Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: 8Z1zP6PmEl8vKPbu8xaFV8VH2RlBcvvxk+wng7POcuU=
Subject key identifier: 87:35:E1:F0:20:67:81:30:65:B5:C7:52:E2:44:59:65:EF:50:21:08
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 01A073295109DC40A0E47765DD2ECA61EE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 027E
Signing time: Sat 05 Sep 2026 20:01:22 +0000
Manifest this update: Sat 05 Sep 2026 20:01:22 +0000
Manifest next update: Sun 06 Sep 2026 20:01:22 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: 79/LxfhUtp47iOmJEdDtd5YrsOfOCLGi+zxZwEjN+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:29:51:09:dc:40:a0:e4:77:65:dd:2e:ca:61:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Sep 5 20:01:22 2026 GMT
Not After : Sep 6 20:01:22 2026 GMT
Subject: CN=8735e1f02067813065b5c752e2445965ef502108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:89:d3:7b:d4:c6:35:68:2b:9b:bf:25:98:
1e:05:0c:52:a6:2b:3a:ec:e6:11:85:94:32:ce:e0:
90:83:95:ce:59:c1:33:d7:32:e6:c1:cc:5a:c2:3a:
43:01:3e:f3:54:2e:0f:5f:da:0d:21:aa:6d:42:ed:
f9:1f:56:60:e1:cb:c1:12:32:21:70:10:db:40:a3:
f0:fd:da:e9:72:50:98:db:b9:6d:75:32:50:f1:d7:
80:78:93:af:0a:d8:d6:29:80:2a:63:60:f6:e8:53:
79:94:73:f3:93:01:01:d0:9a:5d:69:74:d5:74:c8:
0e:15:cd:d9:c3:d9:2d:e1:ab:19:f0:d5:c4:bb:2e:
b9:d0:95:d0:2e:4f:c5:17:c9:69:ed:36:b0:12:7a:
05:86:cd:c5:90:e8:62:18:c2:c7:92:b8:d2:32:c3:
d5:4c:bf:ec:31:46:4a:14:11:e2:7e:00:82:32:2b:
42:a9:57:dd:97:41:0e:00:8c:cd:7b:1c:93:c2:2e:
69:59:f4:4e:ca:7f:a1:76:db:7d:ab:1a:01:b1:b0:
87:f3:60:b8:c4:38:81:6a:ef:b4:6c:06:6e:e1:46:
da:d6:cc:ab:67:d5:ce:c5:c5:e2:72:17:69:fb:92:
ef:47:b7:a1:34:98:c5:4f:ec:86:a6:05:26:1c:27:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:E1:F0:20:67:81:30:65:B5:C7:52:E2:44:59:65:EF:50:21:08
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:29:26:09:b1:4c:dc:6a:d8:e1:26:87:2f:85:d6:b5:bb:81:
80:94:16:08:cc:9f:cd:e9:14:1f:b5:32:a8:b3:1e:fb:bc:f6:
fd:06:e8:0a:b3:ec:69:fa:6b:b4:5c:8c:c8:4b:92:74:51:30:
e7:d8:8e:48:ac:fe:c7:df:33:86:d9:58:b9:10:50:d8:14:10:
0b:38:d8:77:75:46:cc:ad:3e:ca:a8:11:b6:cb:68:ed:f7:70:
c6:61:bd:11:c1:11:d2:ca:b1:1f:a9:2f:05:46:cd:03:9c:aa:
b6:c0:3f:0f:90:39:2e:f2:61:30:56:b6:a0:0a:23:1f:9f:2b:
b1:99:9d:bd:12:c8:ce:4f:da:49:a0:38:69:80:a9:83:0c:96:
e9:40:62:fc:5c:c7:00:b6:6a:8a:e0:b2:2a:21:d5:5d:b5:c0:
d2:d2:02:69:31:a2:b9:8c:b8:ac:bb:08:02:84:c6:34:c6:1a:
e8:36:02:01:cf:a0:2f:21:43:b9:44:dd:c5:06:f6:fa:74:1e:
9a:96:18:9c:47:10:cd:12:39:87:fc:6c:2c:a9:39:e7:e0:e3:
75:5f:23:53:ed:23:f6:6f:1f:e6:06:73:8e:ab:e9:e9:66:c6:
56:ab:56:89:3c:aa:c8:3f:99:ec:74:46:77:a7:d5:9a:c9:40:
e4:5d:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 02:03:10 2026 by rpki-client