Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: bFHyRssuFdZHXDFqLkjTSb2hyGMpwu1nFr9lYGPketM=
Subject key identifier: D8:CE:3C:2C:8F:EF:69:66:1D:43:7B:93:D2:60:E3:DD:75:0F:F0:18
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 01A03F725DE10FCE3C7DC525DD92C3474294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: 048B
Signing time: Wed 26 Aug 2026 19:00:54 +0000
Manifest this update: Wed 26 Aug 2026 19:00:54 +0000
Manifest next update: Thu 27 Aug 2026 19:00:54 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: L+egyRr/V0GP/6HSRkORSv00/ChNZgPnyqhVAnUvh54=)
2: n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa (hash: ApevewrPNzMKwdZYmudK6D8Ih9aFuZDtkDlyK/2Y0WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:5d:e1:0f:ce:3c:7d:c5:25:dd:92:c3:47:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Aug 26 19:00:54 2026 GMT
Not After : Aug 27 19:00:54 2026 GMT
Subject: CN=d8ce3c2c8fef69661d437b93d260e3dd750ff018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:63:a8:4d:6f:56:4d:da:be:b9:67:2c:55:
ed:87:fc:3e:29:d6:67:c6:0f:40:3e:e1:44:60:8c:
d9:1f:33:56:e4:96:62:9a:75:56:26:96:8e:9f:f0:
5e:7d:1d:39:76:07:c7:4a:aa:2b:a5:54:1e:16:7e:
93:e3:e4:d0:f3:4c:c4:04:4d:9c:94:a1:77:be:40:
ff:d6:73:2c:e5:c8:4d:9a:ff:d7:29:62:11:fa:13:
6c:47:35:92:e0:8f:fa:e2:5a:c1:87:0e:38:f6:f8:
3d:5b:82:77:d4:7c:e6:70:3d:c7:97:a5:8d:16:e7:
95:84:19:22:b6:7c:1c:db:99:4f:ca:e1:a3:24:03:
fb:a6:03:29:44:96:be:02:71:90:68:5a:34:69:61:
10:49:a4:7a:04:56:72:c2:cf:aa:27:24:60:60:9d:
93:9f:d1:fc:e1:32:fb:13:25:83:f8:7d:80:59:e7:
1d:81:4a:95:c3:c8:02:c5:93:7f:2c:b2:2f:d6:37:
c0:d7:45:bf:2b:20:a6:af:46:55:91:f9:a8:08:0b:
ef:22:b1:64:25:c3:4e:cd:21:a6:d1:fe:9c:fc:fe:
c6:19:8d:3c:48:db:4d:e0:e2:01:de:fe:55:c3:b8:
b1:c8:92:4a:21:82:cc:9a:9c:6f:64:d4:d5:50:59:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:3C:2C:8F:EF:69:66:1D:43:7B:93:D2:60:E3:DD:75:0F:F0:18
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:92:2f:a1:c1:5b:ce:38:50:4a:cb:af:79:ae:e9:6c:99:
33:1f:05:ac:5f:b1:3d:92:ef:28:f8:65:68:43:30:8e:19:2b:
a8:18:a1:65:5b:6c:ff:77:7e:ea:e6:6f:78:80:a3:75:4c:5b:
1c:b4:39:48:b9:bf:10:d9:f1:1d:c0:a0:99:2c:c2:02:1a:1d:
4d:52:05:db:58:77:b9:24:4c:d0:5b:54:00:fe:f2:89:bb:f3:
78:82:7d:4b:46:6c:52:5e:f3:6f:2a:b6:0f:83:ed:42:a5:8f:
4a:ac:40:f9:ea:ed:e4:14:b9:aa:09:c0:b4:36:55:ad:c9:76:
32:84:33:81:b7:77:99:c7:31:dd:fb:f3:70:09:1f:c7:00:0a:
54:28:5f:b2:1b:59:bb:ca:4a:d1:54:a7:e1:7e:84:e0:f7:87:
c0:c8:98:ba:0f:89:8d:c5:85:0e:e4:ee:2b:8d:d2:d8:1c:71:
5a:91:fc:be:89:85:52:3a:61:b8:3c:00:fa:72:23:15:64:d1:
80:2b:dc:c5:83:a1:c9:b9:6b:51:ba:fe:2c:d1:6f:b0:1b:0e:
93:75:13:9f:40:d8:02:cc:33:4f:a7:f7:a8:98:a4:fa:ba:ad:
21:90:91:c0:e2:b0:33:de:cd:34:2d:19:5d:ba:15:2e:c9:1f:
f6:2a:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:38 2026 by rpki-client