Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: mg8T689yHP33IbMWkHjS2Or1sbphlrr76/SmSayRRrs=
Subject key identifier: 1F:76:A9:1B:AF:7B:00:9F:63:95:D8:DC:EE:E1:6F:20:4C:37:EB:64
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 01A13CA52F61C42D454445B494A4B9EED765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 0F31
Signing time: Wed 14 Oct 2026 23:00:20 +0000
Manifest this update: Wed 14 Oct 2026 23:00:20 +0000
Manifest next update: Thu 15 Oct 2026 23:00:20 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: fxyWyajTKEBFgklJkah38luMF8aKbVY5iXWHgH1F9l8=)
2: RHS11XqX5pjtfXZH7I66Gp4Ow3s.roa (hash: 9qk+uC8E6OyhqYxBRe7jo40pbmRAOPPP2eDmccn/Upc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:2f:61:c4:2d:45:44:45:b4:94:a4:b9:ee:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Oct 14 23:00:20 2026 GMT
Not After : Oct 15 23:00:20 2026 GMT
Subject: CN=1f76a91baf7b009f6395d8dceee16f204c37eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:8f:94:a9:f5:f2:8a:15:20:bd:5e:4f:d6:
99:29:48:04:b2:5f:85:90:d7:ca:34:9b:bd:1d:98:
1d:b5:e7:9c:31:a9:79:8d:a1:1d:62:24:1e:5f:4e:
cd:1d:ff:80:e9:e0:e0:ad:5d:fd:b6:23:55:1e:e4:
93:92:b4:9d:bf:f0:75:ad:c2:e6:5e:84:88:46:fc:
92:29:02:1a:3b:05:bd:c8:31:c0:7b:f2:fa:c4:bf:
d5:6f:95:2e:4b:b0:82:23:f4:24:f6:75:dd:27:dc:
1b:43:fe:ca:8e:c3:ad:5a:bd:6b:6b:76:10:cb:a7:
10:5c:a8:59:1d:80:95:de:28:22:b7:2c:44:f4:fe:
9e:47:ef:74:07:df:df:a8:99:af:5c:c7:cb:72:f6:
1c:5a:3a:30:99:2b:11:b6:33:d9:fe:10:70:99:eb:
50:13:f1:c8:fb:b7:4e:75:37:ea:b4:8b:e6:09:69:
16:b5:0d:ad:cc:b8:91:12:d6:51:7a:dd:a8:6f:17:
22:b8:a0:0f:12:a9:2b:a6:9b:e3:c3:5a:a9:dd:3a:
d6:d4:aa:b6:a5:f6:33:83:62:ba:8a:ae:bd:db:8e:
9a:d9:1d:67:2e:4b:6d:56:f7:07:6b:93:9a:46:8a:
43:6b:4b:3c:78:5f:f8:37:fa:78:d8:09:56:e3:b7:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:A9:1B:AF:7B:00:9F:63:95:D8:DC:EE:E1:6F:20:4C:37:EB:64
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:cd:b8:53:de:e3:c3:80:d7:9c:e8:88:25:a1:4e:e5:fb:
a3:53:84:57:09:78:5e:ee:ba:a3:22:38:37:55:01:16:65:87:
4d:0b:e2:b4:2b:31:40:a4:69:92:42:ba:fd:88:73:1c:7b:8d:
17:1f:14:18:45:df:00:36:8a:5e:20:b5:12:85:22:8f:a8:53:
de:c7:9e:52:9d:c6:00:a6:cc:b6:18:16:5f:b7:4c:a4:87:1b:
5c:0f:68:10:bc:39:0f:2c:fc:76:37:53:9f:30:21:86:a1:1c:
02:48:50:17:d1:c3:10:4a:da:ce:ca:de:85:d9:48:d3:69:04:
0c:4f:bf:74:af:46:2e:54:79:fc:c1:f3:7b:81:7d:05:60:ff:
82:86:11:6c:f0:ce:8a:ae:10:c6:dd:85:b8:d0:95:ac:b5:92:
8f:d9:e1:9f:17:9a:fc:3a:0a:d4:01:06:6f:72:c8:d1:1c:73:
cc:0f:45:a3:9a:0f:8a:7d:dd:36:ed:cd:dd:39:b1:f9:55:16:
2a:34:0a:ec:dc:ce:e0:94:81:d4:7e:70:04:e5:f5:d2:33:59:
78:4f:0c:b3:eb:c1:40:c9:39:5d:85:bd:39:82:06:33:ff:99:
b8:b7:1c:e8:e1:f0:76:57:83:3d:61:89:02:f3:f1:ad:e1:0f:
45:41:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:12 2026 by rpki-client