 +0000
Manifest next update: Sat 15 Aug 2026 18:01:13 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: k+CfC2d5cRbkjDKYNxa1DwYmddcinqFKRKL9wGnJnAQ=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:67:7d:80:d9:5d:05:d1:4a:59:29:f5:c7:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Aug 14 18:01:13 2026 GMT
Not After : Aug 15 18:01:13 2026 GMT
Subject: CN=8c19b9115bc921b688455b9e95f96ac8f9ba2102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:83:c5:36:ca:7f:b4:02:a8:d7:9b:4f:2e:
3d:12:bf:33:70:44:93:64:29:02:44:bd:7d:dc:f0:
ed:9e:32:30:07:4f:21:f4:d9:c7:82:ae:21:60:b5:
2d:2a:16:d4:03:3a:01:d1:e7:b4:43:88:c1:11:c1:
d0:7f:89:a0:1e:12:10:92:5f:db:9e:16:1c:44:d4:
01:67:b2:3d:89:b7:77:52:a2:c8:ad:e7:c4:05:7b:
27:10:b4:66:c4:87:83:55:4f:c8:f7:41:2a:b2:a9:
21:53:6c:46:83:7e:3d:8e:39:9a:39:ee:81:9c:63:
be:05:05:96:dd:a4:77:68:df:0f:a5:4d:ba:4b:d9:
bb:8a:84:29:ab:16:62:55:2c:7d:54:aa:ab:8a:54:
0e:e7:90:63:c9:86:4a:7c:0c:11:5a:4c:b1:c5:6e:
2c:3e:2c:7a:87:48:8c:66:2f:c0:5a:be:48:93:ae:
75:c9:7e:43:92:bd:c0:55:f9:c3:7b:e5:f3:ad:ac:
60:4c:36:52:65:1f:1c:1d:f2:41:76:ad:45:32:a6:
79:38:1a:9f:0d:a1:ad:bd:1c:c1:1e:28:d7:af:99:
d5:b9:bc:82:ba:31:6a:d3:20:db:ef:6c:75:3b:44:
d8:b1:5e:fd:f7:1b:75:43:e4:e8:de:be:ad:2d:cf:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:B9:11:5B:C9:21:B6:88:45:5B:9E:95:F9:6A:C8:F9:BA:21:02
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:24:73:e5:2e:be:73:c4:cd:14:e9:39:9f:4a:83:ac:fa:71:
1f:d5:6c:55:41:f0:63:38:61:78:e8:47:ba:76:f3:95:48:a0:
58:9f:0a:a5:42:da:e1:94:d9:81:69:df:8f:f1:d9:64:06:65:
14:35:d7:49:dd:09:b7:36:46:96:77:d5:61:24:5f:b1:09:e1:
c3:c7:44:56:22:6f:1c:4a:39:9f:f5:8a:aa:cd:d3:1a:e7:20:
96:84:a1:8b:9c:3f:b1:47:d3:7b:c8:d0:64:b0:35:b9:1c:ca:
39:dd:56:96:03:1d:ae:52:8b:87:6d:a5:93:90:b4:fd:7d:13:
c4:10:0d:4f:cb:39:b6:fe:e9:5b:ad:ad:b0:ec:8a:72:0d:be:
20:88:59:17:67:c4:3c:c5:73:e0:17:37:c5:e1:c2:c3:9e:2f:
f9:72:2d:d8:5e:d8:a8:6d:0f:06:12:ff:b5:cd:83:1b:06:08:
e3:1e:1a:de:0d:76:a6:50:fd:44:f7:2f:68:11:2e:93:41:18:
16:32:5b:0f:6c:83:23:32:da:cd:21:2d:0c:f4:24:bb:3a:32:
57:0c:b3:83:97:3f:c5:1c:96:c8:89:ea:fd:d0:90:e1:76:16:
f8:18:7a:36:f6:97:48:49:0e:ba:46:bb:73:1f:ae:08:05:cf:
b0:cf:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:17 2026 by rpki-client