Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: +Tiwv5aJ8vNIVo+mlkmGWJiEPpo7B2y54N/N+t0i01U=
Subject key identifier: BB:E8:41:83:6A:0B:00:61:DF:37:1D:BA:FB:1E:1E:6D:BC:24:7C:79
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 01A17D3C86375E5A4C42FB4D4BAC68546169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 18CC
Signing time: Tue 27 Oct 2026 12:01:20 +0000
Manifest this update: Tue 27 Oct 2026 12:01:20 +0000
Manifest next update: Wed 28 Oct 2026 12:01:20 +0000
Files and hashes: 1: SlreLJKQ_DkqduATGqA6lqJDbOk.roa (hash: wESW+iKwV026/S9NWzhgpiTlKH/IB4iP5UQlySv5rfs=)
2: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: mcaz9oviMDy5KAvdGXveLGzYz0EPGLxL1yrtu9GHYwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:86:37:5e:5a:4c:42:fb:4d:4b:ac:68:54:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Oct 27 12:01:20 2026 GMT
Not After : Oct 28 12:01:20 2026 GMT
Subject: CN=bbe841836a0b0061df371dbafb1e1e6dbc247c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:a9:d9:c2:f1:3b:0d:f4:bb:b7:af:13:ce:
07:41:eb:b7:2f:f0:22:a7:0d:cc:db:fc:e0:ee:1b:
2c:76:56:38:81:a7:78:e1:dc:b7:6f:56:8f:6d:3d:
48:a2:72:15:d3:45:62:41:f5:b2:77:58:d2:9f:0e:
c7:13:c3:78:e7:32:4d:7a:1a:ad:5b:fe:ec:a7:41:
5c:9f:3a:4f:ea:b3:e4:5f:32:aa:13:a9:b0:57:86:
fc:6b:fa:b2:35:5e:1d:41:dc:cc:1e:0d:65:e3:e0:
1f:ac:78:74:a7:a3:ed:bc:66:5f:bb:ac:e2:74:8f:
7a:99:58:3c:cb:e3:22:7e:69:d7:98:2b:5b:ef:be:
cc:10:f5:24:9f:e0:7e:78:d8:a1:dd:8f:2d:2f:cb:
2d:89:9e:58:28:6c:25:21:a6:62:c4:7e:ec:4f:09:
84:45:be:82:b5:a1:72:fb:bb:f4:ca:51:2c:bd:14:
3f:c2:e0:3e:bd:97:d8:4c:63:6c:0c:d0:2c:dd:12:
49:ad:35:0a:b9:22:11:98:7b:a4:16:25:1d:2c:eb:
99:ca:a3:36:1e:28:28:91:12:ee:50:66:9c:4c:01:
67:6a:91:5b:14:09:bc:76:c0:77:6c:34:04:98:7e:
cf:2d:a8:32:c9:43:82:8b:1f:8d:da:87:07:ba:98:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:41:83:6A:0B:00:61:DF:37:1D:BA:FB:1E:1E:6D:BC:24:7C:79
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:6f:09:b7:78:3f:f8:42:e8:10:d6:df:be:07:36:f5:21:
51:d6:00:f0:bd:c5:c2:ee:98:c4:10:ae:0f:d0:cd:89:52:4b:
27:c0:13:e7:17:c2:95:01:b1:77:f3:2d:53:ee:2d:d0:f4:37:
dc:a3:88:06:a6:80:70:e7:c0:f2:33:b7:df:49:95:36:12:5a:
bc:c5:c9:2f:c3:44:c1:16:fe:52:a0:64:4d:0b:e5:19:7a:1e:
bd:a6:35:87:6b:c5:8a:8d:56:49:a7:e3:dc:82:0a:8b:bb:9a:
0c:0e:c6:59:3c:8e:1f:96:f9:cc:76:3b:d7:7e:35:b3:a4:c6:
3f:1e:3c:fe:60:f8:94:43:b2:af:bb:05:51:e1:2c:cb:60:5c:
a3:7b:c8:d9:e8:f7:1e:09:5f:3e:59:17:11:6c:1c:32:15:b6:
e0:ff:e5:3d:95:f3:1f:2c:fb:44:1b:02:5d:ed:04:e3:cb:23:
ce:28:52:b4:0c:2a:ea:47:51:94:59:8b:2f:9c:62:8b:5a:60:
f1:9c:88:21:5b:d9:d3:c1:51:20:f8:6a:d0:a8:14:18:26:48:
be:36:43:dd:4b:5a:d7:2b:5c:a3:c2:a3:d2:a7:d6:bc:23:95:
9a:f6:23:53:bb:01:07:d8:89:f6:fd:42:64:2b:6c:99:c9:6d:
d4:95:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:05:33 2026 by rpki-client