Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
File: 2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft (raw, json)
Hash identifier: 3KyoPZiiGvaibiuOFai7P1eZ9qUetJgDBd44254139k=
Subject key identifier: C7:17:B3:38:67:D0:CB:97:D6:2D:B0:37:5A:7A:5B:45:B9:3E:F4:AD
Authority key identifier: DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
Certificate issuer: /CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Certificate serial: 01A0EEC19E46EBF1CB6B2A90312F14BD8AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
Manifest number: A4
Signing time: Tue 29 Sep 2026 20:01:01 +0000
Manifest this update: Tue 29 Sep 2026 20:01:01 +0000
Manifest next update: Wed 30 Sep 2026 20:01:01 +0000
Files and hashes: 1: 1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa (hash: QOdgPXJXqMKhICPocmC5X2w4xSms330H0IB/Mg7h87k=)
2: 2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl (hash: Cpf3nk7Z2k6ZzfJw4tmaNh7h1gMHF0pCThKOF+PXGsw=)
3: l5lcoIjetDYRGCSJruAJlUhPhzQ.asa (hash: tCMKgxgZXOFldAg8OQl8wN4J2NAs4qBmgrOqehpXFco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c1:9e:46:eb:f1:cb:6b:2a:90:31:2f:14:bd:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Validity
Not Before: Sep 29 20:01:01 2026 GMT
Not After : Sep 30 20:01:01 2026 GMT
Subject: CN=c717b33867d0cb97d62db0375a7a5b45b93ef4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:9d:24:f1:3b:eb:06:fb:1f:f7:47:98:58:
c8:8b:1e:e1:63:81:4f:08:a3:cf:34:d0:64:a1:b5:
4d:ca:eb:fa:2f:13:df:cd:a6:1d:aa:9b:50:bd:82:
5c:5c:a2:27:65:eb:92:d1:36:fd:ac:84:50:9e:8c:
8f:f5:6f:2e:d2:31:a1:9a:3d:d5:b6:a2:63:e1:46:
69:c0:5f:27:6e:4a:c7:87:02:69:58:1b:fd:54:97:
4e:4f:a7:bb:6f:a1:af:7e:b6:ee:0b:67:99:0c:5d:
f0:14:4a:28:c9:59:16:25:79:11:5d:41:ec:4b:48:
12:63:bb:eb:c8:77:f3:f3:23:9f:1c:22:aa:5e:57:
2d:0f:b0:f9:c5:ef:09:1a:53:0b:7d:47:fe:5f:97:
29:8d:4d:8c:06:d2:18:e8:49:61:9f:77:df:5b:1d:
b0:8a:93:d0:97:23:e1:43:97:21:f1:cb:03:dd:f8:
da:78:82:69:ce:cb:19:60:c0:15:01:97:84:ac:24:
79:3a:8a:87:88:f7:c7:01:66:0c:6a:b9:fb:fa:ee:
f3:17:7f:44:ac:c0:2b:17:31:73:9b:37:73:da:fc:
74:0b:d6:55:79:af:98:d2:12:6b:04:e3:a3:c0:f4:
8f:df:4e:ce:31:f0:16:f9:f7:2f:10:99:b4:24:f6:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:B3:38:67:D0:CB:97:D6:2D:B0:37:5A:7A:5B:45:B9:3E:F4:AD
X509v3 Authority Key Identifier:
keyid:DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:8c:80:c6:2b:35:1a:ef:43:b2:69:04:e4:e6:f3:5c:e9:
ce:45:32:e8:4a:7f:b1:2f:b3:b6:1b:dc:90:24:cc:64:56:22:
43:ee:70:c3:60:0d:a7:ff:12:07:f6:2a:81:4e:b8:a6:8d:d4:
d1:73:ec:aa:ea:35:49:fb:ae:8a:31:8f:26:91:d0:33:35:36:
09:ea:5e:37:a7:42:51:85:09:d4:a9:c6:be:7f:39:71:bf:eb:
aa:30:69:13:f6:13:d1:12:b2:cc:da:b5:e7:9d:b0:70:68:f9:
bf:68:85:80:b3:1d:7f:63:40:cb:74:f9:66:0f:42:0c:a1:67:
06:26:0a:64:ca:bf:cc:99:05:14:f0:28:d4:0b:78:85:53:af:
ed:1d:09:02:26:cf:3b:0c:86:f1:4e:d1:ac:03:26:7b:db:01:
35:98:72:fc:e0:d9:03:d6:f7:9b:6d:01:95:6d:b9:8e:95:77:
a5:6e:5b:a7:a9:56:c5:f0:d8:70:47:82:a7:85:63:11:28:9a:
0d:d3:bf:6c:2c:98:a7:7a:a6:dd:99:b4:a6:bc:0b:cc:83:11:
a5:42:1c:a6:1c:2f:ce:a8:97:75:e5:a2:cd:62:49:b3:41:ec:
b5:59:bf:c5:b7:68:62:40:f6:6e:23:a6:17:4e:a1:52:b3:46:
55:88:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:26 2026 by rpki-client