Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: abIVXLLPwwgzUSE6C8OswR9K6lsHjOVphAOmc8O7KME=
Subject key identifier: 68:8F:16:3B:4C:C6:06:F7:86:8F:24:B2:1A:E0:B9:3C:2E:1A:50:66
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 01A13ECBC89033161726C65F6E01C5789DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0CE1
Signing time: Thu 15 Oct 2026 09:01:44 +0000
Manifest this update: Thu 15 Oct 2026 09:01:44 +0000
Manifest next update: Fri 16 Oct 2026 09:01:44 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: eOnDFvRaLcpeecjmX0yGTeP6YwxL8jlqFkrZL6yFqI0=)
2: zuAP0P2ieWMLtXb48E1VVwKO93w.roa (hash: KzZQHMAxju4Nmcnntgy06fN2nxsFzdB0gSb36aOEgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:c8:90:33:16:17:26:c6:5f:6e:01:c5:78:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Oct 15 09:01:44 2026 GMT
Not After : Oct 16 09:01:44 2026 GMT
Subject: CN=688f163b4cc606f7868f24b21ae0b93c2e1a5066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:a7:4b:1e:ea:26:fc:75:85:52:a1:f9:48:
d8:41:3a:1a:1a:f1:42:a4:f5:e7:a7:3a:64:6f:06:
5a:87:2d:fc:0e:8b:eb:3c:8c:97:ba:f5:9d:df:b6:
05:51:73:b2:a3:85:aa:d1:1f:8b:10:1c:a4:d9:57:
aa:0b:ec:02:49:b4:fa:2f:08:21:c5:5e:84:f3:8b:
3d:5e:bb:be:56:ad:88:29:ed:96:07:aa:21:63:98:
b2:de:15:2c:11:7b:1b:6f:e6:47:97:0d:c5:0b:46:
d1:86:bd:bf:8f:c3:0c:b9:c6:77:03:cb:95:4b:5c:
31:fc:fa:20:5d:2d:63:47:d7:b9:40:43:c8:94:66:
b3:2a:ff:d9:49:15:bc:b8:72:9b:fe:fc:17:ff:b8:
14:74:ef:b3:e9:b6:88:79:10:d8:44:6e:ec:f1:65:
cf:2f:ee:99:33:8e:87:cc:1b:9e:67:a6:e6:9a:35:
ae:48:00:4b:68:50:d9:4c:5d:df:2d:7c:ee:71:48:
ee:6c:e0:78:bf:94:ee:39:60:6c:5e:fe:89:09:e9:
73:c9:97:3f:bf:86:f2:64:4e:47:82:17:c7:ed:f6:
c4:c0:b8:c5:d2:e3:53:ff:e8:af:07:3b:5d:4e:00:
a0:a8:ad:1d:92:67:cc:35:67:05:6c:39:12:72:a4:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:16:3B:4C:C6:06:F7:86:8F:24:B2:1A:E0:B9:3C:2E:1A:50:66
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:dd:1b:4f:fd:f1:ea:bb:85:25:53:80:2a:c5:14:88:b1:
ff:ee:9d:31:40:82:47:c0:18:09:14:bf:e5:27:d1:88:c0:96:
b1:86:c0:d8:c9:1c:eb:ed:9c:1a:64:6d:2f:f1:14:0a:11:44:
e4:3d:8b:1b:55:c7:61:ba:1f:3f:f3:f2:57:53:cd:89:48:4a:
17:b0:26:ad:b5:c3:16:21:4d:03:1d:a5:f0:63:1f:5d:6c:f9:
f9:21:8c:ca:0f:dc:17:ee:ef:e8:b8:1d:09:47:a6:2c:81:00:
73:08:35:d6:5e:63:35:17:ba:27:79:1f:14:b7:47:0d:f0:b8:
ae:06:76:e8:f2:79:95:79:28:f1:15:96:13:bb:0a:eb:a2:d7:
43:25:13:e9:4f:e6:5b:33:c5:ad:95:27:42:43:4b:27:ad:81:
dc:35:5a:f2:72:51:5b:dd:e1:3f:83:c6:f9:08:1b:b1:7d:0e:
c4:3e:33:21:fa:e8:51:a3:f9:85:94:b3:11:2e:f8:b5:ab:de:
4f:5b:20:11:5d:64:00:53:28:30:e4:75:1f:bd:60:49:33:c8:
00:10:47:31:cc:1d:9f:33:e6:f4:c6:a6:a0:79:7f:89:26:9d:
15:48:1d:e7:57:b1:23:7c:69:fb:17:3c:38:c8:78:a3:2c:59:
f2:94:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:12 2026 by rpki-client