Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: xgLz/rw5BYyvMJBOxSxxIlcBi1NjNzJHfVMBF1lEwds=
Subject key identifier: 2B:69:D3:D8:A4:67:C9:5E:8D:D4:AA:2A:51:8E:01:57:C9:4F:C1:71
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01A13DEEE96369ED00310BBD01F67515651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1377
Signing time: Thu 15 Oct 2026 05:00:29 +0000
Manifest this update: Thu 15 Oct 2026 05:00:29 +0000
Manifest next update: Fri 16 Oct 2026 05:00:29 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: f9QJ/FlP7LV5Odcym7nPbfygVUK0C+uOLXh3NLd343o=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e9:63:69:ed:00:31:0b:bd:01:f6:75:15:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Oct 15 05:00:29 2026 GMT
Not After : Oct 16 05:00:29 2026 GMT
Subject: CN=2b69d3d8a467c95e8dd4aa2a518e0157c94fc171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:24:27:af:09:b9:99:4b:09:96:7f:f4:01:
2f:ff:68:ad:e8:3a:0b:56:a1:b3:c9:8f:76:cb:7b:
4f:70:d8:9d:ae:0b:6a:c0:a0:7a:db:85:d7:d3:f0:
17:96:7f:9f:bd:35:98:9e:34:cd:f1:f5:1a:19:f4:
9a:7c:e9:8e:13:4b:3a:46:75:3a:26:c7:b7:ba:ca:
3a:a3:7e:94:94:bd:bd:ca:60:7b:90:79:bb:ef:22:
85:e4:5f:42:7c:96:40:72:c4:b7:53:7d:2d:7e:70:
07:4e:ff:7d:3b:fd:f9:a3:09:43:27:ea:80:fc:76:
32:16:94:1b:28:a2:75:86:4a:cc:36:e0:8b:3c:c2:
bc:08:d1:ac:95:7d:3b:22:54:e9:4c:ab:85:ce:d2:
25:34:f3:dc:6a:36:ca:80:7c:4c:39:3a:22:b1:24:
7e:bb:b2:04:4f:26:82:ed:e9:9a:73:81:dd:3a:90:
47:98:f3:c6:0a:2d:9e:59:e8:a0:04:30:77:09:d1:
c7:d0:cd:68:0d:0d:d8:6e:31:14:1c:55:e7:bc:ba:
04:bc:e8:28:2e:35:75:e6:fa:23:d5:0e:5c:ea:3b:
53:71:4b:e2:3a:6d:bc:98:da:10:be:3c:3a:2a:a9:
fd:2c:a7:a4:4c:7a:7d:23:cf:8f:8f:55:6f:23:06:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:D3:D8:A4:67:C9:5E:8D:D4:AA:2A:51:8E:01:57:C9:4F:C1:71
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:9b:99:e7:c9:be:62:e5:50:55:ac:7c:de:10:5d:50:8f:
94:38:3c:b5:95:10:35:11:9d:d2:6d:e8:fc:84:3a:58:7a:6a:
8b:cc:4d:0e:3e:3c:4f:e3:b1:6d:93:5f:ba:44:74:f1:b5:3c:
b2:73:9e:31:eb:17:7f:de:bd:28:67:17:a3:e2:13:9a:e1:df:
22:b1:a5:8e:77:d4:ae:47:17:8a:cd:e9:f9:23:36:32:fe:cc:
d9:c4:58:fe:c2:12:f5:1d:cc:c8:80:be:f1:f9:c5:88:77:37:
34:cf:e9:f9:22:d5:76:a9:78:3c:c9:b2:a5:6d:4c:e4:e9:d2:
c1:b3:57:06:5b:6e:3a:8d:ca:4e:10:1a:f3:ef:73:48:e1:f8:
38:a3:fa:ec:1f:37:7c:32:10:91:ac:98:f5:f5:4d:d2:dc:6a:
b6:f4:91:7e:64:73:ee:f2:30:95:84:56:2a:5c:b2:ad:16:7c:
6c:fe:6a:8b:73:ae:e6:4e:01:88:b0:b9:05:2c:90:20:c3:8b:
7c:32:a8:b3:f4:ed:54:63:fe:4a:d7:ef:67:48:2f:d9:86:a3:
73:44:44:6a:78:01:21:91:bf:a2:04:54:3b:10:ce:5f:33:72:
18:7c:ed:05:28:48:7e:f1:65:58:95:f2:8c:81:ab:2f:db:8f:
f1:20:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:56 2026 by rpki-client