Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
File: 2iHQJGSziv86MckIeNYnI7nHQqY.mft (raw, json)
Hash identifier: XTETSv8+LqC623Q2xLc3f6IMJbTUp1e5wLuKKx4lqG8=
Subject key identifier: C9:9F:9F:49:79:F3:C4:E7:BC:B0:AF:B4:2D:BF:18:63:07:6E:B9:B9
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 01A03FA938903C76A9A4A9BF74F5FF94A411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
Manifest number: 041E
Signing time: Wed 26 Aug 2026 20:00:49 +0000
Manifest this update: Wed 26 Aug 2026 20:00:49 +0000
Manifest next update: Thu 27 Aug 2026 20:00:49 +0000
Files and hashes: 1: 2iHQJGSziv86MckIeNYnI7nHQqY.crl (hash: mFUKlVD20TBTEoTfK3JH9xTPoR1pgoqY5rNLM8vB5BE=)
2: ULNyY9ornMb2XkpkkXNvWN1gP2I.roa (hash: r5UnkkjvCogYCq6Zu3PdGG9tZrgdqzPy7q2Pvmc7Y4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:38:90:3c:76:a9:a4:a9:bf:74:f5:ff:94:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Aug 26 20:00:49 2026 GMT
Not After : Aug 27 20:00:49 2026 GMT
Subject: CN=c99f9f4979f3c4e7bcb0afb42dbf1863076eb9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:d3:0b:4c:83:3e:c9:f7:e5:7c:23:e1:8b:
eb:2e:1b:a7:56:96:a8:bb:25:52:47:69:39:29:a1:
5d:6b:09:a8:59:aa:e1:17:b5:c9:a5:0c:72:76:8e:
2c:0e:e6:4a:45:31:7f:bd:fd:ff:d0:40:4d:7e:98:
66:71:f8:67:8a:ce:47:66:b2:ed:a9:fa:1d:20:ba:
ea:3d:c6:67:c5:1e:c1:e8:df:f3:76:2a:e2:be:5f:
4c:62:22:f7:60:8b:99:ce:e0:92:ef:1a:8c:ce:bb:
1c:1a:5d:0b:98:8c:f9:5f:2b:b1:dd:07:67:98:82:
b1:e6:7c:e5:78:ac:8d:1d:dd:20:d7:d3:e4:4d:88:
20:0a:13:be:16:75:2e:ec:53:42:8e:10:a2:e5:eb:
77:04:b2:a0:c3:b8:73:01:af:b3:23:e7:11:ee:8c:
1d:0a:3d:43:a5:4b:61:36:2f:1d:94:fd:b7:97:27:
42:6d:41:e8:0f:60:91:55:25:c1:41:98:74:6d:ea:
65:66:5c:b9:7d:d0:a5:9e:68:a4:d0:62:37:82:55:
c2:86:da:94:59:ff:ee:b9:41:f5:bc:84:9b:91:db:
7b:80:7e:29:9c:96:e4:95:25:3f:02:f7:f1:55:87:
11:49:a6:4d:03:1c:43:66:ef:15:35:e4:91:38:85:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:9F:49:79:F3:C4:E7:BC:B0:AF:B4:2D:BF:18:63:07:6E:B9:B9
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:02:38:94:de:3e:ee:c1:dd:aa:3a:61:0d:0d:75:e9:d4:a0:
2b:5c:d6:c6:ce:82:c7:69:83:25:64:b1:c6:9d:aa:c9:cc:38:
7d:2b:6b:c8:3a:cc:d3:3a:20:08:0f:2c:94:ec:97:ec:c9:d7:
25:3e:bb:bb:9d:3c:28:09:56:5e:a5:a4:6b:1d:01:25:ba:e7:
31:f2:9f:d8:ad:10:78:0d:f8:71:c8:07:39:a5:20:90:eb:66:
a0:d1:a7:9a:e1:c8:bc:11:18:02:c3:eb:27:b9:ab:a1:cc:9d:
e8:97:07:a5:21:b7:6c:3d:7a:df:21:e0:3a:a3:c3:98:02:2f:
b0:83:74:a3:64:28:98:c0:58:89:4e:92:75:63:6a:05:da:fa:
59:69:bf:28:42:df:5e:bb:3d:21:97:16:17:1d:54:95:a0:e2:
af:3e:d0:09:5a:0e:78:60:5d:d1:30:9a:66:0d:09:3d:61:30:
6e:4b:22:dc:9a:3e:71:35:0b:ee:6f:4e:3d:06:4b:9d:de:04:
c8:e3:ad:1f:c4:4d:16:46:aa:89:81:c0:e4:41:35:ef:3f:44:
f9:92:a7:ec:6d:b5:5e:d6:03:85:1c:ae:2d:7a:75:a7:74:65:
db:c2:80:04:4f:9f:5c:26:a5:9b:13:3b:8c:99:8f:75:e1:9b:
88:71:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:31 2026 by rpki-client