Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier: 7Be4WF4Ujy5Kn0LXXaYx1mFhiIKYZFSyJzaZ0ySOtig=
Subject key identifier: 59:B0:6B:99:21:B3:64:2D:94:17:10:43:02:4D:8B:01:CD:C6:84:48
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 01A17FD054E4E0464953CD5F13BDBCDF6A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:02:01 +0000
Manifest this update: Wed 28 Oct 2026 00:02:01 +0000
Manifest next update: Thu 29 Oct 2026 00:02:01 +0000
Files and hashes: 1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: rifGnQTxHsrOruXpWHyjP8i1yh6ivTNogKkd3M+6+gA=)
2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:54:e4:e0:46:49:53:cd:5f:13:bd:bc:df:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Oct 28 00:02:01 2026 GMT
Not After : Oct 29 00:02:01 2026 GMT
Subject: CN=59b06b9921b3642d94171043024d8b01cdc68448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:fa:c3:de:23:79:81:bb:fe:d6:68:f3:9f:
1f:a2:82:68:f8:86:f1:34:79:e5:7f:ae:de:bd:34:
fc:c7:a3:ad:3b:75:44:00:f7:dd:e6:8a:51:46:be:
c4:6a:40:12:08:15:50:7d:4e:62:5b:3a:43:06:0d:
8a:46:d7:48:e8:24:c5:91:77:e4:9e:ff:99:f1:06:
3d:0e:70:c2:a7:90:52:2c:db:29:00:b0:3b:a2:88:
f4:c4:c9:24:a0:47:ea:e4:f3:c6:7c:2c:81:cc:9d:
f2:30:2e:99:d9:68:c7:2f:92:ba:26:c9:f8:56:7e:
49:1a:86:8e:dc:6a:fc:b0:80:c4:e1:ec:ef:0a:bb:
aa:09:87:56:86:bc:8a:6e:f4:ba:11:99:b0:47:9b:
22:03:28:d6:a7:4c:53:8d:86:7c:49:c2:44:e9:4f:
63:90:45:22:44:a9:25:37:68:56:fc:50:ce:20:de:
60:ff:3a:82:8e:ce:f4:9f:93:50:f6:58:34:3d:d8:
34:47:df:d6:76:6f:c3:1e:f9:e9:75:0b:e2:22:fe:
90:b1:48:4e:37:2d:2a:b0:5d:96:72:87:52:d3:68:
08:e9:c5:27:78:a4:d2:ca:ea:31:34:56:c4:48:77:
ae:31:c2:35:f8:27:bb:7a:24:5c:2a:da:04:d3:c7:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:6B:99:21:B3:64:2D:94:17:10:43:02:4D:8B:01:CD:C6:84:48
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:69:25:af:17:ec:75:bd:e4:3a:7d:d4:6e:e2:10:a9:42:
3e:19:7b:fd:57:6e:02:0b:55:f6:32:45:0f:84:93:a5:a8:49:
a8:07:c3:08:71:45:67:cf:db:63:df:e8:97:b8:81:e8:6f:95:
f0:38:aa:88:20:3a:e3:24:76:c7:83:cf:c3:6a:7c:cc:c4:d0:
c6:bb:89:ce:50:bd:e8:39:e1:5b:24:4f:fc:d4:b8:9c:01:8f:
6f:5e:f0:f2:9d:d5:35:4e:88:25:b2:fa:12:cf:fd:cc:dd:91:
f2:3f:02:30:55:65:6d:bb:5e:de:88:77:4c:81:b9:b5:1d:7f:
22:08:d0:0b:4e:74:33:da:7e:82:8a:2c:ff:63:c6:75:1a:a6:
f6:59:89:f7:f7:8b:74:16:3d:48:4a:07:b2:c9:ae:18:1b:37:
b9:61:0f:8c:4c:cf:2b:22:c7:db:7b:89:a6:1c:af:84:e5:14:
64:36:45:0d:9d:a6:3e:76:22:62:48:f6:a8:be:7b:b8:e2:44:
07:9f:e9:ae:f3:a0:23:f8:5e:e5:0b:75:46:aa:81:20:c3:74:
4b:02:b7:18:7c:2e:e4:61:91:45:f2:48:14:cf:5c:d7:2f:56:
72:db:43:a1:5c:8a:3f:ee:e4:35:69:93:79:5a:7d:b6:f3:23:
19:c7:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:56 2026 by rpki-client