Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: QcOILBA/29FI9FAVtiHu3ekV+zxIDKI9oUnif1VPjR4=
Subject key identifier: BA:A4:0A:41:14:9D:C7:33:7D:FA:7C:1F:42:0B:67:D1:F4:E6:A4:78
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 01A13E9523F351944461C0739E45209DD831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 08:02:03 +0000
Manifest this update: Thu 15 Oct 2026 08:02:03 +0000
Manifest next update: Fri 16 Oct 2026 08:02:03 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: TzreJNXhPyx+Ga915d8r06X98Ad9w89WXLw1+TpiLeo=)
2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:23:f3:51:94:44:61:c0:73:9e:45:20:9d:d8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Oct 15 08:02:03 2026 GMT
Not After : Oct 16 08:02:03 2026 GMT
Subject: CN=baa40a41149dc7337dfa7c1f420b67d1f4e6a478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:be:77:4f:ad:69:29:1d:c5:12:85:0a:d2:
95:51:fd:c9:e7:fe:24:07:9a:80:16:ff:b4:c5:b8:
9b:c3:61:d0:8e:3e:af:27:94:76:dc:91:5c:6e:a4:
0b:88:d4:5f:60:7b:07:7d:bd:09:d5:36:22:c8:2c:
d9:8a:ca:b2:23:73:50:2a:50:95:3a:63:eb:30:cc:
c6:a8:2d:e7:ff:18:c6:3d:4d:3c:91:53:74:0c:30:
a6:b6:12:be:f4:c2:f7:c6:57:b0:22:2b:31:a1:3a:
23:62:a2:2c:8f:0a:ef:eb:9b:0d:eb:60:d9:38:5c:
6c:ce:cb:4d:3e:52:ad:00:27:73:0c:c1:1e:57:e7:
f6:f3:96:f7:7f:f2:fa:e1:24:4d:4e:de:a8:2a:72:
b4:b2:6c:2d:ad:a2:6f:c0:8d:dd:a9:7d:f5:5e:4a:
0f:c2:99:e3:de:1a:88:06:07:16:3f:4c:ff:f2:0c:
cd:2c:7d:16:5c:e5:87:2d:b0:b1:6b:de:b6:e7:3a:
2f:04:7c:d8:95:2e:60:29:90:50:94:e8:9c:b3:6d:
79:13:9d:df:c1:bc:69:2a:77:ac:51:ac:16:ee:0f:
15:6f:f0:81:29:e0:e5:54:cd:26:ab:64:e0:72:be:
d0:4a:a7:1c:ef:4a:63:a6:25:6c:94:54:6b:f5:f5:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:0A:41:14:9D:C7:33:7D:FA:7C:1F:42:0B:67:D1:F4:E6:A4:78
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:36:5b:a8:d2:35:82:aa:97:f0:06:e5:64:c8:9d:08:86:
8a:91:f5:8e:3c:f0:50:5f:09:ec:6a:69:a4:72:76:5f:54:10:
58:84:40:b6:e8:bc:ab:9e:ac:9a:d2:d7:00:d0:2b:56:1a:69:
8d:91:ed:c1:08:a7:92:88:25:bc:19:25:5c:a3:b0:44:4a:a1:
8c:90:48:b2:58:32:73:1b:33:11:1c:d2:56:d0:1f:d5:a8:4a:
80:ce:d5:50:97:96:ea:4a:4d:19:63:2a:84:4c:bb:d0:8b:7a:
bf:e6:a9:6c:a2:f7:84:41:fe:b5:7a:a7:29:b8:a4:60:34:f5:
59:81:42:67:b1:61:20:9a:5c:39:db:92:17:17:df:84:14:05:
f5:49:7a:d2:f5:78:12:64:d8:90:b3:61:46:94:86:54:4d:dd:
1e:42:4d:b7:f5:d3:0b:f6:e0:8f:b1:d7:11:9a:32:1c:e1:4a:
81:ac:43:5f:48:5b:56:5b:6c:4e:9b:09:c3:e3:11:fc:70:36:
79:85:f6:1c:09:c5:75:0f:40:47:0a:c6:c5:79:76:70:d0:2f:
67:15:f8:fa:e8:bf:90:13:58:11:4d:70:75:09:9c:6c:cb:25:
19:bb:87:c5:87:c7:4e:4e:48:96:4a:a5:d8:35:9d:dd:50:2e:
c6:d6:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:37 2026 by rpki-client