Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: 5KJQGSYsR//w17/X4a9469JEwu0JRwerlSe7P6Hh/iM=
Subject key identifier: AE:D1:0C:8D:CB:8D:CF:63:FB:F1:3B:27:19:63:CE:E1:12:2F:B9:ED
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 01A13C6E759A6E2864246820BD8F04AB1C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 1095
Signing time: Wed 14 Oct 2026 22:00:34 +0000
Manifest this update: Wed 14 Oct 2026 22:00:34 +0000
Manifest next update: Thu 15 Oct 2026 22:00:34 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: Tl8NNh9hGsoWynymrFCrO0KjTLO/B2QeR95qGH+17wc=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:75:9a:6e:28:64:24:68:20:bd:8f:04:ab:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Oct 14 22:00:34 2026 GMT
Not After : Oct 15 22:00:34 2026 GMT
Subject: CN=aed10c8dcb8dcf63fbf13b271963cee1122fb9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:9d:2a:fb:20:20:05:99:90:32:42:14:c7:
0c:78:8d:81:93:4a:52:12:50:18:97:37:66:ab:70:
8f:c5:d7:57:b6:54:94:59:18:62:d8:f1:30:1f:0f:
de:e2:ab:e2:00:b1:9d:42:ad:1b:d2:45:e7:fc:28:
77:51:83:0f:a8:31:4d:53:9b:87:21:2f:bc:83:43:
71:fb:ed:9a:53:43:47:da:c6:dd:b5:a4:62:49:9f:
c8:59:6f:11:a6:05:58:f1:91:5e:e1:44:fc:a6:66:
32:f7:f1:90:7f:ab:a2:2b:a6:25:a0:53:a2:d6:65:
71:cb:bf:29:28:77:ee:d8:9d:ed:a5:ce:ea:b0:24:
c8:e4:06:96:b7:58:7b:f9:f6:b5:9c:f2:6e:c3:41:
8b:43:64:cb:19:44:d6:d6:73:50:26:5e:dd:71:f8:
bb:45:29:f9:e4:18:47:02:aa:f9:00:16:01:4a:16:
fe:83:c7:e0:52:2c:58:39:1e:a3:0e:31:5a:a1:1e:
52:ea:19:a4:dd:22:71:e3:47:64:b8:fd:81:a1:42:
92:4b:03:96:e4:28:92:7c:dd:da:40:1f:4a:5a:1d:
2c:6d:c5:77:f0:71:5e:96:25:07:74:07:55:10:be:
de:77:f4:a3:0d:04:41:95:0a:0b:ea:42:3a:a1:70:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:0C:8D:CB:8D:CF:63:FB:F1:3B:27:19:63:CE:E1:12:2F:B9:ED
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:0e:db:25:fe:91:71:ef:67:1d:10:11:41:a0:4e:59:9e:
00:7f:4c:5a:23:e8:a8:03:39:ff:57:a5:cf:8d:8e:83:76:11:
a3:6d:7d:d7:ef:a4:e5:a9:96:76:36:d3:fe:91:84:6b:6a:7b:
0a:bf:6f:03:73:1f:cc:a6:60:5e:36:6e:08:5b:53:bb:cf:ff:
09:a7:35:e2:c7:be:77:63:4a:2a:a6:1a:00:5d:33:42:c9:97:
c0:b8:9a:16:c1:c8:35:c4:4f:a7:fe:2f:87:64:8a:5a:e6:91:
58:e1:61:93:4f:76:5a:07:f8:d3:27:48:db:95:f7:f8:0e:83:
eb:cb:17:69:4d:4e:7c:8e:61:e5:84:74:b5:37:0c:84:e6:71:
de:0d:21:77:83:7b:65:90:25:41:62:8e:8f:5f:48:a2:04:e4:
a3:ef:2a:5f:a7:29:88:c7:5e:48:27:f5:a2:dc:01:65:2d:e1:
7f:4b:c4:c0:aa:97:b9:a4:d5:2b:ea:88:45:2e:5a:52:fd:15:
1d:96:dd:05:15:40:69:3b:90:cb:98:eb:13:28:d4:c8:24:77:
e5:4a:6d:55:69:31:37:39:6d:8d:6f:a7:de:a9:2d:f9:0a:19:
b9:85:f1:e9:1c:e6:15:5d:b7:0e:8f:8a:7a:89:c1:1d:a4:eb:
95:71:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:58 2026 by rpki-client