Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: uoBGl/J9w9bhOY2ujuNzofFAouHkj7Fgwkvr7GGoVfY=
Subject key identifier: D6:88:A2:78:FC:26:9F:38:C4:22:EA:75:EE:8A:21:54:81:17:12:67
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 01A14E3E5CCA63547A266EE67792267ECCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0CE9
Signing time: Sun 18 Oct 2026 09:01:11 +0000
Manifest this update: Sun 18 Oct 2026 09:01:11 +0000
Manifest next update: Mon 19 Oct 2026 09:01:11 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: tRBVcBIzYiUcZiDRoXQxZP0ZNM1Ewr+QITX1PxaKbX0=)
2: zuAP0P2ieWMLtXb48E1VVwKO93w.roa (hash: KzZQHMAxju4Nmcnntgy06fN2nxsFzdB0gSb36aOEgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:5c:ca:63:54:7a:26:6e:e6:77:92:26:7e:cc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Oct 18 09:01:11 2026 GMT
Not After : Oct 19 09:01:11 2026 GMT
Subject: CN=d688a278fc269f38c422ea75ee8a215481171267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:1c:a5:17:7e:ee:c4:d0:b9:43:69:5e:18:
98:9d:b0:93:f6:95:3b:95:24:82:49:52:5c:eb:3f:
41:fd:23:f0:4d:cd:f6:72:69:87:cc:3d:93:bf:5a:
27:d1:d5:96:7f:33:69:7e:55:e1:87:d0:d3:3d:d5:
68:c7:d4:78:ae:2b:df:99:e6:4f:3e:c7:4d:26:15:
7c:42:0d:29:d8:69:61:be:58:50:b3:61:37:93:83:
76:53:88:ac:7e:2f:f2:b4:68:4b:66:9e:c4:96:38:
e4:b1:98:04:a5:17:7e:72:50:6c:e6:7e:76:90:e2:
15:23:e5:fd:a8:46:80:48:ad:7b:cf:7e:be:79:60:
aa:8b:8f:3e:2c:1d:a1:90:e6:6b:a6:b5:37:b5:57:
22:41:c1:fc:9b:7b:a0:e6:ad:ac:0f:97:63:20:9f:
e3:9d:1b:72:99:92:71:2b:d6:b8:2e:7a:7d:aa:ea:
fe:b7:ed:59:84:1c:3a:9d:d5:45:2d:d3:2f:60:8d:
59:88:14:37:3b:61:0a:01:de:50:9c:77:df:9e:d0:
26:0e:0b:f8:b0:5e:ec:e8:5e:8b:a1:fc:3c:95:d0:
0a:28:57:39:c1:92:14:7e:ed:07:18:da:54:5b:ba:
ca:48:45:9f:87:34:0a:ac:8e:19:43:08:b1:6d:2e:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:A2:78:FC:26:9F:38:C4:22:EA:75:EE:8A:21:54:81:17:12:67
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:23:c6:d1:c6:61:c1:e8:67:54:7d:10:91:70:20:48:bc:
37:2d:51:23:90:e8:98:11:83:5a:07:b5:a7:49:88:7b:6c:92:
cc:1f:77:65:58:f2:4c:5f:7b:68:9b:5b:4d:6c:7e:97:13:b5:
94:f0:8a:06:aa:02:25:ec:23:71:9e:8a:c7:38:27:e3:9d:cb:
9e:0a:eb:2f:16:7a:c9:52:8e:09:71:44:5e:a6:85:95:f1:0d:
30:72:48:a3:39:ce:61:c8:b5:ed:a9:dd:cc:f9:dd:ff:1c:1d:
9a:38:9c:1e:11:49:8b:15:3b:65:f1:3a:23:8c:1c:88:3f:69:
74:64:1c:d3:14:d0:46:53:41:95:3c:9b:1b:21:b6:c6:d4:d7:
95:02:d9:b6:d4:9f:54:56:20:48:43:4c:2c:fc:43:08:0c:88:
d1:ff:92:79:a4:26:cc:2b:e1:89:1a:3a:90:35:af:ac:0c:af:
0f:98:92:7a:e1:fb:e9:d2:c4:9c:e6:cb:c8:eb:af:86:d8:a7:
c3:7f:9a:02:92:97:68:a0:b7:88:c6:e2:61:7f:fb:bb:c5:f3:
f0:87:c1:8a:17:ff:d9:e1:4a:b0:fe:51:e2:b5:c5:2b:c7:e3:
b9:d9:e6:e2:fa:6d:f9:09:63:11:1b:7a:b1:3a:65:db:a6:46:
80:9e:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:58:28 2026 by rpki-client