Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
File: 2UxqDiFt4bpgtuBRuhcCZ49naaI.mft (raw, json)
Hash identifier: U/U9avcJGFRasMDa72Uo1Al0uKpQmPHks8yS7TX4J4Q=
Subject key identifier: C6:E1:39:90:B7:84:75:BE:4A:43:14:37:DF:35:FB:80:9B:8E:93:5A
Authority key identifier: D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2
Certificate issuer: /CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
Certificate serial: 01A0F18B608E763BB714517995851D136B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
Manifest number: 27
Signing time: Wed 30 Sep 2026 09:00:38 +0000
Manifest this update: Wed 30 Sep 2026 09:00:38 +0000
Manifest next update: Thu 01 Oct 2026 09:00:38 +0000
Files and hashes: 1: 2UxqDiFt4bpgtuBRuhcCZ49naaI.crl (hash: 8SyPZxaVW2u7W7NlrlhtIp2uAcrzHFnS+RcpCcCozR4=)
2: nn3-Nc19uQpF1qtjhKcyJzD8RHE.asa (hash: mahrtyb/erZ88C0Jjyf46lIPEWXfHIkWk1CA7KUFLY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:60:8e:76:3b:b7:14:51:79:95:85:1d:13:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
Validity
Not Before: Sep 30 09:00:38 2026 GMT
Not After : Oct 1 09:00:38 2026 GMT
Subject: CN=c6e13990b78475be4a431437df35fb809b8e935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:30:48:a2:40:93:8e:0f:30:dc:cb:a9:00:
80:78:a7:29:57:b7:b4:06:9e:76:e0:46:e1:89:52:
85:8f:21:73:86:e1:d1:78:d5:12:0f:dc:f4:b2:a6:
70:af:94:ff:e4:55:45:51:63:29:d1:75:87:d5:4d:
9e:7d:ff:b5:6b:1c:ad:ac:93:ed:c7:22:da:50:09:
ad:7a:80:ad:ac:3b:d0:9e:49:8d:fc:a2:d3:e2:5d:
60:7b:ce:2c:0f:30:78:10:f7:3b:5e:ed:77:0b:93:
7e:00:61:fc:ed:ed:5f:3a:4a:e6:b6:15:37:23:60:
87:85:15:d0:36:68:69:11:61:55:e6:6e:f3:4f:0a:
2e:af:c1:c6:b6:6b:d1:f9:50:89:15:34:31:25:50:
9d:a1:46:4e:5a:9c:8c:c5:91:ff:5f:57:a1:c6:20:
e5:ab:97:6d:b7:0c:ec:48:6f:7e:28:a5:e0:7d:07:
df:7f:ae:f0:3c:30:38:38:28:c3:a4:3a:25:89:3e:
ee:07:c2:f0:ef:cc:d2:70:c5:92:0d:81:b7:4e:e8:
7e:98:5e:d7:d9:53:6b:1a:bf:eb:8a:95:ae:5e:de:
23:9b:1b:43:be:58:cc:57:f0:62:23:a7:7b:89:a3:
a7:1c:21:14:de:d0:bc:18:16:5e:84:b3:af:08:f0:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:39:90:B7:84:75:BE:4A:43:14:37:DF:35:FB:80:9B:8E:93:5A
X509v3 Authority Key Identifier:
keyid:D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:09:b5:d9:0c:86:ff:ef:6c:2a:b1:1e:6d:75:46:a3:38:85:
9e:b4:6d:3b:a4:55:f8:ff:97:f4:7a:1c:43:f7:ec:c1:ab:b0:
e0:b6:ba:f0:d7:1d:79:a7:2c:08:ab:33:fa:56:cb:b1:3e:8c:
cf:b6:f4:86:3d:65:1d:63:84:7d:f7:0a:8d:11:c5:9e:07:17:
18:e3:86:50:b6:d5:0d:2e:82:4f:4d:a7:16:eb:64:70:ba:7f:
e4:f5:9a:04:24:a8:2b:b4:05:dd:77:af:29:70:74:21:56:ef:
63:91:a7:5f:df:3b:9f:33:85:c7:7e:cf:f1:1d:d6:bc:4c:da:
ff:03:99:c5:92:c8:90:83:22:50:9c:db:f4:3a:90:a0:e6:bb:
71:a0:2e:51:92:c6:1b:b7:af:e8:02:68:40:aa:df:b0:ce:de:
10:8e:d9:da:5a:2a:f8:d6:3e:2b:7b:6c:fe:f7:07:81:05:0e:
97:dd:17:80:22:aa:de:f7:17:e0:8d:4f:4c:2b:26:dd:70:ef:
2b:6b:e8:c3:7a:04:26:0b:10:b6:07:f5:9e:c9:77:8f:39:a9:
4f:df:a4:90:69:6a:66:c7:5e:e6:80:e1:07:f4:88:62:bd:54:
0b:db:01:34:8e:df:6b:8f:54:a5:52:ca:77:50:01:2c:bf:ae:
8f:9f:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:59:08 2026 by rpki-client