Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: z/fl5LUrHoh+xFYeIxk1Wx9HkSsb4j4Tx8l+HaUq8Ho=
Subject key identifier: FC:4C:19:BB:56:24:65:9A:DF:37:78:A3:B2:DB:6A:62:7D:8E:8A:7C
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 01A00137F8394DB5DFE664426E25F5B57BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 17:00:40 +0000
Manifest this update: Fri 14 Aug 2026 17:00:40 +0000
Manifest next update: Sat 15 Aug 2026 17:00:40 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: 0FmltfH1RF4I2acMWS6QiWGYNQjCY8ih0PxOfZTJvdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:f8:39:4d:b5:df:e6:64:42:6e:25:f5:b5:7b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Aug 14 17:00:40 2026 GMT
Not After : Aug 15 17:00:40 2026 GMT
Subject: CN=fc4c19bb5624659adf3778a3b2db6a627d8e8a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:a9:ce:77:72:b9:8a:d7:13:c8:72:35:16:
0d:70:18:1d:11:5d:42:a7:ee:cb:68:46:72:48:d3:
66:ac:38:06:9d:00:f5:3e:59:d6:c2:f1:a4:31:8c:
d7:0d:4d:da:80:35:8a:b6:32:0b:85:66:03:ac:55:
10:51:b9:dd:64:8e:15:54:b5:6e:31:67:5e:93:f4:
49:ac:0c:3b:0c:e6:db:25:0e:b6:16:17:0a:ab:d5:
0e:b5:14:f0:50:15:86:7a:ea:7c:5b:df:ab:46:6e:
33:2e:f5:32:c0:02:cb:be:99:00:89:6c:2f:ed:7b:
f0:44:24:bf:5f:c7:82:ed:a6:1b:4e:86:4c:90:b6:
62:4d:52:eb:ea:28:01:5d:15:47:59:10:af:b9:46:
85:89:9c:df:b0:18:79:4d:b6:7a:d0:65:30:0d:44:
81:f7:e1:bc:01:90:7a:6d:97:10:37:63:1b:7d:77:
43:3c:3d:d3:28:e1:b3:3e:5a:2c:f3:70:16:76:2a:
e9:62:b4:dd:b7:c8:be:92:8f:94:f4:2a:4b:ac:b0:
4f:82:4d:03:ba:4f:6b:7f:eb:72:91:67:ed:cb:58:
e4:b5:92:93:12:fa:4d:71:8f:ed:a7:7e:ec:40:99:
cb:12:e4:80:84:55:7e:06:cd:57:02:13:15:81:3b:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:19:BB:56:24:65:9A:DF:37:78:A3:B2:DB:6A:62:7D:8E:8A:7C
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:64:d1:20:7f:15:fc:84:5e:f6:a6:cb:8b:b5:14:5a:11:
97:4c:8c:6b:90:aa:35:2e:0f:d6:19:47:c0:c2:fd:28:53:07:
24:a3:ae:57:88:1d:90:86:6b:39:ac:64:bc:3f:21:07:a8:bc:
c5:c8:b1:de:4b:ce:1d:27:1a:c9:1a:51:7d:9a:ae:2a:0b:55:
b6:21:03:b8:1b:c0:fb:fc:7e:72:3e:0f:94:78:6a:f4:89:41:
7e:1f:45:60:de:68:a5:d1:20:28:96:b3:0e:5f:42:4a:fa:06:
0d:13:38:a2:a2:4c:f5:41:b5:91:cd:92:a0:e6:2a:6a:d7:6a:
bd:ec:e7:29:56:a9:40:24:43:eb:ff:d6:c3:97:8a:d5:ad:df:
2c:72:90:5d:e3:af:af:99:39:84:98:0f:70:de:21:b6:1e:5b:
34:0f:14:41:84:67:54:44:85:70:2c:fa:88:c3:73:dd:fe:0b:
b8:04:c0:bc:99:da:5c:75:14:fb:d3:2e:dd:2d:42:c1:8c:b4:
1b:38:96:87:53:c3:c0:8e:43:45:ad:5b:3a:18:0e:c1:ec:f5:
d1:61:75:d3:df:f8:21:46:58:2c:e9:4d:98:13:68:ef:19:ea:
aa:e0:f7:c0:df:2d:d6:80:ce:4c:05:96:68:2d:1b:57:a6:c5:
37:40:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:29 2026 by rpki-client