Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier: ZYHnezYxC+3wI92HdUXMdTiCw/+KhSKZXuBSKT8k1WE=
Subject key identifier: DD:48:72:63:1C:9A:C7:91:C5:B6:69:AF:BC:CC:FB:5F:DA:17:FC:08
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial: 01A13FDE47A205AE53AD61C852B1BE2ECF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number: 13B6
Signing time: Thu 15 Oct 2026 14:01:34 +0000
Manifest this update: Thu 15 Oct 2026 14:01:34 +0000
Manifest next update: Fri 16 Oct 2026 14:01:34 +0000
Files and hashes: 1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: VAnLvAlQP55fnY+lisgiAJ12ftVJozwYhB+nSNNtKUs=)
2: AoMLPhZExe6a-acTOonY5G6p87o.roa (hash: GlOEB6CrWza06BRV4TlREAMAdwdF9KjOr3x10SdKDlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:47:a2:05:ae:53:ad:61:c8:52:b1:be:2e:cf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Validity
Not Before: Oct 15 14:01:34 2026 GMT
Not After : Oct 16 14:01:34 2026 GMT
Subject: CN=dd4872631c9ac791c5b669afbcccfb5fda17fc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:43:96:0b:6b:7e:4d:16:e9:50:76:0e:da:
a6:a4:dd:97:81:f2:68:cf:a7:ae:4b:72:ca:87:5b:
6d:c9:e6:df:65:71:ca:78:b8:35:3c:37:c4:28:ba:
9a:53:20:6c:5d:38:70:81:a1:6b:59:cb:45:fb:26:
67:94:e9:20:a3:2d:31:1a:6c:99:35:19:db:0f:d2:
2e:e8:ce:35:27:92:af:c4:4d:c7:11:f0:47:d5:b2:
0f:6a:96:71:cd:51:68:ee:b8:80:15:ed:c3:57:d1:
ec:00:f6:cb:68:25:e8:4e:f8:5a:a7:5f:4f:11:a3:
21:d7:09:78:b2:1c:bd:fa:aa:55:b9:b8:7d:65:63:
10:54:35:31:2e:66:77:bf:a2:1f:3d:0c:1a:38:84:
72:3a:05:79:fa:2e:e0:97:22:f1:7c:e1:9c:60:28:
0e:5f:3d:8d:18:e1:43:02:c4:81:4d:f5:29:d3:c2:
be:06:92:a2:a4:48:38:c5:5f:44:1f:79:a4:87:23:
b5:36:6e:0a:14:65:9a:51:90:21:29:4b:fb:2f:60:
66:87:a1:7b:c4:33:51:01:c7:a4:4e:a8:33:be:b9:
26:51:15:b2:0a:b4:18:1b:2f:ca:6c:3a:04:0f:21:
16:a2:8b:41:69:ce:69:18:8a:a8:06:25:82:b3:7c:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:72:63:1C:9A:C7:91:C5:B6:69:AF:BC:CC:FB:5F:DA:17:FC:08
X509v3 Authority Key Identifier:
keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a1:49:1a:43:7a:7d:43:cb:8d:b0:71:21:ac:56:8d:10:1f:
a5:da:72:b4:e6:34:af:b5:b9:7f:33:0d:15:73:9b:4a:24:32:
6f:a3:0d:2c:67:14:01:ef:c5:58:de:5a:bd:90:68:a0:62:82:
f8:dd:b5:6f:e4:85:c5:d7:45:37:68:c7:53:a3:4d:cc:b5:db:
cf:02:eb:5b:1a:4b:d8:df:ba:30:26:36:d5:de:fb:6a:88:48:
bf:09:7f:46:bf:d7:7e:8f:73:1c:ef:b1:00:9e:9c:1c:4c:8c:
3c:c1:7e:d8:13:f8:39:c3:27:a2:e8:34:27:20:c7:cf:9c:7c:
1a:09:99:2c:d2:58:8a:1b:76:ce:f3:32:25:a9:69:da:5f:88:
80:d6:0e:91:7d:96:77:1e:6e:a8:1b:94:0f:1e:b6:20:a9:93:
6d:82:f5:3c:8d:4b:92:65:a4:8e:46:dd:81:37:8b:1e:ef:d6:
10:35:11:14:ae:33:15:9e:b2:ae:c1:d8:8e:2f:38:cb:12:4b:
f8:bb:40:f9:48:a0:b8:d1:18:d9:d6:e4:09:37:83:2c:c3:37:
9f:db:78:97:9b:1c:f3:28:7a:b1:75:51:75:92:2f:4f:27:15:
fc:94:12:ec:a0:9c:9c:79:d1:7b:a2:40:98:2e:20:8c:62:86:
72:ea:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:32 2026 by rpki-client