Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: NaCDanolWvB0aQ5K6Vkm7rKCR/Tq+/hpax7/6vnP0jc=
Subject key identifier: 05:A8:48:B6:7E:13:90:27:33:9E:16:5E:9E:87:2F:8E:F7:7A:FC:A9
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01A13C6EEB917675B634EBB753C953A2F0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 22:01:04 +0000
Manifest this update: Wed 14 Oct 2026 22:01:04 +0000
Manifest next update: Thu 15 Oct 2026 22:01:04 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: ih3GoQ9qJtClz6MYEfMgaREJQOYJ6uIVV878lpoa3W8=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:eb:91:76:75:b6:34:eb:b7:53:c9:53:a2:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Oct 14 22:01:04 2026 GMT
Not After : Oct 15 22:01:04 2026 GMT
Subject: CN=05a848b67e139027339e165e9e872f8ef77afca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:e3:9b:31:45:20:f4:6e:fc:4f:d5:3e:e9:
79:4d:31:76:d5:7d:8f:68:eb:5e:41:19:72:70:df:
0f:c4:e5:4e:af:69:84:8a:7c:bf:8c:5b:a2:e5:73:
8a:11:ba:50:eb:2d:b9:66:73:6c:08:dc:f3:83:9c:
13:ec:e5:03:44:25:49:06:2c:ed:54:a8:80:18:db:
3f:d7:d3:22:1b:03:38:47:cf:16:73:1e:4f:44:ec:
a9:b9:3e:6a:6a:39:06:65:f5:5b:c5:1b:61:01:50:
98:56:63:20:52:dd:38:e9:01:7f:b7:cd:d8:89:a6:
9b:65:67:4d:a0:4d:e3:30:18:bf:a6:fb:40:51:d0:
ef:69:70:3a:5c:62:4d:3c:77:16:46:b1:40:28:4d:
dc:4a:e5:a9:ec:3d:d2:15:31:33:8a:82:e6:f5:e4:
e2:0f:f9:9f:10:2a:93:20:9d:6f:13:90:bb:6c:cb:
8e:8a:49:6e:a5:b0:3b:43:02:53:15:09:a5:7f:e0:
e9:06:51:c9:60:92:7d:0d:29:95:21:9a:16:cf:ad:
01:37:a4:e5:7f:3f:db:6a:d5:0e:88:64:7a:57:c7:
59:8e:e7:17:b2:b7:d2:61:14:7a:90:4a:6b:69:04:
77:0e:66:b6:d9:23:59:73:e3:db:1b:89:ae:5e:c8:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:48:B6:7E:13:90:27:33:9E:16:5E:9E:87:2F:8E:F7:7A:FC:A9
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:1f:de:ba:1a:fd:1b:f6:db:68:5a:d4:89:62:11:33:88:
d5:13:26:6c:23:b9:93:e7:bb:51:8f:1d:51:f7:9f:22:ee:c3:
e7:3b:86:e1:84:e2:7c:15:cc:e5:69:a2:d6:6e:80:68:58:02:
e8:99:39:9c:34:fe:60:cc:9f:80:76:d5:5c:62:50:b9:3e:9d:
fc:68:7b:d2:32:2d:0a:f2:d3:30:b9:cf:55:e4:92:ed:8a:14:
e3:2c:40:c3:f1:83:1a:5b:73:be:67:cf:96:13:60:77:4d:ea:
66:75:43:17:bc:84:42:16:86:34:7a:d6:96:f7:dc:25:55:17:
4d:a3:25:7f:e0:6c:98:c8:e0:be:ce:84:90:b4:77:e8:04:5e:
31:0c:7b:d4:07:89:0e:48:68:a6:2b:e1:fb:53:26:3b:de:72:
e0:15:1c:e7:e8:30:19:c7:68:af:b2:3f:74:c9:2f:89:ca:e6:
cb:f7:84:e6:f9:4d:82:ef:97:c9:e7:9d:87:c1:e1:5e:a5:95:
5b:1f:67:fa:12:be:a9:e4:8b:8b:a0:79:e2:b2:c6:61:b3:44:
39:ec:b3:82:8f:44:4d:8f:67:3e:2f:9b:de:ce:cb:d3:d4:47:
9f:69:b9:5b:1e:bd:45:57:4c:f8:a6:f6:6f:8e:9a:2f:4f:be:
5f:3b:91:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:20:57 2026 by rpki-client