Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: g1UfU6mNy7q85I3pfAiFWnMFglhWvoTCPLe8LAiiov0=
Subject key identifier: 97:71:1B:51:D0:6A:DF:A3:5C:3E:AC:2B:22:97:B2:17:AD:2A:49:38
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 01A17DAA007B873B0EE5FDA2AC0CB2B0476E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 059E
Signing time: Tue 27 Oct 2026 14:00:55 +0000
Manifest this update: Tue 27 Oct 2026 14:00:55 +0000
Manifest next update: Wed 28 Oct 2026 14:00:55 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: Haj+/WPfX7Vb2aEtljP9uNaRyueOJhAbT5pDeD6y418=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:00:7b:87:3b:0e:e5:fd:a2:ac:0c:b2:b0:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Oct 27 14:00:55 2026 GMT
Not After : Oct 28 14:00:55 2026 GMT
Subject: CN=97711b51d06adfa35c3eac2b2297b217ad2a4938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:cd:f3:bd:6b:55:d9:f8:3a:cc:4f:ce:6c:
41:32:e0:ea:1c:dc:9a:f2:99:57:10:16:12:84:f3:
7c:07:c7:3c:d7:a3:a3:0a:75:83:77:12:17:a5:14:
69:2a:e2:36:b4:32:33:62:93:98:65:8f:28:b6:fc:
bf:d6:4c:a1:ca:43:f8:0f:01:9f:0f:6c:a7:6d:7f:
94:2e:bb:4b:3d:0a:f7:7d:8e:80:dc:90:30:3b:5e:
70:f9:43:ca:2f:65:98:22:35:8b:8f:50:a1:a3:5e:
02:8b:c3:6a:e3:29:f8:d6:a0:fd:eb:b9:a1:7c:f5:
91:1d:93:83:6a:00:78:cd:97:b3:fe:f8:95:18:d4:
e9:7b:0a:01:3b:e2:73:3a:ce:17:67:6d:60:ee:53:
73:61:e3:b6:71:2a:b1:7f:76:e7:97:da:e4:b8:27:
bd:c2:e9:ef:03:16:56:0c:3f:bb:77:2f:7a:f7:f2:
78:e8:ec:0c:90:1f:57:75:52:06:80:87:58:fc:cb:
93:80:d1:5b:18:c3:f2:80:36:a5:1b:c3:b8:a9:b4:
3a:70:34:7d:61:a4:d6:99:c6:21:b1:e8:1a:63:86:
a7:b7:5a:8d:af:45:8d:56:02:aa:ad:f6:3c:11:99:
22:5a:96:52:b7:c8:76:3d:ac:0e:68:76:21:d3:0c:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:1B:51:D0:6A:DF:A3:5C:3E:AC:2B:22:97:B2:17:AD:2A:49:38
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:75:e2:b8:ae:ea:08:21:33:76:b2:97:0f:0b:53:34:ce:
98:d3:6a:f0:5c:36:8f:c3:d1:07:9c:83:a1:aa:5b:0b:c3:16:
67:59:db:62:62:0d:e0:96:00:ed:59:66:34:9a:67:e6:8a:fd:
89:1c:85:d7:e2:d7:e3:37:b9:8c:6d:42:82:fb:3a:b8:2f:4e:
78:0c:6d:f2:cf:72:1c:b4:f5:fb:92:1b:9a:ea:f2:bc:bb:f2:
70:c9:f2:b0:97:c7:6e:ae:d0:3a:f3:3a:46:58:40:69:98:b3:
f0:5a:4a:d8:ee:40:75:22:6b:56:02:88:51:74:a2:b3:7f:52:
d2:f0:cd:2b:a3:03:dd:34:b4:89:eb:4f:c3:65:2c:84:03:38:
22:31:fc:7f:c9:6c:50:7b:b3:70:9b:d9:33:40:9c:05:cd:69:
9b:02:f2:75:66:4b:cf:ca:7a:b5:ae:b3:5f:9c:23:82:4c:6c:
e6:28:f9:07:a7:56:9e:ca:c3:a9:6b:71:d6:d4:28:b8:02:39:
c0:0b:3a:d3:48:4f:23:b1:1e:4c:5a:5a:5d:6d:69:2a:a5:2b:
93:b5:f5:c2:ee:06:76:db:55:13:46:34:1c:5f:26:b7:29:5f:
a0:20:29:78:74:10:73:f6:2c:08:98:fc:d9:4c:88:58:b0:7c:
2e:23:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:39:11 2026 by rpki-client