Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: tx74vrAtzSbLJMqNrJ2as3ZdDLHl1ALSAh08rOe9EcE=
Subject key identifier: 04:F0:CD:1E:BE:A1:3C:A0:89:C3:01:51:DF:0A:B4:0C:D2:5A:27:6B
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 01A13ECBA2B62DB778946DBD459411FB144C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 09:01:35 +0000
Manifest this update: Thu 15 Oct 2026 09:01:35 +0000
Manifest next update: Fri 16 Oct 2026 09:01:35 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: tvibcY++RriZEA7ef64ra01saFKakPDe39oXTBq+nys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:a2:b6:2d:b7:78:94:6d:bd:45:94:11:fb:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Oct 15 09:01:35 2026 GMT
Not After : Oct 16 09:01:35 2026 GMT
Subject: CN=04f0cd1ebea13ca089c30151df0ab40cd25a276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:a1:33:a9:35:f3:86:67:97:65:f1:ce:6d:
dd:5b:e8:d2:3e:7f:0e:17:f7:43:b1:76:54:28:da:
fc:47:a0:bd:a0:e2:b7:13:7d:63:7d:3a:94:f7:e6:
f5:93:a2:e4:0d:04:52:46:59:fb:0b:fe:85:2d:06:
8c:ab:9d:95:3f:8c:cd:ce:94:5e:71:7a:e1:8c:d4:
cb:94:5a:8e:e2:d6:7e:81:31:35:fa:55:a6:9f:15:
4b:93:32:94:2a:73:31:61:80:bc:d5:3a:30:e0:1f:
d2:dc:3f:df:67:15:d8:59:d1:de:94:ac:9d:41:d8:
84:78:49:60:4b:84:18:03:40:d1:8a:61:ae:e2:63:
c5:05:17:9c:7c:24:b0:86:14:c7:88:5a:89:5f:15:
c9:6d:8b:91:9b:c0:b7:ed:12:99:7d:ec:88:94:fe:
1e:10:cf:15:72:ab:ee:ad:91:77:25:24:9f:9b:61:
13:0c:3b:7b:3a:76:ce:7a:ca:ce:32:14:50:e5:06:
05:dc:45:f5:47:ec:22:a3:3a:8f:c9:b6:37:3d:8f:
9f:b1:49:bb:5d:73:91:00:4a:bc:c5:fe:da:65:0e:
bd:e9:67:87:5b:0d:4d:69:62:39:ac:02:f2:65:cf:
e1:78:9c:30:07:bb:f3:49:dc:32:11:5b:08:01:ac:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:CD:1E:BE:A1:3C:A0:89:C3:01:51:DF:0A:B4:0C:D2:5A:27:6B
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a1:87:24:61:9b:d3:ef:81:2c:fa:5e:88:8f:24:19:ea:0d:
d1:04:e3:bc:75:7f:0e:76:66:b0:94:3b:ff:e5:5f:a3:fb:b5:
76:2f:2d:e3:18:a4:2a:b2:7d:4a:e2:3b:c1:44:01:4c:ae:c0:
9e:32:bf:d0:43:41:b5:f4:ed:7f:4d:30:8a:e9:ff:50:7c:6f:
a1:57:13:ac:09:c8:1f:23:5f:03:1c:1d:8f:39:6d:1c:be:87:
e7:0d:f9:ac:59:24:f1:57:07:23:1a:a3:e8:15:ff:7e:38:87:
44:6b:d9:0f:c5:4f:bd:07:d3:26:f9:a5:db:9f:36:a1:f4:54:
7e:14:b4:74:d0:c7:62:ba:33:40:ea:85:b6:7e:51:99:f7:d7:
57:65:9d:ef:4b:49:7a:07:97:55:2d:d2:67:a1:00:08:0a:b9:
07:d4:16:d1:29:db:8f:20:cf:d1:f5:43:b2:69:09:04:23:5d:
4e:13:ad:40:fc:fc:9b:dc:c5:84:d8:08:24:01:68:7e:33:ef:
d5:90:45:cc:ee:ff:58:79:63:70:0a:bd:14:50:a9:24:b6:aa:
8f:fb:32:48:7f:46:b0:10:fa:fb:c0:ea:ce:22:42:a2:72:4d:
dc:da:ca:a0:01:d6:d5:3b:7e:70:51:f5:d0:2a:27:93:d3:f6:
65:bb:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:44 2026 by rpki-client