Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: DJplAfR1Cfw0kaX5rXb+wL+f/MUodW+ikfwssRTi/90=
Subject key identifier: E4:5B:FF:E1:E1:27:42:53:27:A7:3F:A6:B3:EA:B4:27:33:99:7C:D7
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 01A00213EB11E77FC3B57778F3C885323E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:00:54 +0000
Manifest this update: Fri 14 Aug 2026 21:00:54 +0000
Manifest next update: Sat 15 Aug 2026 21:00:54 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: 8hQIVPoyzQy+C9Y7xtLBDvMzH11GGHmIc9X4VMfUgR8=)
2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:eb:11:e7:7f:c3:b5:77:78:f3:c8:85:32:3e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Aug 14 21:00:54 2026 GMT
Not After : Aug 15 21:00:54 2026 GMT
Subject: CN=e45bffe1e127425327a73fa6b3eab42733997cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:62:89:e3:0f:89:7e:48:38:74:e7:db:a8:
69:08:cc:49:89:34:05:04:9f:0d:c0:a8:d5:b2:5d:
fc:4e:4f:49:f6:c1:f8:e3:8d:cc:31:d3:9b:88:0b:
1c:32:f3:fb:cf:72:a0:17:65:6b:a6:89:a3:b8:95:
09:55:6a:38:c3:ce:fe:2a:30:c3:d6:dc:1d:d0:3c:
34:20:88:47:ef:50:45:f0:cf:cf:5f:54:47:6f:f6:
a8:13:3b:f4:6c:f1:fb:cd:5e:6a:af:a9:81:05:53:
cb:2e:8c:56:26:6d:3d:40:03:2e:77:fd:23:c1:0c:
80:de:e2:82:b9:f0:98:84:6e:56:02:fe:7b:04:92:
92:42:ae:8c:95:64:ec:69:80:39:1e:82:d2:e2:3f:
1e:91:e5:ed:cb:f5:62:c3:a3:b3:80:98:1a:3a:59:
be:2e:3e:3f:db:6f:75:9e:75:f2:b8:e5:dd:97:73:
cb:fb:5a:b1:71:95:f1:d2:29:47:57:2d:b0:4c:2b:
c5:e9:d2:fe:1b:cf:09:da:67:26:46:a3:a7:ba:47:
d8:25:55:51:81:29:cd:0c:e1:68:54:98:b0:54:a9:
40:87:47:9a:42:6d:40:30:da:f5:c2:a5:aa:29:a8:
98:f1:ac:76:b3:eb:8e:45:67:50:a0:73:cd:07:ff:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:FF:E1:E1:27:42:53:27:A7:3F:A6:B3:EA:B4:27:33:99:7C:D7
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:fc:e3:33:fb:cf:8d:b9:81:ac:03:f9:d5:87:1c:79:62:
4e:97:f3:a0:3c:3c:40:74:61:99:ad:40:0b:9d:3a:a1:8b:ff:
2e:f8:d5:56:cb:f2:73:83:29:9b:d6:d3:67:5a:6a:0a:e3:ed:
45:65:8b:48:fa:bf:a0:fa:5a:0c:d3:16:2f:88:7e:71:d6:5a:
55:4c:78:0e:4f:61:3b:03:e0:d4:71:09:ff:63:74:cd:bd:e6:
fe:07:2a:76:69:85:a4:94:3d:c7:6a:18:b3:dc:28:a1:b8:21:
bf:a2:72:12:d2:5b:2f:a9:c9:7f:0a:59:5a:6c:00:12:96:f9:
b2:06:eb:86:2d:31:ce:ea:67:b4:51:5c:ab:d1:57:b2:50:4e:
ba:72:93:29:e6:9b:fc:ab:11:16:9e:1b:7c:4b:64:6f:be:d1:
20:c5:a8:96:14:81:be:2a:d3:d3:16:40:6a:a4:f0:90:7a:cc:
22:de:7f:d4:f5:5f:a2:01:92:19:c7:ad:e5:e6:79:b6:ef:d5:
01:bf:af:73:6c:03:d4:c2:b0:4c:00:62:4c:42:0f:d1:fb:61:
08:16:3d:4e:90:7d:37:2f:a8:0c:a1:57:98:7f:80:91:a4:f6:
29:6e:ee:39:4d:af:4c:d4:00:9d:99:f2:66:84:94:e3:2b:b0:
6a:05:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:25 2026 by rpki-client