Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: uMjFMI+KqlS8dhHmzshBKRyeliZhTE1lmd5kTXVHNiI=
Subject key identifier: 79:48:80:07:D4:0C:7E:2B:DD:77:32:D1:CF:0D:3E:D2:F0:A1:15:BB
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 01A1404C5BCCBC1EECB2041C1D4BBFE439CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 16:01:48 +0000
Manifest this update: Thu 15 Oct 2026 16:01:48 +0000
Manifest next update: Fri 16 Oct 2026 16:01:48 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: ejUW38hZSu1rHJyCNe+4LCDC6x+UNwm4Ys3QdCIiQo0=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:5b:cc:bc:1e:ec:b2:04:1c:1d:4b:bf:e4:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Oct 15 16:01:48 2026 GMT
Not After : Oct 16 16:01:48 2026 GMT
Subject: CN=79488007d40c7e2bdd7732d1cf0d3ed2f0a115bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:c2:8f:55:78:85:6c:16:09:20:27:22:06:
d3:de:45:c1:1f:84:f9:a0:8b:65:1c:32:d4:94:87:
a9:64:26:32:4b:f1:f0:2d:eb:0b:5f:83:14:07:ab:
22:3a:e0:81:df:e5:e7:fd:b1:0c:c4:e8:e4:28:ea:
1c:0c:e7:ea:b9:1b:a2:12:97:f4:41:91:f7:80:29:
e5:e7:e4:99:36:87:2e:e9:86:b4:90:43:07:d3:38:
ae:eb:08:f9:6c:8e:ec:63:06:f1:2d:e6:c3:9d:d8:
05:c1:46:50:39:a6:57:4d:cc:15:1b:ac:a1:bf:1a:
55:06:7a:59:82:04:0f:c6:44:98:40:65:f0:ae:e9:
2b:fd:79:5d:ed:17:0d:e1:06:b1:ad:be:a0:b5:8b:
9c:31:a7:fa:4f:ae:a8:b1:ae:10:f3:a4:50:cf:a7:
ac:51:d6:ac:9b:8e:f6:b7:af:6c:3f:6e:11:ef:b2:
25:ef:8c:b3:0c:ce:02:c1:69:95:be:b0:00:e7:77:
ff:be:0f:2c:bf:be:73:e4:de:75:08:af:53:b0:45:
2d:ac:24:4a:3e:d0:81:b8:29:12:4c:7f:51:56:94:
54:3c:1b:5a:7f:77:4a:99:0a:5b:c3:1d:a1:62:f0:
76:8e:25:af:8d:34:5d:e3:ca:a1:4c:1f:96:84:cd:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:80:07:D4:0C:7E:2B:DD:77:32:D1:CF:0D:3E:D2:F0:A1:15:BB
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:61:88:73:97:19:8a:f6:11:d9:65:14:17:2b:3d:dc:70:99:
26:cb:97:ac:27:3a:98:0e:52:cb:f9:79:22:a7:f6:62:98:b9:
b6:d4:a5:0c:4c:ce:b8:24:f1:93:50:91:79:37:14:21:da:12:
f0:f7:81:36:ab:9b:e8:20:b4:19:51:43:3d:79:bd:f4:4f:f6:
09:1d:4a:0d:25:14:82:b9:8f:8b:66:f6:39:d3:54:76:60:c4:
e4:18:6b:d6:1d:3c:f0:0d:04:17:fe:cd:b9:aa:79:d6:d3:9f:
30:6d:2a:04:3b:83:47:b2:8e:2a:6d:41:16:04:2c:fa:de:aa:
a7:61:cd:c6:3c:1f:5b:52:06:38:f2:07:37:72:aa:f2:21:41:
85:13:9c:74:77:39:49:73:a5:eb:4a:0e:ef:4b:72:14:2c:fd:
40:31:17:e1:7f:d8:89:d3:c9:f5:fb:e3:ae:5b:3f:72:2c:7e:
f6:4e:8f:a0:92:b9:b2:54:d8:93:80:2d:05:e0:2b:bf:3e:51:
5c:71:a7:06:cb:29:a3:de:da:e7:bb:52:79:50:89:85:e4:35:
54:f4:e3:8a:41:db:73:3c:f6:68:19:00:10:65:f0:25:7d:98:
9f:10:42:ad:0e:14:8d:f5:49:55:49:e7:fc:f4:3c:43:68:2f:
47:d2:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:32:54 2026 by rpki-client