Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: YbYKrOfM3t3ZV3Iz8OcYmZFADISAQ3T8StgaTKE84pM=
Subject key identifier: B4:78:E9:65:E5:27:20:39:A4:15:D9:1E:FA:79:CC:85:E4:D8:32:10
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 01A12579D2F3ED8A98E93CFE245E28DBCCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0BF7
Signing time: Sat 10 Oct 2026 11:01:43 +0000
Manifest this update: Sat 10 Oct 2026 11:01:43 +0000
Manifest next update: Sun 11 Oct 2026 11:01:43 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: Xyah7qMQ+NAs5XomyR0Rcf1dFXTZ3QSalWkK8bm4ar0=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:d2:f3:ed:8a:98:e9:3c:fe:24:5e:28:db:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Oct 10 11:01:43 2026 GMT
Not After : Oct 11 11:01:43 2026 GMT
Subject: CN=b478e965e5272039a415d91efa79cc85e4d83210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:e2:63:9c:9f:fb:2b:84:f0:7d:65:00:e0:
fe:8d:e2:25:6d:f7:72:ba:b9:5a:8b:62:a6:80:47:
6c:e1:97:b4:4e:72:2d:c9:bb:bb:74:86:39:02:36:
50:e9:68:f5:b4:40:ef:4b:07:44:05:47:62:89:4d:
02:7b:e3:9f:03:54:7a:c1:51:79:bd:f0:33:2e:b6:
e8:6d:dd:7f:17:dc:e0:dc:56:33:1c:a2:04:5d:b0:
ed:22:82:a4:a6:e1:35:ad:8e:b0:c6:60:80:56:77:
d2:bd:4e:e1:4e:88:b6:f4:c0:10:bd:dd:c5:56:2d:
d0:bc:d3:47:68:b4:57:31:22:6a:0a:a8:e4:84:c6:
32:77:de:df:57:c6:63:7e:4c:2c:7f:96:6e:b0:2d:
a5:eb:df:cc:86:1d:c4:26:f0:52:8a:77:e1:4a:e4:
05:96:ed:67:74:92:cf:cf:ef:8d:ea:24:89:30:b3:
f0:56:32:f4:67:9e:1f:28:dd:77:2c:f9:7b:41:e8:
a6:52:f0:1e:42:fd:20:6d:c4:2d:91:f7:26:c3:b8:
84:42:07:b6:4d:7b:bb:d1:dd:c2:0c:c3:9f:13:62:
71:b9:9d:f4:be:4d:2a:09:23:1e:f5:ff:31:45:51:
8a:d7:c4:00:3c:9c:6c:3d:8a:29:23:06:76:bc:6d:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:E9:65:E5:27:20:39:A4:15:D9:1E:FA:79:CC:85:E4:D8:32:10
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:62:46:a5:3e:5b:8f:a0:37:60:f5:1c:98:a9:ea:71:80:
9c:0f:5b:95:82:8e:7c:38:74:6d:a6:11:cf:96:a8:71:ad:04:
47:70:e7:52:66:af:6e:cb:e7:9c:f1:fd:6b:c4:b8:d5:9f:af:
a8:50:bc:93:23:41:d0:c8:07:c5:32:fe:83:8d:e7:87:6a:55:
f6:b6:23:0e:54:4b:7e:39:d9:8e:1d:75:a2:0e:44:02:12:e6:
b5:8d:1e:59:a8:e6:55:74:66:b5:5c:00:d6:3b:22:c4:16:61:
3a:e9:2a:78:ac:3d:5f:60:45:fc:ac:6b:6f:c0:ae:73:9d:1d:
60:a1:19:d4:09:22:e9:ab:a8:c4:b6:a4:0f:7e:90:7c:5b:ea:
67:79:cc:13:84:9d:45:ee:c4:3c:21:3e:f2:52:98:91:2d:55:
95:14:20:18:92:0f:5b:c0:e4:04:ae:95:79:73:84:c3:6d:6a:
c8:78:99:bd:42:66:6d:19:11:f7:df:e4:d1:6f:89:99:4f:bb:
31:35:f1:c2:3e:0d:db:98:66:8c:50:03:15:bb:84:6c:e2:f4:
c7:96:c9:5c:84:72:af:c0:0a:62:f6:be:dc:aa:45:82:72:75:
69:0f:f7:d0:42:05:ab:6c:55:e3:0c:e8:7e:2e:30:83:90:19:
a6:85:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:57:22 2026 by rpki-client