Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: qs+OmT6/JfoXUdfxpOqCbmLvO6gh7hU7K04VdSam/og=
Subject key identifier: C9:FB:31:4B:31:4D:E1:58:AE:AA:88:82:A8:AB:C9:A1:01:E0:84:A4
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 01A04017090FD949A005D09D2F6338FE87FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 05A0
Signing time: Wed 26 Aug 2026 22:00:46 +0000
Manifest this update: Wed 26 Aug 2026 22:00:46 +0000
Manifest next update: Thu 27 Aug 2026 22:00:46 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: kGDJUo+MJgK/+3MEIs3pmKWjnfFOuRIYgWGK1fyKYww=)
2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:09:0f:d9:49:a0:05:d0:9d:2f:63:38:fe:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Aug 26 22:00:46 2026 GMT
Not After : Aug 27 22:00:46 2026 GMT
Subject: CN=c9fb314b314de158aeaa8882a8abc9a101e084a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:cd:9e:12:63:1a:4b:1e:99:46:26:eb:de:
2b:f5:b8:67:ee:40:15:38:c3:69:62:8e:9b:97:d2:
bf:f6:70:4a:87:8d:9e:ed:42:ba:b9:de:f4:db:99:
1f:cb:80:d9:6a:e3:ba:10:14:cb:bb:1b:17:88:56:
89:05:2b:3a:ca:21:70:dc:c8:9d:3d:6d:bd:ed:10:
97:4a:54:38:f5:47:fd:eb:22:e5:c0:b8:d3:92:17:
bf:52:2a:25:f2:e6:dc:09:11:05:38:56:8f:13:cc:
11:f0:b9:86:5c:63:fb:95:df:d0:3a:37:9c:1f:c4:
d6:47:45:f7:6a:aa:da:d2:e8:e2:35:a6:ee:2e:0a:
ae:18:c4:bb:cf:c3:27:ba:6f:40:dc:2a:a9:26:28:
68:25:ed:fd:ae:a6:a2:94:fc:fb:c6:4a:e1:bf:41:
13:87:16:ca:28:dd:41:d9:f4:0e:5c:e5:29:53:a8:
a1:68:42:f8:7e:b5:26:1e:9d:8a:1e:65:d0:d7:38:
4f:b2:0e:2c:1d:5a:9b:2f:7b:76:fe:3c:b9:f2:97:
1b:4b:3c:8c:77:da:bb:ea:f6:8b:8d:cb:66:23:c0:
0e:7e:ab:4a:3e:9b:98:c2:db:ce:e8:04:00:bf:97:
a8:8a:7e:a0:9f:c9:6d:e1:22:85:d0:c7:a8:06:da:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FB:31:4B:31:4D:E1:58:AE:AA:88:82:A8:AB:C9:A1:01:E0:84:A4
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:05:88:fd:5a:a9:1a:be:88:82:05:e0:40:dc:03:aa:1a:ad:
b5:28:ab:c2:d2:f5:51:ce:e0:e4:eb:d4:12:7e:90:ff:5a:68:
73:eb:4c:fc:4e:09:ee:97:a3:47:0d:f3:89:b3:de:12:ee:b9:
29:7b:db:fa:d5:03:76:ee:6f:dc:7f:c4:19:f5:63:02:54:76:
f0:81:9e:51:62:1d:c2:75:8b:3f:d7:d2:c4:96:5b:0a:1f:ed:
18:cf:45:07:3b:8f:2a:93:ae:37:88:47:db:b3:08:05:68:29:
0e:81:87:b4:c3:de:6d:b9:d2:fd:7d:c2:57:8a:df:25:7b:47:
30:17:cb:dd:fc:a9:12:78:d1:7c:47:35:cd:4e:7f:9d:f8:3c:
28:c4:58:90:5a:46:28:88:41:7f:d9:44:5e:2d:02:50:1e:99:
b7:ab:75:03:34:27:fb:bd:2c:7d:38:38:f0:f2:4b:ba:51:11:
b6:6f:c5:a8:bc:62:47:64:03:9d:98:f6:bb:f6:b3:28:20:e0:
e1:4c:ed:51:d6:d4:40:8d:37:d6:f2:5c:1c:a7:22:de:4f:9a:
27:4e:32:fb:63:7a:64:25:80:e3:6d:ce:50:e7:f0:ed:0b:b1:
53:7b:ab:5a:2b:a1:b9:5e:ac:94:4c:96:e7:d3:82:d6:7a:16:
1d:42:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:21 2026 by rpki-client