Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft
File: 2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft (raw, json)
Hash identifier: g/8zsFGnW3FS1AD+peRCjKa3AdNH4IWRzKUZPfxZ0/I=
Subject key identifier: E5:A3:EC:3B:6F:35:81:92:BA:FC:8D:15:C1:89:A0:7A:D3:EC:80:B1
Authority key identifier: DA:17:28:42:F9:62:1D:7A:A5:2F:A3:23:8B:46:4A:06:F2:89:C0:19
Certificate issuer: /CN=da172842f9621d7aa52fa3238b464a06f289c019
Certificate serial: 01A16533AFB30580285C9AD7AC29124654F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft
Manifest number: 08
Signing time: Thu 22 Oct 2026 20:00:48 +0000
Manifest this update: Thu 22 Oct 2026 20:00:48 +0000
Manifest next update: Fri 23 Oct 2026 20:00:48 +0000
Files and hashes: 1: 2hcoQvliHXqlL6Mji0ZKBvKJwBk.crl (hash: PQE8A7t5/Pwc95T/lnq9WXYF6NHR2bLub6C1E59DVpY=)
2: Kt8bEFaFENkzAX4iCvjFzVXkfnM.asa (hash: iuccna73P4m1/WMCdiIUX3dr8PmdiCcQ6n8ODuaqJoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:33:af:b3:05:80:28:5c:9a:d7:ac:29:12:46:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da172842f9621d7aa52fa3238b464a06f289c019
Validity
Not Before: Oct 22 20:00:48 2026 GMT
Not After : Oct 23 20:00:48 2026 GMT
Subject: CN=e5a3ec3b6f358192bafc8d15c189a07ad3ec80b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:72:30:96:4f:6f:b8:77:b1:f5:70:d1:3a:
fd:d4:1a:ad:cc:ab:d7:8d:09:76:29:5a:db:ac:8a:
06:16:43:8b:22:96:5e:fc:53:d3:da:9f:ce:8e:b5:
a0:88:9b:1c:c1:ac:77:f9:96:2e:35:70:03:f4:c2:
20:7d:ac:08:8e:f5:a5:66:75:ac:f1:eb:66:c7:e4:
12:9a:0f:f4:2e:0a:5c:f2:ed:b5:53:5f:e0:c1:c7:
49:5d:a1:a3:ea:72:c9:96:b3:94:38:62:26:73:4e:
44:94:8a:be:83:e1:9a:26:95:27:19:4a:4f:9b:d6:
b3:fb:54:63:e0:a4:07:ad:f8:d8:56:40:f0:f3:4d:
d0:20:5e:77:ff:ee:a8:ef:47:72:d7:bc:08:e0:f0:
a7:09:62:aa:40:09:c9:4e:94:ae:18:34:f4:3e:bc:
c0:17:9d:08:a6:52:a8:49:54:f5:4f:ce:b9:82:11:
2d:bd:b9:3f:3b:df:2e:ad:ad:52:0f:14:2b:ba:ab:
96:2a:99:cc:42:a8:c0:1c:0c:06:d7:46:db:d0:8c:
17:62:70:41:c8:39:11:16:c2:95:3a:a4:b1:7c:e9:
06:2b:38:f9:dc:74:b0:a1:18:68:6e:c5:62:5e:8e:
0e:68:b9:b1:39:4b:a4:3c:0f:78:19:86:71:c2:22:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:EC:3B:6F:35:81:92:BA:FC:8D:15:C1:89:A0:7A:D3:EC:80:B1
X509v3 Authority Key Identifier:
keyid:DA:17:28:42:F9:62:1D:7A:A5:2F:A3:23:8B:46:4A:06:F2:89:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fa:7a:f2:e2:cf:19:f0:3f:48:80:5e:55:b3:43:dd:6d:64:
3f:74:96:a5:d2:a9:8f:41:91:b1:d7:29:b7:50:17:a5:b9:10:
f8:df:35:40:de:52:55:c1:41:53:b9:58:7f:93:c3:a6:ca:c1:
c9:31:94:35:c2:8b:7a:c0:92:bb:ff:1a:d5:3a:d0:f4:0e:b8:
40:26:e5:28:b7:51:4b:15:bf:3e:ea:46:c7:e8:58:2b:d1:ea:
2e:95:1d:07:5f:d5:ea:c6:55:e5:a3:d9:e1:a9:88:89:4e:05:
89:af:a8:a0:ad:00:e3:df:18:67:6d:0e:ca:dc:66:2d:6b:ad:
8b:cb:53:d2:3d:6a:03:86:5e:d4:60:65:a5:91:3a:73:e6:59:
9e:a6:2c:42:c0:1c:1c:d2:fa:4f:4d:d6:17:1c:26:97:53:37:
ae:d7:50:fd:31:2b:81:02:af:21:1a:45:e9:5b:74:16:9e:38:
8d:bd:aa:d3:8b:44:eb:76:79:44:3e:3b:a2:dc:0f:55:3d:2b:
84:59:64:e2:bd:9d:53:fe:8a:57:b1:ee:7e:35:3a:61:8a:7c:
2e:8c:fd:d1:22:1e:37:e4:7d:bc:6f:80:48:54:9c:c5:33:e2:
24:ab:2c:1b:7d:17:0a:fc:47:77:25:b3:70:28:ca:c7:de:80:
6f:46:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:18 2026 by rpki-client