Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: dgbuUx3E9Otc+1FJPDcVklfnfwr0Gy+CUYaK0JIhFYQ=
Subject key identifier: D2:6F:71:0A:77:48:72:F7:70:90:AD:DF:ED:2A:9B:71:91:67:BB:53
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 01A08BD5B080F381A2A073BEAB89567DBDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0FBC
Signing time: Thu 10 Sep 2026 15:00:32 +0000
Manifest this update: Thu 10 Sep 2026 15:00:32 +0000
Manifest next update: Fri 11 Sep 2026 15:00:32 +0000
Files and hashes: 1: 9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa (hash: Oz17KeL/QvTihYxjOX/vDKG2jFWQLOGdnlYrSALuc3I=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: pOKdHunB3dqamMyyOD476T0ooPpdLgVyR7MTePRUiEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:b0:80:f3:81:a2:a0:73:be:ab:89:56:7d:bd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Sep 10 15:00:32 2026 GMT
Not After : Sep 11 15:00:32 2026 GMT
Subject: CN=d26f710a774872f77090addfed2a9b719167bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:dc:dc:0a:66:5e:99:28:c1:cf:04:3f:f7:
fe:10:54:ff:be:f9:9c:29:81:6b:a4:1e:df:38:fe:
a3:1a:87:f9:33:71:28:d7:99:ef:8d:ad:c8:02:14:
c3:38:e8:a4:38:20:b7:11:a3:73:0d:32:a3:89:58:
74:97:6d:dd:97:e8:d2:f8:dd:c6:b1:01:0d:e5:f3:
e3:75:08:16:17:66:0e:73:27:fa:b5:5b:6e:4b:08:
38:c5:f2:79:01:73:ae:96:ba:71:38:67:0d:7d:e1:
ab:6b:21:9c:25:76:98:d0:0f:78:1a:93:4a:0b:25:
b2:e2:97:64:02:94:bf:48:de:d5:96:90:0a:af:d6:
3b:75:8c:d7:68:8e:ae:b2:7a:16:55:06:63:85:88:
3a:8f:39:6f:2d:e5:50:b8:c7:0c:c4:ca:07:4b:4d:
a4:9a:60:08:d8:3b:65:fe:b6:f2:f6:57:7e:2c:28:
88:82:d7:1a:c4:7c:1a:7d:a5:46:1a:76:1f:56:53:
15:f9:6c:f3:13:98:24:05:24:97:13:6a:22:88:00:
15:6d:96:db:70:19:0e:4e:d0:e0:5e:64:f9:b9:f1:
e2:b7:32:23:2c:df:27:d6:cf:7b:41:33:82:61:a4:
e4:34:44:ff:50:e2:68:52:ae:4d:85:52:0e:5c:d0:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:71:0A:77:48:72:F7:70:90:AD:DF:ED:2A:9B:71:91:67:BB:53
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:13:aa:cb:74:4c:38:49:c2:96:97:aa:7f:d1:0b:f9:75:77:
26:58:bc:24:e7:04:f9:05:88:f6:31:a0:60:c6:45:25:07:78:
d5:6f:92:a1:2b:70:ca:b7:4b:13:45:c8:8f:f6:51:57:8f:75:
4d:e7:0c:d8:3c:5d:d0:22:0e:0d:46:e6:0b:43:24:ca:34:fc:
ae:38:64:d6:7e:d1:e7:0f:eb:f2:4f:15:7e:b3:53:b0:5b:46:
4b:c1:96:97:42:bc:44:4d:e0:c0:56:0e:db:25:8c:e8:40:ad:
63:e7:02:1c:41:ae:32:0b:f6:64:d1:78:8a:60:ed:bb:d1:49:
72:43:20:c3:55:db:d3:20:99:bb:fe:59:7a:c2:9d:73:57:92:
7b:8b:6e:2b:01:0e:dd:99:e9:73:66:30:73:76:51:91:7e:72:
cb:53:14:3b:01:c9:ef:fa:49:73:a8:e8:bd:e3:5c:ed:16:7a:
e3:11:62:66:5e:a6:3a:d0:4b:9b:6d:cc:34:a4:42:26:d4:1f:
99:b7:c5:7d:fb:d5:de:9f:3e:fc:8d:bf:f2:c5:c4:2a:1b:09:
95:0c:d1:20:3f:68:9f:07:02:8e:f7:88:11:c5:75:60:2d:df:
c7:ee:e3:a9:04:24:0f:bc:1d:81:ff:8d:fd:45:11:22:09:05:
03:39:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:50 2026 by rpki-client