Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: M6mNpzO9/kkdsKezb7/HdQabOr18H/qaKhpxl9bndDY=
Subject key identifier: 3C:22:81:2C:3A:91:48:CE:28:55:B7:46:1C:B9:A4:0F:23:DD:02:6D
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 01A177A7BBC9F00A0743A85FF5DBFA5F5A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 1276
Signing time: Mon 26 Oct 2026 10:00:43 +0000
Manifest this update: Mon 26 Oct 2026 10:00:43 +0000
Manifest next update: Tue 27 Oct 2026 10:00:43 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: iWI6ZR4lV+RLw5RIM6i2jczvUtTP1OMUgklMh7SWN5s=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:bb:c9:f0:0a:07:43:a8:5f:f5:db:fa:5f:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Oct 26 10:00:43 2026 GMT
Not After : Oct 27 10:00:43 2026 GMT
Subject: CN=3c22812c3a9148ce2855b7461cb9a40f23dd026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:a7:93:72:f8:b7:bc:b7:42:20:51:12:19:
7a:d3:56:e4:ca:03:bd:53:9f:1e:41:bf:f4:02:09:
b8:6f:db:03:66:49:34:e0:67:16:ac:c1:05:c9:57:
c4:74:f5:33:fe:34:91:c8:a0:79:ce:e8:03:52:0b:
69:20:7c:8c:5f:b5:c4:ef:1d:33:86:77:44:5f:e1:
56:fe:eb:26:e6:4b:c4:d6:bd:98:a0:3f:75:3f:ce:
fc:6a:63:95:a4:84:83:87:60:8c:3e:5a:03:de:37:
b9:26:73:43:fc:d5:0b:8c:db:a2:85:83:26:09:6e:
10:20:60:cd:11:b5:ec:51:9f:7b:de:8f:be:56:c4:
17:22:3a:11:17:e1:c3:d1:70:9b:61:08:15:be:47:
80:27:54:81:17:d7:4c:d4:96:46:84:ad:75:78:40:
bd:db:b8:e7:bb:93:ae:9d:44:2d:28:cb:5c:ac:e6:
1b:f7:d9:1f:97:72:5a:4f:0e:aa:6a:f0:73:0f:9d:
eb:47:dd:91:b9:05:40:c4:e5:b9:62:19:23:ab:9e:
24:4c:68:15:fc:bb:8b:a5:45:65:2b:e3:20:65:2b:
6b:6f:f5:37:10:fa:ac:6d:13:29:b7:c5:22:69:29:
eb:f3:82:e5:fa:85:76:8e:14:0e:79:74:70:00:52:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:22:81:2C:3A:91:48:CE:28:55:B7:46:1C:B9:A4:0F:23:DD:02:6D
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:7b:be:39:76:a1:55:a1:26:8a:41:93:e1:67:23:f5:59:
ed:8f:fc:46:96:f0:05:7a:ec:0d:07:1f:d5:21:1e:76:43:a7:
09:49:e0:1b:14:8d:d0:19:d8:88:4e:2d:ec:cb:0f:19:16:89:
2c:cb:2b:09:b0:fd:6d:3a:a8:90:b0:a8:b6:22:e8:a8:07:47:
dc:65:ec:9f:a4:74:ba:9e:f5:81:e5:08:c5:bc:8a:88:dc:2a:
ac:ad:29:45:9c:8e:5e:90:9d:1a:70:d6:05:05:bd:eb:86:52:
35:22:f8:50:0c:dc:c4:69:d5:c0:c8:e4:23:f7:23:25:e6:80:
06:5a:90:99:0a:73:a8:71:94:2c:e6:80:ee:f2:b9:d1:48:1d:
71:ab:11:78:ab:8d:6c:d5:16:b3:68:9a:75:a1:11:9e:f2:77:
23:a9:b2:00:0b:da:3e:c5:d1:20:92:5c:f8:09:b7:02:e9:e5:
71:4f:81:bf:f4:1f:ce:a9:a5:71:c7:2f:98:6d:54:9f:05:a3:
ad:82:8d:9a:94:8f:60:05:c5:09:2d:5a:a6:aa:d6:51:33:9d:
a9:05:ae:3b:c4:3b:5b:da:b6:bf:40:a4:43:60:1e:67:83:bb:
1b:b5:a8:82:24:b5:4e:39:3c:84:a2:ac:3e:2d:88:fb:b2:2a:
6f:18:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:12:52 2026 by rpki-client