Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: DBhtgCrfH4qxmvauPqx+nH//YssfNjsNaqCkOBLjJaI=
Subject key identifier: DF:02:B0:6D:09:E2:06:A6:9D:81:E1:36:53:B2:90:06:0A:D7:D6:05
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01A002139A3FDB0398E2A2E3A325B1F4F235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:34 +0000
Manifest this update: Fri 14 Aug 2026 21:00:34 +0000
Manifest next update: Sat 15 Aug 2026 21:00:34 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: Skpx9aPbF+9MD6QkPeFHlLUeLxeB69XZsOeIk6dMYDI=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:9a:3f:db:03:98:e2:a2:e3:a3:25:b1:f4:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Aug 14 21:00:34 2026 GMT
Not After : Aug 15 21:00:34 2026 GMT
Subject: CN=df02b06d09e206a69d81e13653b290060ad7d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:9f:4b:36:5c:5c:f5:b2:dc:5d:00:16:29:
0d:d6:bf:5e:15:ea:28:64:3e:07:4e:48:aa:d8:6d:
67:e6:42:7b:10:c0:fe:b7:21:03:9b:e8:5c:61:09:
4f:1c:8a:49:82:70:1c:dc:84:1e:a0:a9:a0:0e:30:
b2:35:20:01:ab:90:fa:6c:4d:98:4d:7c:a9:ee:a9:
32:0b:cf:ae:08:8b:e3:bf:15:c9:d9:52:39:42:25:
c1:12:74:33:92:15:58:11:43:47:25:33:13:db:a7:
ff:52:69:bc:2d:b0:cd:df:c4:bb:86:37:18:07:b4:
52:95:54:ca:a8:5b:87:29:55:24:6e:e1:6d:db:a7:
6f:8e:33:a0:43:0b:f8:e1:46:40:57:3b:c0:49:dc:
ac:8b:2d:0e:cb:f2:4a:87:ee:6d:83:9d:54:f9:56:
b8:6b:10:54:e4:d0:30:88:a7:f2:53:97:2f:e6:70:
e0:0d:75:88:a6:52:ba:3e:05:ce:1f:d0:ae:b4:9e:
6d:2a:63:d2:45:2b:af:f6:2e:f9:8a:41:73:17:a5:
27:a7:e0:8b:6c:a1:1d:4a:64:a0:8b:f4:9c:db:13:
f9:de:54:6b:25:b6:39:42:c6:8c:70:78:d9:0e:df:
51:7a:ff:44:b9:a8:e8:00:d0:65:6d:8d:3f:60:ba:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:B0:6D:09:E2:06:A6:9D:81:E1:36:53:B2:90:06:0A:D7:D6:05
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ae:4a:29:54:fb:d5:4b:83:61:7a:15:f0:5c:ee:9b:bb:23:
3d:95:fe:f9:26:28:b9:67:c8:db:42:8e:ce:b9:ee:cb:4e:12:
58:7a:9f:3b:6b:23:fc:bf:b9:e3:51:1c:5f:1d:b8:fd:88:61:
95:f8:b2:02:5f:c8:97:83:d6:76:d6:d4:05:3d:b8:67:fc:e8:
85:15:07:98:a9:7d:32:e6:1d:74:2d:63:9f:26:ee:1d:ad:d3:
be:b3:24:37:03:18:fe:95:31:5c:15:8b:92:b8:e6:cd:18:85:
e8:de:75:ad:89:43:e1:3a:ec:f4:99:51:2b:7a:99:4e:c4:17:
53:94:1a:ac:46:34:bf:50:aa:4e:9a:e4:02:3c:04:6d:9e:44:
9d:7e:60:9f:95:38:a2:6f:95:f2:57:3b:61:33:3d:15:cf:29:
90:2d:ce:c6:fa:3f:e3:c8:c4:8b:62:8a:8f:ec:47:9f:84:cf:
bb:b5:9e:9c:df:11:7d:1b:df:7e:e6:8a:3e:76:07:e9:22:77:
37:3a:81:4e:5a:76:cd:6a:6a:ce:e2:e8:0f:f8:33:14:ed:df:
20:d5:48:fc:c6:b2:4b:da:d0:12:4a:ef:e1:5d:82:e1:f7:63:
8c:89:bc:52:28:4c:89:83:5c:59:ca:cc:2a:ad:9b:1c:77:ec:
29:5f:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:46 2026 by rpki-client