Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft
File: D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft (raw, json)
Hash identifier: ZsAiNU1GK3X1w+TZHwJASdbNAC9dXtgmpF2gCshgrME=
Subject key identifier: 6E:B8:5C:53:CD:D8:E6:5A:78:21:A1:89:D4:9C:A5:56:6A:88:F9:8D
Authority key identifier: 0F:66:F9:0E:4C:B3:8E:32:B0:04:60:92:7E:C1:52:8C:DD:75:53:39
Certificate issuer: /CN=0f66f90e4cb38e32b00460927ec1528cdd755339
Certificate serial: 01A03F72433D6CC82E041C878E8DD12ECD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft
Manifest number: 2B
Signing time: Wed 26 Aug 2026 19:00:47 +0000
Manifest this update: Wed 26 Aug 2026 19:00:47 +0000
Manifest next update: Thu 27 Aug 2026 19:00:47 +0000
Files and hashes: 1: D2b5DkyzjjKwBGCSfsFSjN11Uzk.crl (hash: +utSq6YRF3cfahNk0V71TQJ8pXUr7hp9S/zo4pKtF00=)
2: Mu58GDSUJfn4UvJE7EqOfrlPplQ.roa (hash: gL9Y1xqwkLUDYq6J0sSoP72n6rICDqrysxPHVx7d7Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:43:3d:6c:c8:2e:04:1c:87:8e:8d:d1:2e:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f66f90e4cb38e32b00460927ec1528cdd755339
Validity
Not Before: Aug 26 19:00:47 2026 GMT
Not After : Aug 27 19:00:47 2026 GMT
Subject: CN=6eb85c53cdd8e65a7821a189d49ca5566a88f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:5e:dd:36:16:0d:85:84:81:66:46:78:bb:
21:af:1f:7b:5d:59:a3:d1:b2:28:49:8c:da:ea:c8:
71:67:62:44:1c:75:53:76:4b:96:ae:f5:a2:7a:0e:
93:44:2d:0d:f1:ac:be:21:f7:2c:8d:5f:13:d4:f3:
44:ec:03:dc:fa:19:dd:df:e8:36:2c:9e:79:7f:1b:
4e:98:46:a8:fa:2a:f3:03:5f:40:88:c9:d1:3f:a9:
42:68:b8:e9:b3:cf:d3:9a:24:77:34:d0:3a:df:a1:
b4:67:e2:30:1b:7e:5e:d2:d6:13:91:ad:40:f8:c8:
4b:ae:05:ae:ea:4c:1e:f2:51:7c:03:43:05:7b:68:
b2:57:7d:46:63:8a:e7:e6:98:9a:93:2a:c2:cb:b1:
e3:e9:d0:33:28:72:d2:e8:c0:fa:e5:07:66:28:0f:
8e:7c:fb:aa:69:27:c7:f8:c5:e5:f3:e7:e8:d0:b3:
4b:2a:50:5c:e1:84:4f:59:25:c3:57:f2:5a:f6:5f:
09:d7:4e:a6:d0:44:70:ad:ce:b2:ac:cd:59:35:9f:
3c:bc:7b:62:42:ad:2b:4a:50:44:f2:65:d5:e7:75:
27:50:69:58:16:9a:39:35:ad:27:aa:3a:51:fb:f7:
5e:94:b8:0c:c3:32:ce:f6:e4:08:1f:70:c7:97:4a:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:5C:53:CD:D8:E6:5A:78:21:A1:89:D4:9C:A5:56:6A:88:F9:8D
X509v3 Authority Key Identifier:
keyid:0F:66:F9:0E:4C:B3:8E:32:B0:04:60:92:7E:C1:52:8C:DD:75:53:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:10:a5:ee:90:d4:0c:64:28:90:78:7d:3e:73:80:28:a2:
eb:94:49:be:b8:91:8a:90:6a:75:1b:4f:16:40:73:6a:e0:8c:
18:d2:99:e1:8a:bf:6e:83:0f:89:b6:48:19:96:80:4e:df:b2:
77:00:95:f0:f9:91:28:cd:62:2f:84:0e:88:0e:cd:eb:12:44:
8e:63:d2:4d:ec:e5:d3:fe:40:d0:e6:7a:53:58:0f:2a:c1:c8:
d9:a7:53:01:d5:ec:94:bb:35:da:8a:a3:c4:26:8f:e5:1c:0c:
67:1d:25:b3:0f:30:6e:0b:e6:5b:4c:5a:21:0c:d5:56:0b:74:
3a:ae:c4:c3:97:2a:32:e7:a4:de:2d:f7:17:56:eb:bf:39:2e:
dc:fe:36:40:06:2c:88:a5:81:36:0f:15:c4:54:d5:e4:37:8a:
e9:0a:ec:54:45:bc:82:8e:c3:26:eb:8d:5f:14:75:31:e9:ab:
a2:e3:35:c4:37:35:a2:96:71:f4:a6:7b:86:25:6a:59:bb:e0:
5e:43:a5:26:60:c5:aa:45:7a:32:b4:02:33:31:63:e6:ee:70:
69:9b:70:04:fa:75:5a:78:60:b2:16:5f:4d:24:9e:8a:44:0a:
22:e7:30:c4:06:bf:d0:cc:b0:15:19:26:5e:43:40:c2:16:16:
98:1f:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:38 2026 by rpki-client