Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: 5JO7G9eo4Z+VmYnZwJlhZwd8RF/xBlDD7jQ0GAc/Nb0=
Subject key identifier: 86:96:91:05:F4:A5:51:3D:90:BF:15:27:4E:D0:99:BC:B4:6D:35:FA
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01A0EB8AA8DA0C0E221C39B6A812C52A22A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 141E
Signing time: Tue 29 Sep 2026 05:02:08 +0000
Manifest this update: Tue 29 Sep 2026 05:02:08 +0000
Manifest next update: Wed 30 Sep 2026 05:02:08 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: NwqJSMdmQAxZrtRaYzREv13v8EEawfY0ixw7Y9TsAXM=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:a8:da:0c:0e:22:1c:39:b6:a8:12:c5:2a:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Sep 29 05:02:08 2026 GMT
Not After : Sep 30 05:02:08 2026 GMT
Subject: CN=86969105f4a5513d90bf15274ed099bcb46d35fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:ea:96:24:fb:5d:76:34:c9:bd:1e:e8:8f:
0b:1f:75:e5:e8:3a:83:fa:e9:12:d6:f8:ce:a4:ca:
00:e6:27:ed:5f:f3:f5:6b:2f:28:fb:7d:06:e2:d4:
03:62:b9:31:80:69:a5:b9:cb:f6:c3:96:15:87:eb:
af:20:bb:71:fc:84:8b:bf:6d:1a:0f:16:fe:1c:73:
a8:0e:e3:e4:98:81:a3:d6:63:8f:94:99:d7:8d:ae:
59:1d:9c:43:ae:cc:34:cb:02:1a:f9:ed:fd:3b:a3:
af:a3:85:2d:e7:df:fb:4e:d3:68:6e:ec:35:c1:0b:
77:e9:f9:f6:aa:2e:67:72:26:4c:df:14:d2:db:e8:
ae:e8:ed:2f:20:20:ea:da:95:d9:49:d2:42:df:8a:
ac:b1:81:16:21:96:4d:38:29:37:ff:7c:19:1c:88:
7e:b2:34:c1:51:90:7d:fa:a7:c0:5c:11:8a:e1:9d:
c9:52:17:75:29:0d:ba:ef:7a:c3:67:90:14:8f:0d:
2d:79:fb:25:b5:02:68:c0:d1:6c:ca:e3:11:dc:0e:
19:80:dd:9d:09:0a:0e:14:fc:55:92:40:a1:41:71:
45:ee:fd:a1:25:b0:d8:b9:27:e1:f4:f2:eb:41:30:
92:ed:5d:95:f1:71:09:c1:fd:41:7a:c8:ae:85:c9:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:91:05:F4:A5:51:3D:90:BF:15:27:4E:D0:99:BC:B4:6D:35:FA
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:dd:e0:d1:a8:12:1e:bf:7f:67:d7:e9:a3:f9:1f:f2:3a:
e2:41:08:87:94:6c:3c:3f:89:d5:b2:e4:d8:96:5b:fd:93:be:
82:03:63:ab:fd:e6:a5:ef:78:2a:9d:ca:0b:9c:1c:50:16:3b:
c8:ef:66:20:bc:8f:d9:be:79:59:f7:80:c3:15:19:ea:85:0c:
35:b8:ac:ec:de:81:ed:dd:5f:e0:52:86:4b:6b:98:60:eb:3b:
8e:62:3e:93:77:61:fd:5e:99:97:c7:ad:f1:24:69:f9:d2:96:
2e:d2:ae:e6:27:95:c0:91:fe:7e:0a:fd:37:e3:ef:da:ad:9d:
c5:89:7d:a9:79:29:33:30:58:17:ca:24:16:a1:b5:d9:4c:22:
60:ff:99:17:93:86:89:a3:e1:1a:40:8d:8a:bc:66:0e:a2:ad:
3d:28:7b:ec:30:c9:fe:72:d0:95:03:d6:c3:b6:0b:0c:b9:62:
3e:04:2a:12:2c:43:be:fe:82:3f:be:18:f2:77:e8:f4:ff:f1:
80:88:a0:76:1d:48:b6:26:38:2f:a9:dd:f8:0d:a8:1c:c0:32:
a9:26:02:5e:88:3e:4c:9f:b7:94:b6:7a:35:e1:eb:18:15:a7:
ec:17:fa:9f:85:04:e5:e0:52:75:6b:f8:69:c1:5c:de:e3:d7:
d8:a0:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:29:45 2026 by rpki-client