
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: MaGm0NUcHXf28U8+kgph+Aet3+DluIbBSauJLOkFcIE=
Subject key identifier: 95:DA:D7:B2:53:2A:B2:57:37:F5:2B:84:6D:6B:0F:78:C0:3D:FB:1B
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 01A140828B8368B702582273964964D90FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0C4E
Signing time: Thu 15 Oct 2026 17:00:59 +0000
Manifest this update: Thu 15 Oct 2026 17:00:59 +0000
Manifest next update: Fri 16 Oct 2026 17:00:59 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: MZYYOJ7V1ERKaPk+B/hZDnVQJwLJvlob+Fwy0f6jQMg=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:8b:83:68:b7:02:58:22:73:96:49:64:d9:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Oct 15 17:00:59 2026 GMT
Not After : Oct 16 17:00:59 2026 GMT
Subject: CN=95dad7b2532ab25737f52b846d6b0f78c03dfb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:9e:f0:4c:14:21:e3:b4:bc:51:5c:27:e6:
83:fa:bf:f0:0b:43:ef:a9:2e:12:af:8d:9d:ac:b8:
ca:06:6e:a7:f1:e9:a0:6a:22:97:41:ca:6a:8c:52:
3c:b2:8e:fa:c6:46:20:03:ec:ca:85:33:4e:86:95:
21:be:e7:7b:1c:b9:fa:64:a3:95:a0:5f:52:7a:45:
f5:c6:0d:cc:e5:25:8c:d1:76:36:8e:08:c0:2b:eb:
23:04:74:e8:42:14:c3:4c:a8:1f:bb:f0:b4:5f:0b:
02:82:e7:b4:fc:dd:9a:f2:3f:ce:46:96:eb:4f:4d:
00:ba:7d:d7:9b:a8:0b:d9:25:55:38:8b:53:fa:63:
8b:20:55:15:d2:f2:c8:7d:1c:26:f4:c0:b2:52:41:
c0:45:fb:8a:a9:21:ec:4f:79:14:40:ef:c0:02:e5:
d7:c8:05:fd:08:dd:8c:6a:93:50:0c:4c:2e:79:5b:
f1:d1:35:c8:9d:a3:1a:bf:8a:d3:76:ff:a2:b3:ab:
72:6a:2f:af:03:1a:f2:ab:c0:6a:c1:71:de:62:6f:
d1:c3:94:5b:ec:1c:99:08:9b:2a:3f:69:13:08:12:
61:5c:02:d0:44:e8:e6:7c:dd:98:0d:15:63:bb:97:
c4:5d:f3:e7:35:d0:f3:44:ae:ca:3d:bc:63:3a:af:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:D7:B2:53:2A:B2:57:37:F5:2B:84:6D:6B:0F:78:C0:3D:FB:1B
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:4c:72:73:f2:54:4a:f6:9d:71:f6:2c:2f:bc:85:63:fd:
7d:73:d1:fe:c4:1f:da:19:b2:e5:37:1e:a5:6e:ee:77:41:91:
6d:3a:25:6a:0e:c8:64:03:66:9b:34:20:74:2b:07:8e:57:1a:
15:40:1c:3c:5a:15:2d:40:f8:f7:0c:56:51:2a:fe:3c:48:d8:
28:b0:a9:99:cf:da:84:86:f1:8d:6a:64:33:2c:85:02:98:ef:
30:3c:d5:7c:41:5b:21:23:80:cc:91:97:72:5c:ec:b7:ff:f5:
bb:8b:b3:7a:22:0e:8d:e2:5d:ec:ea:d2:85:5a:34:29:4f:fe:
c2:4f:c0:ff:67:19:89:15:68:2a:7d:8b:ab:37:57:54:c8:2a:
54:be:44:e1:a1:f6:20:a0:a1:ce:ca:49:40:5c:f3:b2:e2:e7:
35:07:a5:f1:d6:1c:c0:f8:d7:1a:bc:a3:6f:a5:72:f5:d1:9e:
6e:75:ec:3a:59:42:f3:68:fa:e5:78:e9:a6:3b:5d:da:62:13:
76:c4:dd:77:c2:11:9f:d1:75:0b:b9:08:e5:af:9d:0a:ce:39:
44:5f:f8:05:04:21:0b:b7:b4:4b:1d:a7:ae:3f:96:c5:a7:4d:
d3:17:d8:a0:33:62:92:6f:4d:41:b3:94:3a:6a:53:68:3d:f9:
03:2b:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:00 2026 by rpki-client