Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: n/Nac5FjDcP4TtLpsIN97ZmxE5tneXYIunBfxppl5ec=
Subject key identifier: 04:08:21:B4:90:EB:D0:6D:90:00:87:F7:A9:A0:F8:00:99:75:6B:89
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 01A13E5CD275DC0A2F0CD6AC29FE22AF38E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 08E3
Signing time: Thu 15 Oct 2026 07:00:32 +0000
Manifest this update: Thu 15 Oct 2026 07:00:32 +0000
Manifest next update: Fri 16 Oct 2026 07:00:32 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: tqIfqjSJmIBsB0Jh6yHpriMUDPeWKh7Pwj6DuPYwE+w=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:d2:75:dc:0a:2f:0c:d6:ac:29:fe:22:af:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Oct 15 07:00:32 2026 GMT
Not After : Oct 16 07:00:32 2026 GMT
Subject: CN=040821b490ebd06d900087f7a9a0f80099756b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:ba:45:98:bc:c9:20:69:69:a0:b7:03:49:
98:1d:c8:0e:2a:9f:7d:7a:82:30:15:02:43:2a:fc:
3e:c2:eb:6f:67:49:0b:dc:2c:b3:15:5b:81:63:bd:
20:e0:22:bb:b9:20:a5:48:a7:34:6e:fa:b3:d2:8f:
0f:10:c8:78:4b:3d:f6:e6:6e:9f:c0:5a:40:b1:42:
23:15:04:83:c3:71:d7:07:16:03:1b:53:0f:a0:ac:
88:d3:a6:86:67:35:4a:1a:90:53:aa:b3:b4:b5:44:
ad:ae:be:6b:8f:c0:ee:6a:fd:7e:cd:42:46:84:7e:
d9:e3:3f:b8:08:e2:00:70:9b:fc:32:f2:07:0b:09:
d9:78:41:9b:db:95:42:d0:98:be:eb:b6:08:69:fc:
0a:30:f2:61:d1:b6:06:9f:47:08:69:8f:c9:bc:eb:
cf:fb:69:b8:b7:91:33:27:ad:7f:7b:ca:02:4d:16:
5b:75:03:f9:a7:51:06:d1:9f:09:4d:e6:74:2e:d2:
21:76:3d:f8:b0:09:53:36:dd:5d:63:57:4d:79:4b:
0c:ab:40:1f:ea:e2:a2:ef:fe:55:11:18:18:c8:a5:
03:70:06:9a:47:75:04:d2:76:2d:68:d2:81:fc:21:
98:d3:f9:2b:6b:c2:3a:9b:70:0b:b5:cd:c0:df:ef:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:21:B4:90:EB:D0:6D:90:00:87:F7:A9:A0:F8:00:99:75:6B:89
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:64:59:b2:6e:fa:f7:ad:ab:58:31:8e:18:b1:df:7a:61:
f7:a1:0c:31:30:de:75:2b:c9:6c:07:91:e0:25:c2:c0:84:c9:
71:e5:ed:a8:0e:7f:40:6d:84:75:b4:15:da:5d:d5:b5:ca:a5:
a8:3b:bf:e0:b2:fb:42:7a:81:98:b3:98:22:48:d2:65:86:cd:
a3:fc:a1:4d:18:31:26:e0:48:db:4f:23:41:ed:ce:a4:64:9f:
6b:f9:9e:74:c5:68:50:ba:3b:34:6c:2c:d4:09:e8:2f:d3:14:
6d:6c:bf:fa:65:61:fc:34:f1:6f:e8:bc:87:69:ae:6a:a3:9b:
0c:be:e4:6e:ef:8f:92:00:c6:d7:65:c5:70:6d:c9:12:bf:91:
53:c8:a4:37:8e:11:8e:a7:bb:db:25:72:6d:03:9b:e4:6b:a2:
23:af:0f:19:54:6a:7a:6e:8f:14:be:db:46:20:3d:70:ab:bc:
4b:fd:04:d9:a7:b7:21:42:4d:6a:63:96:78:e9:81:89:f6:37:
8f:95:0f:c5:03:d7:bb:bf:66:5e:f9:48:a9:3e:aa:1d:13:94:
06:ff:14:7b:b4:df:68:d0:1e:03:54:99:02:0b:de:1a:af:81:
5f:af:b8:91:1f:47:a8:4a:0b:96:0a:c5:05:cb:fd:d0:ec:8a:
9d:e1:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:33:10 2026 by rpki-client