Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: n1kM/WMfl2lJWxhsw3lnGnQvnX7h/py6aknqjlWU7uM=
Subject key identifier: C3:7C:1A:D0:61:63:2C:2B:20:95:7A:7A:58:D4:F8:12:84:A8:7B:A4
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 01A13B5BC1760B17230F884C748CCC988066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 0272
Signing time: Wed 14 Oct 2026 17:00:31 +0000
Manifest this update: Wed 14 Oct 2026 17:00:31 +0000
Manifest next update: Thu 15 Oct 2026 17:00:31 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: Bl3AXkAFlVEYVlRzF4tj77tWz7b+MbXYVzNI+Ol0om4=)
2: IZ_WSGNHt447DpptKx9G-AV_F1Y.roa (hash: ZFdKMPFLiGDLU/+2cKo97GG3Gers0kri+s7sddO9chs=)
3: RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa (hash: npb1ZPrAdc0F36Du7VzbNSITtgjkjYoCxnKV2J1JMgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5b:c1:76:0b:17:23:0f:88:4c:74:8c:cc:98:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Oct 14 17:00:31 2026 GMT
Not After : Oct 15 17:00:31 2026 GMT
Subject: CN=c37c1ad061632c2b20957a7a58d4f81284a87ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:96:18:ab:7c:0c:a5:65:f3:19:a6:6a:31:
8f:b8:36:51:bb:65:3a:a6:0c:1d:2e:d3:ac:f0:87:
1b:71:bc:ad:c6:0f:8b:70:90:07:53:9d:9d:be:dd:
09:44:06:66:43:65:74:b4:0b:3c:cc:0d:78:2e:6c:
f8:54:51:d1:be:1f:4f:69:f3:07:a3:85:1b:19:f2:
bc:6b:f3:3f:ac:83:c7:d9:8d:ff:68:3d:99:28:42:
65:dd:50:bc:6e:37:fd:3b:36:cc:e6:6e:56:26:ca:
1f:23:08:09:9e:91:8e:19:71:20:9f:50:e2:89:28:
1e:ec:b5:31:f6:e2:df:95:e8:d6:07:3a:16:d7:63:
e9:56:48:63:bd:34:0f:68:4a:cc:94:96:bd:8d:9d:
c9:0f:c0:99:85:d8:d9:f8:78:23:88:12:59:6b:1f:
6e:ec:f8:62:b3:85:91:2c:dc:c8:6d:da:66:d0:c6:
d4:9c:69:ce:f3:ac:a3:00:a7:95:fa:32:33:e1:c2:
fd:f3:0a:1a:2d:ec:81:e1:18:83:f8:0d:a0:b4:43:
bd:10:14:a2:68:b7:5b:e0:e2:45:a8:80:df:72:3e:
93:fb:69:c3:51:aa:aa:1a:cb:2e:8c:95:b2:3d:ca:
4b:81:39:11:7d:65:7c:2e:92:f8:4f:c7:d7:4a:9d:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:1A:D0:61:63:2C:2B:20:95:7A:7A:58:D4:F8:12:84:A8:7B:A4
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:fc:71:4b:4a:bd:19:0b:29:ae:f3:00:b1:12:76:02:3d:
e8:df:1e:dc:54:99:9a:40:f2:6f:73:26:2f:4e:93:b1:8a:e3:
e6:d0:a7:83:d5:f5:b5:3f:b5:4a:dc:95:ef:7f:9d:2f:01:c7:
c6:58:75:c9:63:0d:93:22:a6:06:20:1d:5b:4b:57:f2:ca:b0:
1c:47:b2:e5:27:f9:2d:ea:b6:a8:27:34:3a:ba:1a:de:26:a5:
51:cd:92:76:dc:97:b3:8f:61:8f:3a:fc:51:2b:56:13:c8:ad:
bb:89:b8:5d:31:1c:f1:c0:17:eb:32:32:d8:28:c8:f6:3c:9e:
26:61:61:1e:06:32:ea:22:a2:7f:31:05:62:a0:6c:9d:4f:2b:
63:da:88:4d:f1:57:fe:2d:39:df:c5:56:09:1a:9e:1d:9b:39:
19:53:ce:a1:7e:7b:27:fc:64:1d:b8:bc:cd:35:96:28:e5:bf:
a7:27:99:61:63:7e:97:25:b5:e7:95:89:6a:3a:ac:93:bb:f7:
b0:20:11:47:4d:1d:75:d2:cf:51:98:13:f5:84:de:b4:8a:c4:
fe:27:16:9f:3d:dc:ba:42:ae:3e:35:f4:b8:4e:c1:07:45:49:
17:7c:a0:10:d5:95:d0:18:6d:f8:24:e3:a6:d1:db:16:ee:64:
45:75:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:30:33 2026 by rpki-client