Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: 8nosfSKCXPAMZTItrLg/4ewc5PMN7N1Mc1uHAKRGVHE=
Subject key identifier: CC:0B:EF:57:4C:C6:93:77:C2:05:35:7F:4E:E3:36:D1:B8:E7:3D:64
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 01A17A04101F4DE1F8BD83948E9AE9F7C309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:48 +0000
Manifest this update: Mon 26 Oct 2026 21:00:48 +0000
Manifest next update: Tue 27 Oct 2026 21:00:48 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: jsDujGCAl2vPOl/to5qWXJ4yuHBKTxm9oSCN2BwpNTg=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:10:1f:4d:e1:f8:bd:83:94:8e:9a:e9:f7:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Oct 26 21:00:48 2026 GMT
Not After : Oct 27 21:00:48 2026 GMT
Subject: CN=cc0bef574cc69377c205357f4ee336d1b8e73d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:43:bc:90:b5:1d:97:52:80:58:b4:cf:58:
9b:bc:75:5d:12:f6:71:ea:ac:c2:8a:0c:25:59:60:
ed:87:7c:58:96:8c:f9:66:f3:ea:ab:b1:52:ac:92:
e8:34:86:8a:67:c2:b2:98:1a:77:0b:de:32:8e:fc:
d4:7f:46:1d:b8:76:34:62:0f:20:6c:b1:59:77:a3:
80:0e:84:a9:4f:5f:8e:8d:e1:82:30:b1:0d:4d:de:
1c:54:73:11:e9:98:a4:ad:28:55:8b:19:62:42:08:
a5:ff:40:ae:ba:a3:67:34:71:9b:7f:ea:f7:54:78:
df:23:a7:cd:68:70:25:70:4a:d1:dc:29:69:14:9f:
7a:68:46:24:21:02:aa:88:4d:fe:fa:82:d1:6d:3d:
75:f0:fb:e9:10:a7:26:b6:7e:19:bb:15:b6:ef:2a:
08:5e:92:f2:c6:4e:b3:00:4e:f3:6b:ee:81:45:55:
67:ca:1e:62:1e:ea:bd:fc:e2:db:73:21:4b:e8:8a:
40:3d:e0:2c:41:5f:19:c7:d2:37:ff:31:b2:43:40:
48:12:8c:1d:c7:a8:51:87:35:cb:c6:73:d3:a4:46:
1f:0e:92:35:af:6f:5e:d0:aa:b3:13:22:42:15:a5:
4d:5f:4b:51:84:2f:b9:48:f5:1f:16:a0:6f:24:15:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:EF:57:4C:C6:93:77:C2:05:35:7F:4E:E3:36:D1:B8:E7:3D:64
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:74:7b:c8:c1:7e:01:1b:ff:90:eb:96:0e:bb:b8:e2:6c:f9:
b8:aa:11:bb:09:8c:29:b6:cd:72:93:68:a7:e9:c0:d0:b9:6d:
18:fc:ee:1a:04:41:b2:21:85:ca:2c:cc:db:98:ae:a1:06:c7:
8c:a0:60:a6:5f:ff:9d:29:84:4e:87:cb:13:d2:24:60:72:6b:
9a:74:3b:91:27:b2:af:2b:f3:d6:6e:ae:9b:5f:82:47:83:de:
b2:8c:b6:00:df:9f:99:23:ef:60:e0:51:ca:a3:50:19:ac:2b:
c6:41:f3:55:71:bb:75:ce:04:56:1e:af:dc:c4:4d:4e:1f:6a:
ca:fe:0e:f0:e9:34:c1:f6:df:0a:d4:d9:a6:db:0a:dd:9b:79:
42:f0:db:9f:b7:60:da:eb:1a:f2:9f:c8:58:46:62:67:c2:27:
f3:2f:97:74:30:e1:ba:83:49:0e:51:ab:5b:1a:ce:63:3d:b3:
14:db:88:a7:78:0c:88:43:f2:ad:19:12:f3:96:02:b7:c4:9a:
d5:8d:46:27:f0:1b:d6:08:9d:50:3a:1b:92:80:93:f4:a6:65:
54:f0:80:4b:ef:66:e7:73:7c:f9:49:04:55:62:f7:24:05:9c:
58:32:ff:84:ae:be:10:41:9f:13:62:f5:07:4d:4b:76:1a:c6:
9a:ba:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:56:01 2026 by rpki-client