Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier: MnZpRyINqMNClB2VEa1mRoGJfNw4YmXAFsGiG+mSsGk=
Subject key identifier: 38:1D:E7:01:70:0C:80:D0:DC:32:51:25:A6:D8:A1:30:51:63:B5:7D
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 01A08A8CA527E656F55B36FB47CBE93A16BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:07 +0000
Manifest this update: Thu 10 Sep 2026 09:01:07 +0000
Manifest next update: Fri 11 Sep 2026 09:01:07 +0000
Files and hashes: 1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: xnQ897h96F3nFTI7lG/09FS33di/ChLOoZc6GlHANZc=)
2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a5:27:e6:56:f5:5b:36:fb:47:cb:e9:3a:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Sep 10 09:01:07 2026 GMT
Not After : Sep 11 09:01:07 2026 GMT
Subject: CN=381de701700c80d0dc325125a6d8a1305163b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:90:73:49:ef:25:fd:59:5c:11:6e:bc:d4:
5b:b9:ae:ed:2e:72:21:8c:d1:75:1c:e6:7a:fb:80:
84:db:b2:cb:d4:f3:e9:1a:78:32:12:06:ec:a4:00:
af:b7:1c:e1:1c:73:20:c3:b5:d9:24:70:2c:5e:8e:
15:f7:3a:9a:19:bd:da:22:28:3e:61:67:96:6f:19:
d5:d1:69:46:14:ff:66:d6:92:59:b2:23:b9:02:04:
87:4a:2a:45:1f:aa:5c:50:ef:97:62:8d:cf:ce:03:
1f:9e:5e:2d:b7:90:34:1d:32:e1:63:37:32:e3:e8:
c5:31:a5:24:78:8c:07:70:a6:f0:d1:ce:e0:42:06:
16:2d:78:1b:24:08:79:db:04:3c:3a:55:26:c7:52:
fe:32:a9:2a:0a:4d:b0:b7:8e:2e:17:b8:61:c8:f4:
50:d7:4e:7f:15:9c:9a:c1:af:be:9a:61:f7:2c:c0:
23:42:2e:f0:f4:55:c5:66:f0:da:2c:49:e2:8f:19:
e7:3c:99:7a:59:d9:20:09:f6:a8:94:05:5f:01:5f:
d3:5a:f9:ef:1c:64:e5:2e:36:74:bd:0e:ea:cb:32:
e5:6f:8f:81:97:53:90:11:3c:a8:62:d4:f8:26:80:
3a:49:de:e6:5c:61:7c:75:db:be:96:a8:c7:a9:1b:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:E7:01:70:0C:80:D0:DC:32:51:25:A6:D8:A1:30:51:63:B5:7D
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:30:dc:ea:66:2a:62:56:34:73:d9:00:54:cd:a8:3d:08:62:
75:ee:f3:bf:75:39:29:e3:44:3b:9a:64:2e:7d:53:63:67:0c:
c4:3b:e8:e8:22:10:ce:c4:01:7d:21:c5:84:f6:c9:38:70:4e:
6c:ae:ba:ed:a0:fc:06:23:33:8e:4a:27:fc:e7:89:c2:2b:5d:
58:31:57:2e:a7:4d:a6:df:20:35:06:0d:b2:13:7a:a5:61:8f:
02:34:6d:93:38:08:10:f7:fc:9e:57:5c:a8:d4:e4:26:10:ce:
be:46:7b:64:46:85:36:19:2f:ad:e0:99:26:d9:1f:ad:02:ac:
55:16:4e:86:c5:11:77:cf:4f:89:61:a2:3e:a7:af:a6:32:48:
1e:5e:49:bf:f4:c3:29:df:94:e4:e1:03:9e:1f:59:25:f8:a4:
65:eb:12:51:c2:46:2b:03:a6:cd:4c:9b:dd:09:a6:b3:5d:36:
9c:72:5e:41:12:54:1c:45:7d:de:d9:cd:c5:92:7a:da:6d:c3:
8d:34:ee:16:83:d7:8f:55:8b:cb:7d:ad:be:61:a0:31:40:68:
d4:f2:9c:c9:f2:6b:29:ed:75:d6:ae:5e:7a:73:d4:05:db:7e:
e4:80:8b:cc:48:4f:c3:af:79:c0:fb:74:32:47:de:22:97:56:
62:31:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:37:39 2026 by rpki-client