Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: gFbWUPXxIq1LBTnJJvigKkHWgZtG1Q73J2pQLk1FtHY=
Subject key identifier: 09:1B:2D:FE:84:78:1A:66:4D:40:DD:6E:7C:02:8E:9B:25:47:FD:35
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 01A16DC8BE0CC5733888D3C2E96619A059E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 02AD
Signing time: Sat 24 Oct 2026 12:00:34 +0000
Manifest this update: Sat 24 Oct 2026 12:00:34 +0000
Manifest next update: Sun 25 Oct 2026 12:00:34 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: VSU6surU5VXjBlbKGjDQtpyg7mVm6QAfYPguM++emOY=)
2: JC6UtmVBO8VJzjh22JEE90WPBsE.asa (hash: p4seOistkJnJ4dooR7tbwqr+TdgvspSEDiOOuu1HEBs=)
3: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c8:be:0c:c5:73:38:88:d3:c2:e9:66:19:a0:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Oct 24 12:00:34 2026 GMT
Not After : Oct 25 12:00:34 2026 GMT
Subject: CN=091b2dfe84781a664d40dd6e7c028e9b2547fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:5f:f2:51:85:41:a8:81:b9:47:46:72:ec:
91:63:d9:e4:62:65:11:5e:de:f6:f9:82:3e:16:3e:
33:e5:2b:98:de:e8:89:20:e2:88:b1:fb:b1:a6:58:
ac:63:ee:f2:ac:3d:b0:71:81:b7:d4:95:16:41:bb:
f7:f6:e9:3b:4b:48:73:b5:ae:6e:8c:1f:8b:50:b6:
6b:11:87:15:61:27:c3:65:63:78:19:c4:18:d9:73:
a3:bc:cd:7d:30:fe:63:ac:3a:80:01:2a:99:45:c5:
56:fe:7e:a2:81:c8:d5:fb:f4:ed:0d:3f:b2:8a:63:
68:c2:12:38:39:1b:d9:25:e2:d1:42:e7:ef:05:e3:
6a:f8:b1:f4:0c:7e:7d:15:10:e8:b0:dd:57:7a:3c:
15:53:be:93:be:d6:52:84:a2:76:98:6e:8a:88:42:
d9:c0:49:0c:39:27:c2:82:15:dc:68:d4:44:57:39:
39:14:cd:57:67:09:cb:1d:73:de:59:ad:ee:4e:85:
f8:96:ad:31:55:b6:b6:96:62:db:79:2d:e8:53:15:
47:66:b9:71:c1:2d:a2:16:36:67:35:82:88:78:f1:
0a:58:94:ca:1f:51:e3:19:19:e3:e2:ae:c7:9c:08:
86:50:c0:1c:11:1c:e5:a4:ec:e3:6e:e8:57:71:e3:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:2D:FE:84:78:1A:66:4D:40:DD:6E:7C:02:8E:9B:25:47:FD:35
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3c:3b:ff:6d:ca:8d:28:7f:02:ec:c2:78:36:55:5a:8a:ff:
ac:a7:c2:e2:bf:19:55:b1:c1:4f:e5:43:94:6f:e7:1f:31:35:
22:f7:75:e5:c8:cd:9a:2c:a0:b7:d6:56:bb:0d:56:20:fa:e8:
9c:54:a2:98:c4:51:03:3a:56:f0:ad:5d:c2:69:7d:62:d1:97:
4f:bb:fd:91:f5:f7:c1:31:0c:f2:68:7b:4a:19:df:53:71:a5:
49:a7:6a:dc:6d:d4:7e:5e:2b:7a:38:56:68:cc:bc:23:ef:d0:
c4:46:b6:ab:47:ff:87:6e:f2:45:29:36:59:29:aa:8d:1a:08:
5c:96:67:4b:4a:b2:f0:26:c9:67:de:71:91:35:f9:bc:f2:44:
8e:b8:e0:1d:a2:3a:05:ee:a9:95:b5:f4:3d:29:e2:0a:56:a1:
7e:61:fe:0c:d3:00:a0:d9:f7:55:8a:e9:11:ff:05:48:c0:09:
da:c7:2f:02:4c:24:a5:1b:9e:6d:58:65:d5:1b:2c:d3:a9:5a:
2b:06:ee:e2:e5:10:85:6f:00:b5:37:c6:e8:37:6c:9a:9a:43:
36:f2:93:f5:08:72:52:88:86:17:d3:1b:78:fd:78:41:4d:dd:
06:f5:88:84:ac:f9:ac:46:9c:b0:ef:61:49:4c:4b:ce:81:c6:
18:7a:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:54:11 2026 by rpki-client