Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: 1NjwBdxx+pf4PwnYJu3ftwNWJ9uN8VjEReoYzv9Hw1E=
Subject key identifier: 20:0C:B2:7B:07:75:C3:9D:E3:A4:B3:88:2F:3D:90:B2:A8:E0:47:39
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01A140BA1227840FC59522D986EEC0C4EF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 18:01:38 +0000
Manifest this update: Thu 15 Oct 2026 18:01:38 +0000
Manifest next update: Fri 16 Oct 2026 18:01:38 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: 15zq8MBt1ZFkz6vDow+a3o4W+Cwizh2g18X3sJFrijo=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:12:27:84:0f:c5:95:22:d9:86:ee:c0:c4:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Oct 15 18:01:38 2026 GMT
Not After : Oct 16 18:01:38 2026 GMT
Subject: CN=200cb27b0775c39de3a4b3882f3d90b2a8e04739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:12:a9:b3:ee:4e:90:5b:88:54:ec:2f:cb:
f2:3a:8e:a5:b9:f4:22:f9:20:cf:34:a2:9c:c1:9b:
b6:b2:6d:9e:ef:8a:82:83:ec:33:e4:18:1d:07:fb:
57:3d:a9:ff:ee:e4:97:21:6a:8e:85:91:65:6b:0d:
5c:3a:f7:af:f1:5d:b0:b8:5e:5a:a8:83:65:a6:c3:
c2:a5:b6:b4:b5:6b:85:88:79:c1:6d:a6:e7:42:3c:
91:01:1c:cb:a8:ad:75:ec:de:b6:09:0d:9a:fe:9e:
02:e2:c1:62:08:4d:48:09:2a:fa:06:74:3b:72:6a:
77:5d:e4:a4:b7:ca:6d:1f:8c:7e:db:21:cf:b4:f4:
e2:19:0e:d0:7d:1c:7b:59:a3:9e:4e:f8:91:d4:47:
2e:a0:86:78:61:7e:73:a4:e5:f3:22:ea:64:b2:e1:
d3:98:a6:dd:34:a5:04:96:c2:0e:1f:b8:6f:25:21:
12:72:46:e2:e0:cb:69:5c:72:45:59:59:7c:04:5d:
10:b0:d7:40:b8:02:22:e1:c6:0d:47:57:d6:7d:22:
6a:52:92:1a:dd:3a:c6:8a:a7:08:19:a8:0b:1f:0b:
fc:52:99:4f:d6:b1:ab:e5:5e:d8:78:b7:6e:08:9d:
be:28:0f:9d:89:ae:dd:7e:d9:6e:b7:f4:5a:0d:39:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:B2:7B:07:75:C3:9D:E3:A4:B3:88:2F:3D:90:B2:A8:E0:47:39
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:56:8d:a4:c9:d2:7f:ee:a5:7e:23:00:77:46:b5:5c:f1:
ef:f0:91:b2:37:1f:a8:9a:70:8d:ee:c4:84:1d:26:ed:47:52:
7f:04:1f:f2:c6:e4:79:5b:7a:b8:b8:99:71:c5:aa:e7:54:0e:
07:41:06:7d:80:21:a3:10:91:0c:ef:01:43:e1:17:8f:a6:d3:
37:c7:f0:06:ca:fd:95:22:e9:e3:57:08:fb:87:bf:9e:38:bd:
44:ee:3e:c2:49:ee:b9:4c:ee:a3:1f:11:4d:d2:47:2d:68:db:
92:0e:13:c1:ea:e2:df:83:09:50:1e:ee:e4:b1:9b:71:e9:f3:
07:e3:79:12:7f:51:6d:2e:43:76:d6:4c:a7:cd:1d:f4:02:45:
ab:41:a5:6c:c3:27:cd:62:8a:ec:0a:fd:19:a5:d9:92:9f:00:
0e:29:a9:51:e7:fe:24:a2:57:ff:2e:24:1d:c3:f5:8e:50:f8:
a2:68:ca:52:e1:c8:35:bd:89:58:5c:35:20:5c:3e:a9:b4:04:
e4:06:98:68:7e:58:f0:31:b1:ac:49:29:44:24:60:56:d1:4e:
da:4b:15:2b:f7:48:bb:33:af:e3:56:d7:5e:e9:ba:4a:ec:b7:
7f:40:55:d2:13:43:1d:f7:93:58:ed:26:0b:9f:61:13:26:fc:
f9:5f:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:38 2026 by rpki-client