Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: mmVmPvepcPm7j6NX6KT9oV2gwJneu1ywkzp7AdOOr9I=
Subject key identifier: F8:17:18:D9:D2:52:D8:32:8B:B8:2E:AD:70:21:AD:56:32:72:7B:83
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 01A0889E709AD049309E5058CA33948560EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:01:19 +0000
Manifest this update: Thu 10 Sep 2026 00:01:19 +0000
Manifest next update: Fri 11 Sep 2026 00:01:19 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: GAzklN03ShBiKZ1Yjifonqg9vf7QFGBqb1IsmDHbPMM=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:70:9a:d0:49:30:9e:50:58:ca:33:94:85:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Sep 10 00:01:19 2026 GMT
Not After : Sep 11 00:01:19 2026 GMT
Subject: CN=f81718d9d252d8328bb82ead7021ad5632727b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:d1:cb:2f:fc:7b:b7:ae:ef:fd:4d:66:03:
b1:f7:a8:01:1e:df:30:09:c8:fa:80:36:97:3d:bc:
59:b6:0b:96:b0:8b:a7:be:4c:e2:22:c3:cc:ee:d4:
b1:fd:85:ed:b9:26:a3:06:0f:16:1b:c4:9e:96:10:
17:66:98:dc:7a:11:de:3f:fa:6a:4b:c2:5b:77:bc:
a7:43:6e:51:27:9d:f6:43:7e:32:16:b4:89:93:9b:
b3:6e:f6:86:60:bd:3a:83:5b:27:ac:b3:5c:00:9f:
df:f8:a9:46:9b:c2:a0:93:c7:91:3e:73:71:0d:e4:
e7:a6:76:b1:b9:93:47:18:1f:d7:df:47:41:48:80:
bf:36:ec:42:82:b8:47:18:4a:14:94:3f:3d:64:c1:
7a:0a:f9:9f:06:17:cc:ae:d7:ca:a7:53:15:e5:33:
b4:a3:7e:e2:3c:fa:10:47:f9:0f:95:dc:4f:7a:e8:
b4:f9:27:0e:b2:fe:d5:ac:ba:46:5a:d3:69:44:c8:
46:72:44:72:d9:06:d1:9d:41:e5:cf:59:12:66:b1:
e0:4f:e6:db:33:00:9a:56:25:cc:6d:27:b9:54:42:
37:c2:cd:23:23:3a:3b:c7:d7:8b:d2:a4:5f:a3:89:
a7:31:b7:6a:3f:6e:8b:bb:9f:4d:37:fb:04:8f:70:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:18:D9:D2:52:D8:32:8B:B8:2E:AD:70:21:AD:56:32:72:7B:83
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ab:2e:48:19:aa:97:5e:22:fa:c0:4f:79:aa:cf:c8:c4:d9:
30:b6:b2:c9:0e:36:71:75:80:11:12:e5:db:0d:ed:30:0f:74:
dd:0c:c2:a2:1c:27:24:1e:3b:6a:3d:b7:75:9c:e9:21:42:44:
e6:04:74:8b:31:b0:ca:fe:ba:72:5d:a1:19:77:2a:ac:a1:1c:
7f:3c:50:9c:fa:41:c7:e9:d6:d7:3a:53:f1:19:2b:3a:f6:62:
6f:ce:1d:b7:d3:e0:23:82:86:06:6b:07:bc:81:cd:93:43:58:
c7:89:51:85:3c:d4:7c:d0:98:c4:25:2b:07:ca:4a:38:6a:f4:
67:7a:8b:6f:1d:92:0c:3d:49:15:81:8e:c4:28:47:13:16:74:
42:7e:e4:7c:1c:62:24:db:d4:00:4c:5b:3f:a8:9c:be:b8:66:
b9:36:59:91:d4:63:a4:0f:78:b1:53:9d:c3:92:21:1a:3e:a1:
73:d0:41:1a:8a:55:89:e9:16:30:77:fd:e9:72:ef:3b:b7:4f:
dd:54:c8:01:89:48:df:1f:17:40:f5:70:59:21:d3:ea:8a:d0:
c6:dd:d0:63:44:69:88:df:cd:ed:2c:df:b0:58:03:25:c2:0f:
c9:30:6c:c2:93:70:3a:42:f3:44:ac:9d:03:bc:7d:3d:eb:d9:
6e:b5:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:57 2026 by rpki-client