Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: 19ldv7vEXnzieFdGSYS7Gi+Jw4BhWhv9dFTa5xJYa2U=
Subject key identifier: 32:CC:C7:92:C6:1C:53:0A:9C:85:F4:44:46:E3:7C:42:20:49:DA:B5
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01A13E5CD3581A85366BF8C2AA99CB758669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:33 +0000
Manifest this update: Thu 15 Oct 2026 07:00:33 +0000
Manifest next update: Fri 16 Oct 2026 07:00:33 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: A6QxTKn+/AfqrOZJK3r7YJW1D2WTFVfYy4eOY+LCKpM=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:d3:58:1a:85:36:6b:f8:c2:aa:99:cb:75:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Oct 15 07:00:33 2026 GMT
Not After : Oct 16 07:00:33 2026 GMT
Subject: CN=32ccc792c61c530a9c85f44446e37c422049dab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:fa:83:c9:e3:d2:35:b2:69:f4:06:b3:55:
29:d5:91:dd:e7:38:ad:d6:fb:4b:3f:dc:a5:d9:af:
9b:83:94:12:97:b6:4b:24:1a:41:7e:fe:9f:5d:ca:
99:fe:f1:c9:e1:0c:61:05:17:34:87:6b:f7:d4:39:
84:2a:f8:2a:e6:42:66:79:15:14:bd:51:45:9b:25:
e4:a3:80:f5:f3:a5:4c:ac:38:d5:c7:cf:37:f1:6d:
a8:4e:0e:fb:58:2c:a3:cb:41:1d:96:ec:d2:aa:83:
89:c8:fb:56:31:0b:be:9a:5c:a2:1b:18:ed:79:6b:
cf:7e:6f:20:ca:2a:b5:06:22:73:ba:9d:e2:51:ea:
e8:3a:bd:ae:1d:06:f2:00:88:5d:14:ab:83:64:34:
2b:7a:e0:2d:5a:77:e7:43:a1:24:44:b9:18:4f:33:
22:08:36:cf:d9:0f:16:77:33:73:b5:1d:69:04:00:
0b:9d:43:00:4b:41:c3:5a:45:19:95:74:8b:16:dc:
cb:62:6c:a6:d4:70:04:18:b2:b0:dc:81:46:af:d0:
d2:4e:f5:e0:34:8c:80:ab:7b:d5:03:5d:4d:7c:d8:
6b:af:a0:d1:fe:c6:44:fb:b9:67:8f:7f:ae:2a:cd:
3d:4b:1e:7d:a7:59:dc:1a:3b:7e:85:de:24:e1:5d:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:C7:92:C6:1C:53:0A:9C:85:F4:44:46:E3:7C:42:20:49:DA:B5
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:5c:15:be:09:82:d6:7b:3d:58:9d:0f:f1:49:7e:9b:0a:
31:62:7d:66:45:82:04:d5:e3:46:78:c6:b3:db:97:ca:93:69:
ef:ad:03:ab:58:b5:f8:e0:15:52:e8:8a:d5:f1:1c:6d:44:bb:
3d:67:4a:bf:04:04:81:52:92:78:9b:69:c1:c8:ef:11:87:79:
b7:07:55:96:ea:b0:16:26:59:bb:89:e3:f3:92:56:f3:28:0a:
02:a7:7b:03:19:a6:40:fa:24:22:0a:03:45:81:5a:a8:c5:de:
6a:e7:e4:b2:f7:e5:58:ee:8d:20:84:d5:98:51:04:13:28:98:
94:0c:a7:66:32:ff:66:3c:cc:37:5e:47:58:67:74:26:18:c0:
bd:72:5b:8f:af:6c:8b:bb:8f:82:95:e8:e5:30:62:f5:07:b9:
40:c6:9e:33:3e:ba:0c:97:66:87:a7:62:5e:c1:35:6e:29:07:
c0:c8:de:54:16:59:1d:90:7d:56:41:4e:85:fc:b3:88:c3:2d:
9e:d8:b5:c1:46:8d:d2:d5:a6:4b:c0:02:69:3c:a8:40:b4:82:
5f:9a:4f:ed:18:06:5a:b2:22:fa:4f:f2:e6:f6:39:33:a7:78:
bb:e2:7f:7a:32:2e:58:10:ac:05:8e:4a:16:a8:0c:b4:ba:05:
9d:ac:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:30 2026 by rpki-client