Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: 4OA9U9l0kH5nB7fZuWLZMm/hxlWLtHg8xXHJOVtVdZc=
Subject key identifier: 25:F2:8C:78:F1:3B:B7:B8:9E:B7:DE:68:99:7A:44:79:10:6C:AF:E7
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 01A08C440E8E269216D967A90848973AFA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 02FE
Signing time: Thu 10 Sep 2026 17:01:05 +0000
Manifest this update: Thu 10 Sep 2026 17:01:05 +0000
Manifest next update: Fri 11 Sep 2026 17:01:05 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: XVBET9330bZIGfZN4u6vT6YD+o/tnBvFE30g3aW1txQ=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:0e:8e:26:92:16:d9:67:a9:08:48:97:3a:fa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Sep 10 17:01:05 2026 GMT
Not After : Sep 11 17:01:05 2026 GMT
Subject: CN=25f28c78f13bb7b89eb7de68997a4479106cafe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:d8:f3:44:70:78:7d:fe:c9:58:d6:08:09:
82:c7:00:80:8f:30:39:9a:c1:8b:6c:e2:10:0b:b6:
90:d8:07:b2:3f:08:4c:59:e9:31:b8:30:8a:1f:94:
ba:55:16:d6:f2:ed:88:af:12:22:7d:5c:05:2b:80:
a2:00:66:a6:5a:8a:73:19:57:18:bf:8b:ce:ab:5a:
8d:fe:72:6b:f4:65:fc:64:e0:3d:6b:93:87:6e:99:
b1:8a:fc:ca:8c:99:a3:ab:1b:5f:54:8b:ae:a6:4e:
57:32:07:0a:f7:95:26:70:08:5f:bd:ef:c2:55:b2:
e7:61:1d:d2:d0:01:9f:af:fa:3d:8e:ae:5a:b6:73:
65:6a:39:60:77:61:ab:16:e8:65:3e:e2:e3:e5:16:
83:0c:32:f5:f7:c2:76:33:dd:0e:be:68:5c:1d:f1:
50:d0:a4:1f:1b:7b:bb:96:50:ac:1a:c1:cd:0f:0a:
16:a1:7e:b9:bc:c2:5b:cb:41:eb:7d:14:2d:6e:58:
33:c4:91:ff:6e:72:f2:5b:9a:f7:ba:78:4a:89:c8:
3e:8f:ec:3c:c3:eb:a8:9b:2e:11:31:f7:3c:67:2a:
a9:b3:8d:66:20:b4:2e:d1:6a:c3:b1:e1:d5:fd:cb:
c9:7b:86:29:83:4a:a4:a7:01:c1:97:ac:63:8e:85:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:8C:78:F1:3B:B7:B8:9E:B7:DE:68:99:7A:44:79:10:6C:AF:E7
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:49:65:a5:6f:30:e5:f5:ef:36:69:89:06:98:5b:c0:8f:67:
85:e7:c3:b9:4b:37:a3:b1:a9:ed:7e:4b:0e:5f:51:c2:95:40:
a4:41:26:54:1b:a8:62:39:49:44:4f:10:93:93:f8:f0:86:4e:
66:3b:52:50:9c:58:ba:cd:9d:b9:44:31:ea:3a:24:f5:8d:11:
4b:d6:f6:aa:2c:1f:28:f7:c2:a9:50:2e:08:0f:01:76:ec:ea:
d0:ac:4e:89:27:f5:34:e3:15:d1:ad:b0:1c:87:63:90:f5:ef:
a8:26:75:d2:3d:b3:fc:ce:f3:30:18:c5:67:01:25:33:cc:49:
1f:2e:fd:73:e6:6b:54:3b:4f:be:75:a4:e7:c3:d7:67:b6:e5:
60:f8:08:de:e2:92:09:94:ae:08:c2:bf:18:84:60:d9:b5:f8:
37:2a:4f:04:d3:62:d4:ff:8b:be:48:44:c3:6c:0d:d0:70:ff:
0b:b9:20:38:89:8e:fc:df:51:88:81:3b:e9:77:41:a1:c7:d5:
d5:e0:48:d9:a4:32:0a:ad:5b:ab:17:bd:53:65:88:bf:69:f6:
39:a9:25:e8:2a:c1:7e:77:56:86:df:06:e7:16:50:45:0c:f3:
a8:30:07:1f:48:d6:7a:87:3b:7a:7c:1b:77:d6:29:18:f0:22:
d2:61:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:47 2026 by rpki-client