Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: WGD6PrVh1FEpTAHL22KUyM2ofKGUMOfoVl/q1piFkyg=
Subject key identifier: B8:62:C7:8A:51:8D:C2:52:B9:C0:3F:19:A9:43:0D:2B:23:95:1F:8C
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 01A070CD274A55528CB473CB8700D131A161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 022A
Signing time: Sat 05 Sep 2026 09:01:28 +0000
Manifest this update: Sat 05 Sep 2026 09:01:28 +0000
Manifest next update: Sun 06 Sep 2026 09:01:28 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: 8dPQeyazZcqeO2ntHBGCoIlssNz9CpNuMLo2qu3Pwfc=)
2: JC6UtmVBO8VJzjh22JEE90WPBsE.asa (hash: p4seOistkJnJ4dooR7tbwqr+TdgvspSEDiOOuu1HEBs=)
3: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 07:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:cd:27:4a:55:52:8c:b4:73:cb:87:00:d1:31:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Sep 5 09:01:28 2026 GMT
Not After : Sep 6 09:01:28 2026 GMT
Subject: CN=b862c78a518dc252b9c03f19a9430d2b23951f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:8a:35:07:9d:9d:1e:5a:9f:1a:b2:e1:6b:
e3:fe:81:b3:3c:71:a9:82:2b:ff:61:b0:51:ca:88:
1b:74:11:0b:00:75:e2:df:80:ef:28:f5:f2:f3:b9:
a1:e7:c3:42:c8:8b:c5:c6:9c:74:cd:17:23:4d:90:
ea:9a:d3:c1:de:20:2e:4f:2b:2a:f7:65:24:a6:69:
2f:99:09:76:15:e8:00:60:d8:46:fa:63:60:ab:72:
74:fb:d3:39:2c:88:d5:e7:ae:12:da:e7:de:bc:33:
19:b1:9f:75:cd:fc:c6:bc:ba:c2:ed:07:b6:50:a8:
9f:4d:2a:e0:52:b3:c9:66:3f:59:3f:33:e7:86:20:
ba:ac:3e:80:ae:8e:7c:12:a1:33:27:0c:60:be:b4:
d4:36:b3:54:ca:9f:e0:d6:77:2a:ec:f5:20:ae:c8:
4f:7a:dc:25:f4:6f:44:11:80:c4:da:14:61:be:8f:
73:aa:db:61:f7:46:8f:ac:9e:38:8e:3b:83:39:72:
06:41:81:86:30:5e:92:06:37:77:6a:e6:f3:9f:4e:
0e:e3:58:f7:2f:c8:51:6c:46:92:6b:0a:ae:58:4f:
2d:c5:d6:d6:d8:09:2a:8f:be:1e:4b:0d:6e:14:05:
54:17:3b:d9:33:4b:65:19:6a:f2:5a:ac:41:70:ce:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:C7:8A:51:8D:C2:52:B9:C0:3F:19:A9:43:0D:2B:23:95:1F:8C
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:78:d9:9b:51:f9:9c:63:b3:07:15:17:ad:a2:16:1a:10:
b4:04:5c:df:bc:12:ab:53:74:74:8e:c9:84:08:c8:ed:de:d4:
77:71:54:2d:46:04:10:b0:f8:d0:a4:4a:01:2d:b9:32:4a:bd:
1c:58:73:27:33:0b:ca:ab:bf:68:c0:8b:ef:8c:d0:39:fd:c8:
c2:1a:8c:a9:bb:a7:54:e0:82:99:26:91:a6:c6:93:21:ed:ea:
32:c1:82:61:a9:ec:1e:8a:8f:87:ba:49:f8:df:8e:9c:c5:62:
1b:f9:8a:1d:97:a0:3d:92:87:c0:d8:b7:7b:6c:26:de:79:cc:
e4:5d:f4:0f:1b:34:0b:8b:ff:f4:26:2a:99:52:25:d6:15:0d:
eb:d6:42:ad:d6:d0:c7:89:7c:7d:93:f9:d0:a8:ff:05:ad:30:
b9:46:ed:64:36:94:54:b5:51:3f:16:b6:31:7d:99:b1:30:ef:
71:91:07:70:81:d5:7b:81:5d:a2:b7:72:30:cd:75:8b:1d:6e:
5f:e1:94:ab:40:60:3d:c0:d7:97:28:88:30:c2:28:c1:5d:5d:
4e:54:f7:ee:ca:f8:94:26:3d:e4:98:2e:a4:e8:03:95:70:0d:
82:35:92:7a:10:6f:31:ec:ce:57:92:ac:51:c9:30:36:8f:ae:
99:07:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:41:53 2026 by rpki-client