Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: qHEKeDqkYC2e5CDsFaSvZ6C3u2UvS66en4ZZxSCrdGo=
Subject key identifier: 3C:00:85:99:E5:2A:69:16:3C:E5:CC:F3:66:E0:B3:F4:70:14:D0:A5
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01A13DEEEEF06C64868494FB2FDBD5411E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 05:00:31 +0000
Manifest this update: Thu 15 Oct 2026 05:00:31 +0000
Manifest next update: Fri 16 Oct 2026 05:00:31 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: TDlOOF6QnqldyCH5ZivYMry+yevL4E9ujBL1cZcY14c=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:ee:f0:6c:64:86:84:94:fb:2f:db:d5:41:1e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Oct 15 05:00:31 2026 GMT
Not After : Oct 16 05:00:31 2026 GMT
Subject: CN=3c008599e52a69163ce5ccf366e0b3f47014d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:b3:9a:99:15:69:c1:fe:a5:0c:2e:be:13:
a0:d8:51:65:91:3e:e9:a2:2a:29:78:bb:84:6b:b4:
95:e6:a5:88:bb:69:18:57:2c:8c:f7:af:e9:79:93:
d2:b6:cf:e7:f8:e4:a3:ee:0e:7e:f3:18:fc:aa:4b:
38:f5:11:c3:cc:f5:f4:01:dc:17:bd:6f:a4:ec:a1:
03:25:bc:f2:0b:a8:e0:90:21:27:39:8d:bc:3a:9b:
f7:81:20:f7:51:00:d3:91:9a:96:c2:db:25:2d:fd:
0a:ef:e9:80:f3:6d:cb:3a:01:a6:29:36:2e:b6:32:
95:fe:ef:b7:b6:af:8b:4e:be:8f:5e:6e:83:08:c0:
8e:99:17:e4:cf:8b:ca:39:29:29:4a:d1:e1:78:29:
17:aa:c8:1c:e4:83:cb:40:8c:15:61:83:e9:25:c2:
6e:6b:46:ac:49:1a:18:c3:de:a0:67:97:b2:e6:9d:
b0:30:b5:f9:a1:60:9e:da:ec:62:6d:ed:b7:7f:80:
6b:63:a3:55:e7:69:b6:fd:e4:fd:dc:66:8f:a6:77:
9c:ae:ca:2e:aa:fa:cd:d8:48:cd:e1:bc:2a:81:9f:
93:91:dd:8c:fb:07:e1:a8:12:75:f3:17:af:4c:45:
78:1c:27:43:58:64:30:a2:65:8f:de:3e:94:fc:f2:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:85:99:E5:2A:69:16:3C:E5:CC:F3:66:E0:B3:F4:70:14:D0:A5
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8a:fd:a4:83:7c:bf:77:b9:2e:fc:a0:fa:c0:52:63:e4:d3:
eb:a7:3c:bd:c3:12:c8:1e:40:fb:83:63:a1:53:d5:97:10:11:
78:e1:46:1a:dd:45:d3:98:c5:68:ff:b7:60:00:1c:6a:87:d7:
59:93:33:c7:d4:b9:03:41:e8:3a:9b:46:77:0b:c7:09:87:cf:
e3:9e:97:9f:1b:7d:a1:08:fc:99:bd:66:e2:16:39:1d:13:ee:
21:fd:97:3f:99:e2:e9:b1:16:bd:b0:5f:79:b4:3b:b5:03:e8:
9a:28:9e:51:e3:d6:15:db:35:45:60:2d:3f:b3:24:17:22:ae:
5e:08:ef:dd:b4:49:7a:a1:83:40:82:be:28:34:fd:31:a8:04:
58:b3:dd:3d:5d:8d:3c:98:1d:13:6b:b0:ae:ec:d5:62:24:bb:
42:03:9a:c2:27:5d:24:76:83:33:9d:ea:43:8d:3b:cb:37:94:
78:8e:9b:76:bf:ea:a4:0c:82:1d:0e:be:9b:7d:57:b6:92:8d:
a6:db:37:91:fd:19:93:6a:7f:44:86:3a:9e:8a:d6:71:e9:e9:
ff:61:b9:f5:32:56:b0:9f:cc:11:f9:73:1e:1b:7e:ac:2b:a9:
27:83:b5:01:2c:79:ba:28:6f:98:38:15:67:03:13:92:e6:56:
0f:85:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:12 2026 by rpki-client