Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: +MeqrbkZQJUgebUX91Ea7dR8GHu7etlUdvUepwB0TEg=
Subject key identifier: 0D:99:18:E6:93:2C:2F:DF:C6:45:2F:AF:D9:12:50:89:26:01:4B:5E
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01A001386ED290B6171DE80A4D5B3C91C061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 17:01:10 +0000
Manifest this update: Fri 14 Aug 2026 17:01:10 +0000
Manifest next update: Sat 15 Aug 2026 17:01:10 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: ikqLI+vUYtxjKLklZNcep0g7zC7frYMX+0/vDnXYrCI=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:6e:d2:90:b6:17:1d:e8:0a:4d:5b:3c:91:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Aug 14 17:01:10 2026 GMT
Not After : Aug 15 17:01:10 2026 GMT
Subject: CN=0d9918e6932c2fdfc6452fafd912508926014b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:76:2e:ff:2f:4a:86:eb:dd:86:6b:4c:3a:
63:93:5f:38:1b:03:df:ab:78:36:74:11:13:51:ef:
5f:46:67:9d:f5:6e:96:d8:ef:72:ad:2b:ce:06:df:
7b:71:17:de:91:06:a4:9d:cf:1e:9d:21:4e:f6:6f:
66:ab:90:1b:2a:65:84:6e:50:44:03:c2:01:6f:3b:
b4:cb:bc:e1:c2:00:ec:5c:02:a3:3f:5b:c5:a8:0c:
d9:f5:2e:e5:ea:1f:52:25:5c:c3:6e:28:62:6a:8b:
e6:ab:10:6c:ff:55:bb:1e:b2:49:06:14:7f:e5:91:
48:85:df:5d:60:45:22:99:4f:fd:e3:a3:94:c2:44:
5a:09:ad:9a:b0:76:9f:3d:83:9f:34:69:48:20:f6:
56:74:70:96:85:1e:24:9c:fc:99:41:ec:1d:d9:67:
8f:d7:83:76:0e:81:11:9b:72:04:f0:e5:31:0d:43:
ef:ae:84:c5:11:f6:13:4c:34:56:e7:96:1b:51:b6:
75:bc:ec:56:7c:85:6f:ac:a4:fa:7a:f9:d3:23:2c:
93:03:4c:f3:39:9f:30:64:fa:5a:0b:b4:6e:64:99:
82:e0:dc:33:90:38:17:27:bb:00:0c:bc:63:94:a5:
8c:19:3f:90:74:01:b0:6a:24:50:e2:42:35:5a:e6:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:18:E6:93:2C:2F:DF:C6:45:2F:AF:D9:12:50:89:26:01:4B:5E
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:69:91:80:35:a1:7b:a0:11:ea:03:fc:c5:15:1c:8d:70:a0:
7a:96:14:a2:43:81:b2:2e:5c:8d:d5:03:e3:96:5a:5e:8a:5d:
5e:1d:26:ea:23:d8:64:79:1d:75:03:ce:99:4e:a6:49:76:1e:
dd:29:56:c4:9d:94:a8:05:7a:8c:1a:ae:b8:4f:d7:9a:0d:91:
ac:ac:0e:bb:5b:c3:c4:69:49:3d:40:1d:31:ac:34:21:83:51:
d8:3d:1e:de:1c:36:c4:66:94:01:39:87:5f:ee:fa:8f:7c:16:
3f:54:b9:68:2e:a4:03:43:e2:4f:8f:b0:17:15:95:bc:2c:9b:
dd:62:22:7e:75:b3:5b:63:a4:d3:4f:d1:e6:b9:c7:cc:a9:22:
fd:2e:2f:15:51:b3:3b:20:bf:74:65:1f:86:a5:6d:94:99:1d:
8b:b9:d2:dc:f5:e1:1a:fc:40:b2:43:8d:97:05:09:37:3a:4e:
f5:a5:83:2b:38:0f:c9:46:15:b6:10:ca:4d:3f:d7:46:c3:5e:
56:5c:89:8b:8d:19:2e:89:3e:4a:f8:6f:6c:2e:38:f7:b5:be:
72:6a:23:57:64:d7:e1:dd:c3:6c:79:eb:7f:4e:a9:d0:e9:a2:
b8:e9:87:ce:04:b0:3f:88:aa:95:fb:6b:fc:b9:16:d7:da:a3:
8d:f7:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:57 2026 by rpki-client