Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: Xqz9EAdFjDegUlpPRzyUFE4kXm/opfD52/V+o1GDyIA=
Subject key identifier: 4D:18:26:D7:36:0F:AE:1E:E0:78:54:08:06:80:3B:77:96:17:73:9C
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01A001A602BC52D4A1CC8D82A6C467177DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:00:51 +0000
Manifest this update: Fri 14 Aug 2026 19:00:51 +0000
Manifest next update: Sat 15 Aug 2026 19:00:51 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: OXcbEYSZJBWvBh13gZVP5Xv5PFOr7YnLJEbIU/rDpYM=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:02:bc:52:d4:a1:cc:8d:82:a6:c4:67:17:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Aug 14 19:00:51 2026 GMT
Not After : Aug 15 19:00:51 2026 GMT
Subject: CN=4d1826d7360fae1ee078540806803b779617739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:3b:89:09:ed:9d:cc:d6:d3:4d:ea:a4:15:
a5:c8:bf:c1:d2:bf:f4:58:31:1c:e1:03:08:4e:e8:
37:ba:23:33:92:22:33:23:3f:12:6c:0c:96:e9:cb:
2e:2a:77:07:ea:c7:c0:87:6b:ef:69:96:28:37:4a:
54:f3:87:26:c8:45:a7:c8:51:df:32:51:c1:8f:f5:
2c:1c:71:f9:af:79:20:9c:c2:54:8a:2a:37:58:4f:
f8:ac:6b:74:b3:76:a1:7a:2f:d6:b8:04:4a:7a:ab:
1e:7c:36:67:0e:ee:89:a6:03:e8:c2:34:05:9b:2a:
19:b2:13:a5:38:bf:ad:97:b1:8d:8d:71:3f:1d:e1:
02:fd:ce:ea:fc:91:6e:9e:67:d3:c7:75:ad:85:1f:
d0:61:3e:7a:5f:64:26:25:d8:f8:1f:90:a1:fa:e0:
8f:2c:d8:3e:91:10:f2:d5:de:e7:96:62:a0:d7:e7:
cb:87:7d:c0:e9:76:5b:00:f8:ad:67:3f:2d:c8:4f:
98:86:50:aa:4b:b0:12:e5:7e:38:c9:9c:0c:b2:24:
27:73:4b:ab:84:d9:26:c0:e7:7a:48:ef:27:7e:a8:
c6:1a:20:6b:ee:06:3e:91:ed:27:1a:6f:bd:4d:fb:
60:67:02:df:37:c8:ed:f9:9c:d3:b6:a4:8d:2d:fe:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:18:26:D7:36:0F:AE:1E:E0:78:54:08:06:80:3B:77:96:17:73:9C
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d4:5a:aa:9b:63:19:43:a4:d3:cf:5f:fa:a7:07:1c:67:35:
be:33:0e:f6:0c:d0:f0:39:3f:63:f9:c2:1e:7a:33:a4:93:62:
df:94:3d:ab:5b:ab:20:25:56:0b:b9:ae:93:28:80:d6:60:9a:
6f:0f:e4:ca:dd:30:d4:c7:44:22:69:12:be:e3:63:62:03:62:
53:02:55:40:da:3b:ea:b2:03:13:f6:a1:e1:48:06:00:67:db:
12:8c:0d:c9:ee:b8:18:d6:77:7b:f7:c1:38:b1:12:39:b7:e7:
c1:5c:cf:8f:82:b9:69:75:cd:02:04:96:e4:c9:e0:5a:98:55:
c1:d6:d7:a8:a8:6e:7b:4d:d9:b4:72:06:0e:35:26:38:eb:f0:
f6:ea:34:f3:86:6f:5d:20:47:b0:06:b3:16:34:ea:fb:cf:e6:
bb:a2:07:2d:9f:1d:17:45:81:ca:95:00:fa:4f:a8:5b:89:49:
fe:31:98:94:9f:a5:51:01:36:30:ef:15:b2:04:4f:2a:a3:15:
6c:3d:32:b8:4b:3d:17:4f:7f:05:96:b4:20:40:f6:5b:09:0c:
a4:fc:03:88:d2:87:c4:01:e2:42:07:73:4d:83:18:60:61:aa:
2f:cd:95:b3:66:17:4f:ea:11:96:4a:47:33:34:5c:c7:c0:08:
65:57:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:28 2026 by rpki-client