Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: csJGFxsyT2/AqqgD3JuAWwlc3gKv29MGvsSlikhlLas=
Subject key identifier: C8:37:E5:9F:60:E4:F7:09:C2:18:F1:A8:7E:C7:FB:49:E9:90:C6:72
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 01A18E66C6DDB4FA85EE17D676BF76887B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 1A28
Signing time: Fri 30 Oct 2026 20:01:02 +0000
Manifest this update: Fri 30 Oct 2026 20:01:02 +0000
Manifest next update: Sat 31 Oct 2026 20:01:02 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: 8Qo2x76dEGpQFIBS66jjm/h4VxRceBGQYr+Gcfrqsug=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:c6:dd:b4:fa:85:ee:17:d6:76:bf:76:88:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Oct 30 20:01:02 2026 GMT
Not After : Oct 31 20:01:02 2026 GMT
Subject: CN=c837e59f60e4f709c218f1a87ec7fb49e990c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:08:ad:73:53:90:34:fb:10:c5:86:0e:d8:
26:12:10:4f:74:37:50:a5:eb:e1:7f:05:7d:a7:4e:
88:a9:a0:92:33:fd:1b:dc:d6:77:a0:87:28:cb:86:
7c:84:0a:c5:84:87:18:22:c3:99:c6:4d:51:e1:18:
79:9d:e1:20:be:98:c2:5e:67:fb:64:75:98:25:5b:
17:70:03:0c:4c:51:f0:84:5b:f2:45:cb:f0:8b:ea:
d0:09:d1:29:98:9c:ad:98:3a:28:25:43:df:1e:b6:
2e:da:2a:be:29:00:e2:f6:b5:86:06:2e:d6:9b:3c:
b5:75:98:9b:97:f6:45:53:d7:f3:30:4d:58:55:86:
95:75:9d:1d:72:02:46:82:45:62:af:8d:05:8c:9d:
a0:b9:34:b0:d3:1c:65:34:c0:91:a2:98:ba:a4:c0:
cb:c9:fb:8d:c0:b8:22:83:0d:3b:dd:b3:a4:84:86:
a3:2b:6b:a1:f6:cd:89:de:cd:c6:1f:0d:73:72:8e:
1f:ca:36:d6:9f:01:28:55:52:60:40:11:1e:95:e8:
9c:bb:d8:41:bb:fe:98:a1:6f:98:e6:15:93:d7:3c:
11:8b:b5:0c:f1:7b:54:0e:d8:52:82:5a:e1:cc:92:
61:5e:f3:78:9e:13:f9:77:ca:d9:d3:89:a5:8b:66:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:E5:9F:60:E4:F7:09:C2:18:F1:A8:7E:C7:FB:49:E9:90:C6:72
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:34:79:a5:ab:1e:85:e2:0f:3d:2c:32:67:f5:98:38:13:
c0:5e:26:78:60:fe:04:14:63:2b:ed:b7:af:38:21:f7:eb:59:
e7:ff:66:33:66:fb:d7:52:46:0f:a6:9f:e1:3c:ed:c7:35:55:
2a:04:3f:1f:14:44:71:fe:2d:a3:5b:50:84:78:da:3d:88:95:
6d:c4:1e:59:c6:39:b1:64:1f:18:6f:83:dd:a9:79:8f:a4:96:
85:4e:eb:57:28:d7:cb:1e:cc:ec:4d:fb:67:d2:00:83:70:2f:
d5:a4:e8:e3:85:7c:00:07:75:d1:c0:f4:a0:4b:92:66:4c:cf:
fb:82:97:67:44:f2:52:5b:3e:31:c5:8c:58:7d:fc:38:3e:b8:
53:a5:46:69:fb:71:13:f4:28:3b:dd:16:14:7f:70:c6:75:1c:
ed:c3:0a:c0:51:3d:ed:46:b7:45:27:53:3a:0d:8e:d5:8f:38:
17:30:a6:7e:9b:f6:77:fb:0b:27:5f:6e:62:0f:8a:b2:a8:1a:
bc:f6:37:0a:75:95:eb:40:0b:5a:1d:30:7a:5c:3e:9a:03:77:
bc:f5:11:58:b1:5b:5e:ef:4a:77:b2:57:6b:58:2a:3f:21:f3:
31:52:9e:fa:18:49:5b:6e:5a:61:3e:21:77:f3:5c:25:20:12:
f5:40:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:18:10 2026 by rpki-client