Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: 8APreOCEwzLBBGeqBjDc54C6R6EW9Jhy+cdNPcF0EHE=
Subject key identifier: C3:EA:09:B6:23:D9:36:AD:06:72:02:73:05:2C:47:7B:7F:22:32:8D
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 01A14C86889503DB3F0B5B98162D96E64D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 19DB
Signing time: Sun 18 Oct 2026 01:00:47 +0000
Manifest this update: Sun 18 Oct 2026 01:00:47 +0000
Manifest next update: Mon 19 Oct 2026 01:00:47 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: DEdsXjygLGnE6+gY2b/d6s0fx3kkqOn9hKoAhZH8D+E=)
2: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (hash: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:88:95:03:db:3f:0b:5b:98:16:2d:96:e6:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Oct 18 01:00:47 2026 GMT
Not After : Oct 19 01:00:47 2026 GMT
Subject: CN=c3ea09b623d936ad06720273052c477b7f22328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:5f:32:f9:14:d0:b6:c2:f7:b0:19:2f:91:
a3:61:75:fe:9c:88:76:d3:c6:94:e0:cf:dd:7a:76:
0d:fa:34:3e:2f:f7:c3:de:eb:12:da:9a:78:6e:b2:
72:cb:d3:3e:28:1f:24:18:f9:13:2d:00:6f:97:de:
79:6e:7d:55:3b:61:63:83:54:ab:e7:b7:06:aa:c3:
9f:d9:dc:ce:b2:eb:bc:da:3c:09:0c:fc:de:09:c7:
cd:5e:21:c5:03:95:7a:a8:88:cc:ca:b0:93:30:b1:
b8:0d:62:0e:d5:b4:a9:aa:6f:d7:60:40:a7:b8:15:
2d:d1:f8:52:07:99:98:13:9f:d5:43:f5:d2:0a:1a:
73:4c:c4:ae:ff:78:07:c6:85:4b:37:df:dd:72:8a:
c9:fd:cd:16:0f:d0:4e:28:a3:98:37:a8:39:71:93:
b1:b4:15:3c:67:75:92:91:3a:16:0c:73:5e:d4:f9:
92:dc:41:77:2c:24:3a:34:fa:2f:1b:b5:92:58:51:
7b:9e:58:17:62:f4:c4:e8:94:8c:2e:26:87:d9:63:
d6:76:1c:ea:f9:1a:60:9a:bf:fa:8e:15:a2:18:b2:
ac:b6:ad:77:16:0c:41:de:68:9b:78:59:e0:73:9e:
c0:58:b9:26:57:0f:5e:31:3f:57:11:ee:dc:95:dd:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:09:B6:23:D9:36:AD:06:72:02:73:05:2C:47:7B:7F:22:32:8D
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7b:07:89:29:c3:73:4d:ea:ef:2b:c2:13:61:c6:8c:1f:7a:
92:29:fb:bb:b3:da:28:87:59:53:51:7d:88:82:22:c9:b7:4e:
59:5e:d1:33:85:9e:91:6b:66:cf:f4:37:47:d9:de:13:ab:16:
11:5c:b4:20:6d:a0:7e:1d:4e:90:81:e0:9a:1f:01:ab:d4:f8:
a0:8b:8d:5e:db:94:9c:aa:43:ad:62:44:49:94:e7:92:07:4c:
ab:53:90:28:aa:b5:8b:f0:1a:3f:2d:75:ea:6c:7f:ec:fc:a5:
36:4d:9e:14:2f:0a:9f:6c:86:23:66:9b:ff:03:2f:8c:0c:88:
f9:d6:cb:19:7e:6c:fb:08:91:25:0b:57:de:7a:87:0b:d8:2f:
2f:d7:fe:aa:77:15:00:f6:10:82:e5:b9:79:80:5f:06:25:a6:
f2:14:4b:ef:77:f3:79:bb:aa:2f:34:e8:62:bd:3b:c7:9c:72:
68:67:c2:88:b2:1c:de:54:80:e3:0c:f5:c1:40:58:17:9c:5e:
30:a6:d2:a0:66:2b:e1:3e:3d:f0:63:49:de:63:97:69:12:0e:
e2:8c:89:66:14:53:14:73:85:f3:64:40:ff:c2:79:dc:81:cc:
2c:a3:d8:e6:e5:3e:99:b2:1b:90:9c:df:c3:59:c0:35:30:19:
72:f4:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:03 2026 by rpki-client