Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: zUDQs7b0xiAkzOmLoD3lK4CG8ERpavFXrl1FdDR3B/4=
Subject key identifier: ED:03:8F:0F:8C:17:1C:04:A4:54:63:AF:7B:4D:A8:29:52:26:CC:BD
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 01A03E28DBADFD55779C353F7A5982764E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1A24
Signing time: Wed 26 Aug 2026 13:01:00 +0000
Manifest this update: Wed 26 Aug 2026 13:01:00 +0000
Manifest next update: Thu 27 Aug 2026 13:01:00 +0000
Files and hashes: 1: bVyEsAAvKQpoixKzifb7SAIwq1U.asa (hash: Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=)
2: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
3: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: 7Q3UUqpwx1+DHhUbD9I5sgqN6FxzyrlVFtxki1E8w+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:db:ad:fd:55:77:9c:35:3f:7a:59:82:76:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Aug 26 13:01:00 2026 GMT
Not After : Aug 27 13:01:00 2026 GMT
Subject: CN=ed038f0f8c171c04a45463af7b4da8295226ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:08:89:6f:57:5b:16:84:f3:de:d6:63:d4:
37:99:bf:f4:35:50:a7:f8:bc:ee:38:6f:29:8e:c2:
f6:4e:57:b4:6a:fa:7e:14:2f:55:2c:8d:8a:9d:25:
e1:98:ba:95:58:53:00:00:fa:3d:4f:8b:f9:3f:4a:
07:e2:7e:17:01:ae:d5:bf:7f:94:2a:6a:7d:46:98:
42:e6:fa:2c:05:8f:03:c7:ab:3c:11:ad:ba:d2:34:
76:e0:cb:92:c5:ca:ba:98:24:0d:fe:76:83:36:4b:
07:2c:cf:e6:92:ce:de:2f:1f:73:b1:1c:24:85:6c:
68:e2:82:ea:34:33:84:44:53:7b:ee:72:00:4b:81:
68:7f:3f:a7:d8:b3:08:db:c4:94:f4:c0:bb:38:f4:
67:06:7c:c8:0b:63:4a:8a:25:ae:f9:ff:9b:07:23:
9f:d2:47:47:5f:f3:a5:09:99:8e:ed:08:3c:26:88:
43:95:61:a1:87:38:01:b1:f2:eb:0e:8e:70:1b:07:
62:5d:dd:e2:14:dc:d5:7f:88:6a:a2:a5:5a:00:a7:
21:f6:1b:3d:7b:9c:40:3c:49:94:62:78:56:8f:0d:
ff:40:ee:08:51:3f:0a:23:80:d9:ad:cd:6f:ee:e8:
f1:a5:83:f7:07:f1:1c:46:98:c8:7f:3b:d7:09:b6:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:8F:0F:8C:17:1C:04:A4:54:63:AF:7B:4D:A8:29:52:26:CC:BD
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c1:f6:8a:1c:7b:1a:72:2f:7c:d0:dd:42:03:7e:a5:10:d1:
24:84:b6:e1:64:be:27:89:8c:5d:63:cc:c8:e8:81:7c:e1:05:
a0:18:81:f8:91:1d:d6:00:63:4a:44:45:34:cf:00:9d:94:c6:
3b:83:00:37:0d:0d:91:94:99:5f:80:1b:6e:a8:9c:86:f5:8e:
3d:9c:3c:a0:e4:38:37:80:0e:a3:e6:c0:8b:7f:ff:90:78:1b:
ac:17:83:cc:07:e2:b4:f8:63:3a:ea:c0:4d:e5:84:4f:a2:bf:
e9:8f:49:3b:b5:b4:d8:d3:47:79:ee:df:ce:53:c8:f2:64:f6:
96:54:78:9d:08:f6:6c:42:06:16:94:9e:3f:1b:b4:61:62:a7:
a6:07:14:a7:25:51:a0:33:d9:f9:46:c1:a0:d5:d2:aa:5e:7e:
16:6b:ac:aa:c0:2d:72:05:ce:ce:db:04:16:45:7d:6a:07:53:
d9:a7:d6:44:d4:f1:8b:d4:26:1b:37:c5:5e:23:12:a3:38:29:
0c:a3:ef:1b:df:49:d3:cc:96:68:47:5a:22:7d:a4:ea:8a:05:
5a:dc:ea:d1:45:b5:dd:29:f9:a0:f5:5e:30:b4:c6:68:ff:f7:
29:69:40:fc:65:ea:d6:cc:ce:18:3e:b2:88:68:f3:da:64:b2:
56:49:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:09:54 2026 by rpki-client