Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: WM2I7G5IOSZDuuc3XJecZHPzZt+4go8Y5SfufjX/3Gk=
Subject key identifier: F5:89:D8:E7:7C:D0:9C:B9:29:AE:00:49:32:C9:DE:8E:39:C4:3A:D9
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 01A16269F0D09F19AFFDB947476F7A10AD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 126B
Signing time: Thu 22 Oct 2026 07:01:12 +0000
Manifest this update: Thu 22 Oct 2026 07:01:12 +0000
Manifest next update: Fri 23 Oct 2026 07:01:12 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: U4c79V7NkrzCetBwc5TZ4IWtUS64UzjZTBabVf2b3fc=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:f0:d0:9f:19:af:fd:b9:47:47:6f:7a:10:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Oct 22 07:01:12 2026 GMT
Not After : Oct 23 07:01:12 2026 GMT
Subject: CN=f589d8e77cd09cb929ae004932c9de8e39c43ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:12:0f:c1:fe:01:11:cb:db:fa:a8:80:01:
b4:c1:a3:60:83:f7:1c:01:c0:01:f1:dd:83:44:f9:
d1:b8:23:00:84:90:56:dd:fa:be:49:6a:b5:13:5b:
e5:79:63:8b:38:f5:7a:4d:8b:0b:e3:ab:f2:75:ea:
3f:1a:89:89:97:94:f3:8e:08:a7:06:89:a7:28:9b:
9c:32:82:ea:01:62:24:3c:e9:56:97:d1:69:d6:45:
9c:77:3c:4f:09:52:11:8d:88:4b:c5:74:02:82:b1:
25:4a:e7:47:d3:69:59:1e:eb:d6:b3:3e:4e:b7:5d:
da:75:ce:4f:0b:21:0a:b2:c8:3f:32:aa:25:ef:40:
64:05:27:d2:c7:44:bb:a2:1f:af:ed:b4:9b:d3:61:
f9:34:77:7b:e7:cd:ac:d4:27:5e:7a:0b:df:40:5b:
d0:b6:e9:58:48:f1:f3:7d:42:9a:f6:07:93:3d:dd:
e0:e8:71:5f:da:15:60:5c:05:dc:99:2e:a6:56:f5:
10:ab:05:58:f5:41:a2:a5:59:05:58:04:28:f4:ab:
7d:1b:6c:d3:22:1c:db:61:d3:a1:8b:dc:47:16:50:
46:b3:28:7c:db:a1:4d:8c:03:aa:b2:c0:53:79:f0:
b2:ab:fb:20:60:fa:bd:80:1b:3b:49:ff:b3:7e:a1:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:D8:E7:7C:D0:9C:B9:29:AE:00:49:32:C9:DE:8E:39:C4:3A:D9
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f7:db:9f:45:96:a6:01:93:30:d7:2e:fe:84:7b:4f:5c:c1:
e9:0a:79:1b:f7:7b:37:e4:50:7e:2b:15:11:2f:b5:de:25:a1:
ac:68:2f:3f:12:a0:03:dd:b9:e1:a9:51:40:95:cd:13:d6:9f:
40:5e:55:48:9f:60:85:c8:f6:dc:63:e1:14:8f:09:a0:3e:db:
8f:c8:ec:2a:4c:15:c5:5b:3b:4f:39:d6:42:8f:21:0d:bc:b9:
de:86:da:66:69:84:b9:46:24:37:25:f1:71:39:03:12:e0:6a:
2d:9f:b3:74:2d:07:ea:73:df:b1:7c:4f:34:5e:32:41:23:25:
1a:42:46:ff:38:cc:ca:b4:bd:ee:37:6b:6d:9e:06:4e:a1:88:
c5:09:10:e0:d1:ea:db:5b:bf:a1:f5:28:f8:59:aa:fe:85:c3:
d5:69:65:3d:c9:41:c0:34:70:a4:37:00:b5:47:f4:38:57:3f:
24:06:a2:bc:9f:06:06:55:3d:f7:72:c0:fe:7f:67:37:c1:6e:
74:72:92:3c:a2:9b:8c:33:74:50:e5:c3:25:d0:a6:e2:4d:c0:
cd:e3:dd:13:10:f1:c1:40:e3:3d:5d:9d:19:65:b7:09:6c:9a:
93:d4:92:f3:5f:b4:73:50:a8:4c:f2:f7:0e:d2:7c:7f:43:5a:
2f:d0:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 15:23:40 2026 by rpki-client