Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: kteDW6yODIXwkOV3Rv+gOQx4WgyWSi/04oXGMPRdO9Y=
Subject key identifier: 4F:A9:FF:2F:D8:DA:CE:7C:80:09:74:35:3C:03:5C:A4:CF:67:62:C5
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01A13E5D3BCD8271F0D6B9A3F1341B959109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 07:00:59 +0000
Manifest this update: Thu 15 Oct 2026 07:00:59 +0000
Manifest next update: Fri 16 Oct 2026 07:00:59 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: UYi/fcvHGe0hN0J2jyhtzfS35ZEqZO4DGYMQoqBXxNA=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:3b:cd:82:71:f0:d6:b9:a3:f1:34:1b:95:91:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Oct 15 07:00:59 2026 GMT
Not After : Oct 16 07:00:59 2026 GMT
Subject: CN=4fa9ff2fd8dace7c800974353c035ca4cf6762c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f4:d1:f4:64:43:f6:9b:5a:af:dc:25:82:8c:
9c:90:28:bf:81:9e:14:b5:fa:c9:1d:1a:21:0b:48:
4a:c1:84:21:70:39:b7:97:64:d3:f6:54:80:0b:cf:
fa:4e:9a:05:ea:a3:a5:6a:06:d4:02:75:de:af:2e:
cc:2c:f8:e2:14:f4:00:0d:99:ad:40:c7:4d:90:c5:
ae:6b:ed:b3:3c:be:c5:29:5b:c2:0a:bf:a5:59:11:
35:19:de:f3:f7:aa:a3:f8:7b:f3:34:e8:2f:23:47:
87:01:e0:0a:66:89:54:4b:a5:0c:ff:80:8c:a8:bb:
44:cb:40:5c:7b:4c:a7:3d:9e:2d:41:ad:04:b2:a6:
9f:e0:68:93:36:f1:fa:ca:99:e9:8a:f3:54:54:6d:
65:48:bc:ac:33:6f:f8:f3:6d:bc:99:dc:71:b8:01:
1e:95:37:42:8d:7d:c9:3a:ee:9a:1d:a5:be:d9:2c:
1a:ba:b0:f5:d6:a2:4b:00:d1:73:a6:b0:d2:9a:a8:
a8:08:78:3f:6a:23:36:eb:82:fd:04:8a:9c:7f:c2:
95:e2:c2:19:a1:40:cc:be:a0:a1:e4:98:40:0f:0a:
62:34:db:ec:9c:e6:71:e3:ab:b4:5d:c4:d7:a7:b8:
2f:f5:9f:05:a9:6b:04:c9:22:86:dc:a1:84:6f:0f:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:FF:2F:D8:DA:CE:7C:80:09:74:35:3C:03:5C:A4:CF:67:62:C5
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:39:3a:c9:0d:34:9d:3c:1c:ea:03:6b:94:46:2b:1d:52:75:
ed:ab:a6:b6:6c:ad:12:68:46:be:1a:b9:1d:e9:7a:f8:dd:21:
ea:0e:c0:ee:35:88:cf:d0:0a:ce:9b:35:ae:3f:41:ce:e6:ea:
52:d1:55:b2:be:3f:5f:fc:fd:2b:47:cb:a7:76:16:19:dd:3d:
5f:de:72:b5:1e:0b:b0:1e:6f:f6:29:b8:60:2d:21:79:f6:39:
d0:a6:ad:c8:ae:2f:50:d1:e8:cb:9f:c7:10:45:86:b5:ed:fb:
5c:43:b2:ec:56:05:83:e2:b8:1c:fa:0e:3f:0e:56:7d:1c:d7:
82:93:68:c5:78:78:98:3c:ed:79:e9:77:49:4e:4c:12:2e:a0:
ed:8c:ed:9b:a1:b0:85:56:73:65:25:f4:f7:9b:b7:a7:b6:aa:
02:32:60:f0:3e:ce:50:99:8e:69:93:7c:7c:a7:2f:7e:52:30:
2a:07:5a:88:d6:95:97:49:9d:98:12:88:10:f3:46:03:83:e7:
03:94:c1:bf:cb:a9:b3:61:e6:64:0e:a3:b3:0b:83:b2:33:61:
1f:d7:42:3a:16:21:88:6b:7f:ad:5f:77:f5:7d:a8:db:f0:db:
81:b8:3e:68:44:16:5c:2e:43:d1:7f:4b:c6:ec:60:fa:93:b5:
b4:7e:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:34 2026 by rpki-client