Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: dobWvlhz9T0+5RYihNjARIQkqdOXd87dM5RswH7fpqI=
Subject key identifier: 7A:4D:4B:D2:F7:E4:8D:B8:82:40:CF:51:F9:E0:C3:1F:75:1F:E8:2F
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 01A13DEEE6ED046C9DBE1CD28A2A70DAC488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1A36
Signing time: Thu 15 Oct 2026 05:00:29 +0000
Manifest this update: Thu 15 Oct 2026 05:00:29 +0000
Manifest next update: Fri 16 Oct 2026 05:00:29 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: pLtUK3fTXK1FmjCVOfjiqX/3Lh/2u3fd+heSd3lljiM=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e6:ed:04:6c:9d:be:1c:d2:8a:2a:70:da:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Oct 15 05:00:29 2026 GMT
Not After : Oct 16 05:00:29 2026 GMT
Subject: CN=7a4d4bd2f7e48db88240cf51f9e0c31f751fe82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:0d:a2:ad:8d:93:e1:c0:fa:6b:dc:10:f0:
89:75:3a:c2:2a:6c:a8:30:94:3f:b3:5b:bf:ed:e2:
d4:dc:99:f2:13:4c:24:41:5f:3a:9b:57:99:7b:a0:
8a:41:8e:e8:9e:4b:6f:0d:c1:8e:7f:5f:05:74:37:
d6:b3:dd:05:d8:e8:e3:71:09:c1:49:30:f0:67:5a:
2b:5a:df:f0:e2:d4:e6:37:f0:d8:03:ab:67:59:f3:
1f:66:ca:74:7f:3e:1b:60:ac:86:12:95:ee:4e:c3:
e7:ce:eb:fb:98:2f:4b:94:74:01:ef:94:7a:af:62:
d8:26:cc:2b:52:b5:e9:f0:13:35:db:a7:e1:f7:6c:
79:d1:04:f7:8a:dc:11:f8:c1:2c:80:12:f1:74:5f:
53:54:4a:95:ed:c8:fc:89:a5:c8:7d:30:d5:f0:e7:
a9:99:b2:56:c2:12:fa:38:dd:d1:52:40:ba:51:1c:
11:63:8b:53:11:54:c9:8f:48:ce:b2:a1:8d:e0:da:
94:79:1d:46:0a:7c:d4:72:3c:46:a6:12:8c:fb:a3:
34:37:b0:8b:c4:23:db:fc:f9:79:a6:bc:e1:03:b8:
a8:55:61:2e:ce:33:eb:7a:21:8b:26:0b:1f:8d:03:
c2:5c:c6:d4:d7:e9:21:2b:c2:8d:f7:1c:32:e7:9c:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:4B:D2:F7:E4:8D:B8:82:40:CF:51:F9:E0:C3:1F:75:1F:E8:2F
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:54:13:22:e5:32:8e:2c:3f:ae:16:ad:4b:7b:4a:36:25:
70:bb:7b:f0:f9:70:6f:f0:b6:39:db:80:a5:e0:6b:b6:16:f9:
f5:13:fc:65:db:b4:c9:9f:b2:58:16:3b:4d:7e:3e:52:d5:ae:
0f:7b:f9:08:52:a2:83:6f:d3:95:ec:35:de:86:fb:9f:92:85:
eb:1c:21:18:58:93:37:dd:51:7e:3d:13:5b:24:7d:fd:29:20:
1a:3d:37:b9:a1:4c:a7:c2:40:e8:78:0f:93:f5:11:c6:be:5d:
f1:e2:e8:d9:56:a1:07:f7:14:91:79:c3:8f:d7:33:37:51:f3:
5d:a9:b2:be:5d:ea:75:20:07:b2:f6:e0:65:87:dc:db:ff:9b:
8d:ba:0e:3b:46:d5:1b:03:59:f4:db:0c:1e:0a:be:d5:7d:6d:
54:59:5c:6d:ac:47:07:91:47:06:7b:63:d3:0f:48:d5:6e:65:
e7:32:05:dd:d1:ed:d0:42:ed:d7:88:92:a6:78:f6:14:c0:70:
22:b6:be:b0:51:84:5e:b4:74:6e:27:b3:28:8d:c1:76:9c:69:
85:fd:80:be:fc:e0:b1:df:28:b8:c0:86:01:bb:eb:ee:13:6f:
3d:c2:1f:58:dd:db:67:3a:7d:4c:aa:45:d3:2a:33:f1:3a:a3:
16:19:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:24 2026 by rpki-client