Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: Nkf3ZQOG9hTnt2PtqqZkeWdQxBLgQvdlumxDkHq25VA=
Subject key identifier: 3A:5E:5D:60:0B:54:40:5B:9C:F5:B4:BC:9F:CF:5D:7E:0F:DF:30:E8
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01A13D4A7877A7B559FD63682D66B6107FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 0DD8
Signing time: Thu 15 Oct 2026 02:00:53 +0000
Manifest this update: Thu 15 Oct 2026 02:00:53 +0000
Manifest next update: Fri 16 Oct 2026 02:00:53 +0000
Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: xFGuR9Oq3meSZt6qubJr0NvuwwNCN3wWMPlzLT4vxiQ=)
2: 3oec_TyMXwngpMvuUxwQnKRoElI.roa (hash: TFcbDBit8LDG31OcoB8NyufVnMw0bC4YlIBYjbX5HV4=)
3: 834MdZoIilVHj8ITDHKmWhc4LI8.roa (hash: 0joC1jVmieeRq9IYfq18LPrQeRhpWEC9AchkePVGZrA=)
4: Po1iPTbiF1HxWAxAdi5tfajzMlo.roa (hash: 68qLDff/0Yfto5RJ5VfAe9GhmhGb2Dhs3nR+qh/T7x4=)
5: _dyCn0af7TrzRPYjSBrs5HUZebE.roa (hash: ZtsAjPVzKNH3vYir+/4QsbvP4DSxpwqWq4AOM0Movm0=)
6: hEnie4lAKWMfLCKJsCCZKZxiu1g.roa (hash: LVdc2gIDM4zgTqHBAYOGjuQI7H2q3tdcKwkXIssuGwo=)
7: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
8: u2NxmBla1aioDiQy8Ic9wZDHBZA.roa (hash: MeKtJMrZrmn/kEw4YClH6PA2tOekPQ0oTbgnsspj2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:78:77:a7:b5:59:fd:63:68:2d:66:b6:10:7f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Oct 15 02:00:53 2026 GMT
Not After : Oct 16 02:00:53 2026 GMT
Subject: CN=3a5e5d600b54405b9cf5b4bc9fcf5d7e0fdf30e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:22:bd:15:be:d9:55:cc:3d:e0:e0:53:ad:
db:e8:51:fb:9d:f9:96:97:ac:1e:3a:75:5d:36:46:
ac:6a:3c:97:83:fc:73:d0:82:e2:47:7b:20:0c:e8:
83:41:49:bb:0d:fd:bd:e0:91:b5:e6:95:99:5c:51:
d3:15:87:43:d6:27:28:80:82:fa:a6:e4:51:41:58:
f8:67:fa:e4:42:ea:2a:68:c4:9f:a8:f2:64:0e:b5:
87:0c:be:42:75:f3:71:ee:51:02:ed:7c:45:1d:30:
f3:85:58:ca:bb:13:fd:1f:ff:52:0d:39:92:3a:69:
30:fc:b5:a4:0e:a5:91:2d:e8:54:e9:e3:bb:66:5b:
be:4d:ef:e8:c2:5c:67:8e:3d:79:ed:09:dd:85:16:
11:ae:0d:a9:5b:13:c6:df:60:d8:73:27:34:a7:9d:
4d:f8:97:82:13:e3:44:9d:19:55:63:6b:ae:8a:c2:
50:4f:5f:2d:e6:ff:71:59:62:ce:40:8b:27:db:9c:
96:e1:14:80:ef:b4:a2:35:ae:a3:9f:86:20:5b:fa:
9c:98:e0:dc:8b:1f:5d:a8:7c:f9:43:e2:49:37:87:
4c:8a:95:b7:36:d0:8a:f3:d9:59:a3:82:97:b6:4b:
df:2f:cf:ed:5b:86:a0:ef:79:a2:b5:f5:3b:25:d6:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:5D:60:0B:54:40:5B:9C:F5:B4:BC:9F:CF:5D:7E:0F:DF:30:E8
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:d7:4e:ad:ee:aa:68:84:33:9c:29:9e:ae:37:0b:b3:e8:
08:9f:0a:27:86:e1:85:a1:6e:0a:68:c1:a5:79:a1:66:ec:3c:
dd:cf:a3:4f:c6:de:ba:29:f7:4d:ca:8b:70:5e:c4:5b:01:90:
14:45:0f:b4:1a:82:b3:9f:a4:d4:5d:b6:3f:27:8d:aa:a8:30:
8a:db:4d:d3:14:81:41:d0:62:90:8c:90:a8:5c:78:d2:0d:2c:
bd:02:f6:6a:67:0f:2a:bb:4d:88:19:6f:59:0e:6a:9b:ea:62:
e7:be:5b:8b:d5:74:7a:78:44:f9:99:9b:8c:7c:18:07:f6:01:
2c:40:89:71:97:e6:d8:32:af:49:bd:d6:d0:0c:bd:5c:51:2e:
33:4f:07:af:d7:e3:1e:0a:e7:89:43:8a:4e:11:37:64:75:22:
bc:b7:7e:20:99:bc:fb:15:ce:42:e8:9d:ac:b2:72:1f:ac:8a:
86:9b:b1:cc:d2:85:2a:9a:ff:80:ae:86:9b:aa:ad:55:91:c6:
07:6b:0c:e5:16:a6:f5:a8:e3:ca:81:b7:5f:55:2c:31:2a:7b:
de:38:aa:5e:dd:fd:c1:8d:1b:68:eb:c2:2a:53:94:1d:c6:53:
a0:18:91:39:be:df:6e:cb:a1:e0:eb:0b:99:e4:14:3d:d0:11:
90:49:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:04 2026 by rpki-client