Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: tUn6HjPy6+bJy4O095DDTBxX56KwwfQaeOhX11LmtgQ=
Subject key identifier: FE:4F:1D:30:E5:CB:80:99:68:6A:42:93:B5:3D:1F:A6:27:1B:AB:C6
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01A11F400B6D22C57E03462A6ED8AF4BBD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1A96
Signing time: Fri 09 Oct 2026 06:00:53 +0000
Manifest this update: Fri 09 Oct 2026 06:00:53 +0000
Manifest next update: Sat 10 Oct 2026 06:00:53 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: 1UjDB1pMQC5PiLqXl6raIbaZscCEd/siwmXKew+oe3E=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:0b:6d:22:c5:7e:03:46:2a:6e:d8:af:4b:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Oct 9 06:00:53 2026 GMT
Not After : Oct 10 06:00:53 2026 GMT
Subject: CN=fe4f1d30e5cb8099686a4293b53d1fa6271babc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:ff:b8:be:fd:e3:fb:0b:f0:f8:48:e7:85:
bf:c3:95:a6:83:7b:8e:55:e3:7a:5d:6c:59:b4:c3:
db:32:fa:7c:84:a8:56:83:c5:f6:90:3d:9d:66:7e:
9c:28:0e:ec:31:58:50:59:ec:ec:56:5d:8e:d2:7f:
59:5b:b3:46:67:da:ff:b9:82:85:88:57:43:d1:c6:
44:2e:f2:2e:72:d7:3c:13:3a:62:d9:d9:13:12:40:
58:42:7b:d8:77:51:ba:0f:78:1f:a7:a4:05:d3:53:
c4:3c:2e:9d:5e:b0:0d:4d:aa:74:13:b4:ce:4e:fb:
b7:41:c7:de:20:f7:b1:dc:93:68:21:9e:ba:c8:8c:
31:93:8e:7d:dd:93:62:64:7a:7d:d5:9c:a1:35:ca:
b2:82:2f:51:8c:55:5d:13:a9:16:a0:60:cb:f1:56:
55:f2:2f:1d:a6:a5:36:40:cc:c8:9d:ab:9f:bb:5f:
02:08:54:43:80:e3:b4:9d:0e:b0:ca:a3:e7:32:2f:
76:15:5f:5e:8e:26:08:bb:cf:6c:63:a6:e5:f8:ba:
34:64:21:d4:9e:a1:82:a3:70:b6:7f:d2:cf:ee:5f:
ef:70:a4:d0:0b:bd:82:0d:68:3b:06:04:1d:df:2c:
33:49:ad:9a:dd:4c:8f:aa:69:80:cc:40:af:99:93:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:1D:30:E5:CB:80:99:68:6A:42:93:B5:3D:1F:A6:27:1B:AB:C6
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:d2:11:cc:93:1d:9f:25:2d:14:89:b0:0e:75:d4:8c:13:
17:61:84:d5:09:75:64:8f:cf:05:85:70:30:6b:8a:ff:f7:56:
0a:d9:7a:96:4a:ec:af:b1:42:2d:0a:96:bf:3d:14:57:0b:14:
a9:36:c0:99:95:7f:2b:dd:3e:a6:1a:0e:47:95:85:46:bf:56:
27:79:92:62:1d:f5:23:af:82:69:31:bd:9e:d6:35:a2:ec:86:
3f:c1:7a:61:e2:f6:ed:ba:3a:b1:27:6d:0c:ee:f6:4e:19:bd:
fe:61:ab:40:d3:c0:79:63:98:4d:da:57:76:b5:74:83:09:f7:
29:90:2e:df:9c:1e:9c:6e:4c:b6:82:c4:d0:f2:7b:8a:75:f7:
94:17:11:ec:ae:2d:ec:1b:76:e4:ed:ed:1d:e3:9e:aa:30:f3:
62:78:c8:ae:65:bb:45:02:db:75:d9:55:59:5e:c0:01:70:7a:
08:b1:6a:e8:0a:8f:cb:dd:c4:96:e7:81:84:06:4d:93:0d:5a:
c2:e3:43:34:67:26:be:bb:49:89:75:32:54:e3:54:e7:aa:88:
f4:61:2b:cc:d1:7e:49:5f:7b:c5:74:20:94:85:48:34:b2:0e:
fc:4f:63:e2:51:81:7f:3e:2f:d3:9c:bd:fe:9c:0a:e3:ee:e1:
49:f5:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:28:45 2026 by rpki-client