Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
File: 2geeQ_xybhZVyKdVVPX7wYsgRUU.mft (raw, json)
Hash identifier: h8MjdUe2E4n4u9xodXJsgd07A1T1xyixt+Z6xzoylmw=
Subject key identifier: AD:C6:56:15:C1:5F:F5:A0:08:3C:E3:B6:44:4F:C2:E5:A1:F7:6C:9A
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 01A11F4056BC0923F7349911B573620D25C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
Manifest number: 010E
Signing time: Fri 09 Oct 2026 06:01:12 +0000
Manifest this update: Fri 09 Oct 2026 06:01:12 +0000
Manifest next update: Sat 10 Oct 2026 06:01:12 +0000
Files and hashes: 1: 2geeQ_xybhZVyKdVVPX7wYsgRUU.crl (hash: VPAvE88xeWNIN08fmVcOg/Iv9UuklPVSY75arN2hQ/Y=)
2: FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa (hash: 36QLoZ8Ws2gB6YZ/mvzOniygiDV4ui/NvR252z7lSOc=)
3: a0n0eRt_zXRSqiGHwwetMEUhQkk.roa (hash: Iq1Hfa0PK/01Z2qiRH7cJQnXiwjnNSuA2bLHyqY6DfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:56:bc:09:23:f7:34:99:11:b5:73:62:0d:25:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Oct 9 06:01:12 2026 GMT
Not After : Oct 10 06:01:12 2026 GMT
Subject: CN=adc65615c15ff5a0083ce3b6444fc2e5a1f76c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:ed:dc:0f:c2:f5:40:40:54:16:65:0f:20:
b6:b3:cd:ca:21:33:1d:69:3e:73:9e:ed:97:39:df:
80:37:d1:15:9f:4b:f2:f5:01:79:78:ed:37:13:19:
d0:70:d5:da:ae:f5:9f:11:76:d6:f9:96:a2:61:31:
b1:a8:b4:6e:5c:a6:55:2b:21:97:3c:e7:66:38:90:
56:5e:3b:77:35:93:23:9f:43:cf:14:1e:12:86:37:
9c:0c:cb:6f:66:2d:c1:8f:4a:cc:45:89:ac:f7:da:
22:d2:ea:ff:02:d8:b1:93:66:ad:15:d5:23:1c:0c:
18:71:cd:81:6c:87:dc:90:7b:b7:48:f9:40:02:ec:
2a:85:0f:b1:50:71:2e:11:de:31:b7:4d:ab:5d:4d:
2f:72:5b:71:65:7b:9e:94:bd:fc:07:a0:7d:82:03:
30:74:dc:44:dc:cc:99:6a:9d:1f:18:4b:de:53:73:
ca:49:89:4d:6b:bf:6c:c9:9d:eb:cc:3d:0e:d6:d0:
2f:b6:5e:fb:da:5c:d9:f0:7a:c9:ec:37:5f:51:7f:
ba:ec:f1:b2:38:7d:7a:26:8a:b9:c1:da:09:c5:5e:
e1:41:4d:c6:3f:8c:95:9f:3f:11:91:3c:6e:7b:57:
d5:ee:4f:0c:7d:0d:7b:24:9b:27:d4:ce:52:e4:44:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:56:15:C1:5F:F5:A0:08:3C:E3:B6:44:4F:C2:E5:A1:F7:6C:9A
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:c8:50:e8:af:02:e7:38:c8:53:5a:bc:94:6c:e1:18:4d:
96:55:c9:a3:a1:8b:0f:19:ff:0a:99:eb:b8:b1:b9:e1:0d:7d:
c4:32:42:0e:7a:ff:0d:50:68:1b:dd:b7:38:aa:5b:95:e7:db:
c9:68:b1:db:f9:37:9b:3a:61:fe:b3:69:27:97:8d:75:a2:fc:
fc:68:d2:ab:18:8f:84:3e:87:bc:f9:fe:6e:ff:59:8b:ef:33:
aa:9e:59:92:e2:24:ad:29:31:1f:7f:fb:87:2f:a4:20:64:2a:
a8:4c:dc:bf:9b:f2:ee:11:e1:c0:2f:08:03:8c:35:cc:6c:20:
09:d5:3d:26:67:bc:0d:de:cd:b8:ed:4b:c7:90:6f:1e:9c:4f:
af:ec:39:96:85:c6:31:a8:31:e8:ba:53:c5:98:e8:ce:50:82:
12:cc:d6:8c:eb:7f:65:08:0d:f1:85:d1:5d:f1:41:81:30:64:
c6:0e:80:94:e6:be:27:c5:51:81:2c:b5:b0:8f:59:bc:1b:39:
ed:03:08:1b:1f:4e:4f:aa:0b:12:cf:b4:b0:7a:5d:19:ac:8e:
a9:62:40:eb:04:f8:6d:75:d2:14:96:f9:16:26:5a:54:a1:89:
6e:91:30:6c:ed:83:9d:6a:92:16:72:10:de:d8:6f:e4:79:1a:
3a:33:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:41:52 2026 by rpki-client