Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: E9HfTLwnAa+LwagMGMfUMLKp+8T0KbqPLoaNEbLCr70=
Subject key identifier: E8:ED:B4:65:EB:B3:23:ED:D7:D5:2A:AC:E5:71:EE:75:5D:9D:73:1D
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 01A06F159FC0C846F351743DD3DA7DC0E63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 11ED
Signing time: Sat 05 Sep 2026 01:01:23 +0000
Manifest this update: Sat 05 Sep 2026 01:01:23 +0000
Manifest next update: Sun 06 Sep 2026 01:01:23 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: IBPluq+XyRE6Yd8QpDMhaW2+EbHdi/g18DzFse9DmHI=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:9f:c0:c8:46:f3:51:74:3d:d3:da:7d:c0:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Sep 5 01:01:23 2026 GMT
Not After : Sep 6 01:01:23 2026 GMT
Subject: CN=e8edb465ebb323edd7d52aace571ee755d9d731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:10:50:83:ea:f2:d2:c5:91:bd:fd:9c:82:
ef:02:e6:73:6c:3e:19:ec:76:00:4a:74:d7:2d:7e:
67:82:69:36:b9:08:db:e8:6d:13:8a:6a:21:4e:4c:
58:f3:c9:05:87:ba:6c:78:a2:05:5f:02:a2:01:2a:
e4:2f:16:79:91:87:ed:5a:02:74:96:68:8b:90:c6:
9b:8e:d4:65:85:02:ca:8e:a5:96:f2:30:c6:92:c5:
36:f3:08:e3:55:2f:3f:f6:bc:9e:c0:b3:c0:0a:64:
fa:87:fc:7a:57:f0:c6:f8:08:50:37:b2:89:c9:5e:
4e:e3:f7:c6:74:c6:09:61:97:ad:05:c3:bf:56:5f:
8f:cc:95:f7:61:e2:a8:02:b9:bf:4b:9a:9f:22:22:
30:31:cc:3b:8e:d3:ee:a8:ca:cf:a1:a9:61:b9:61:
7c:e7:b7:33:cc:25:df:3c:38:e4:af:01:4c:df:c0:
a1:3c:32:f9:b4:34:4f:a4:a7:9b:95:24:48:f5:cc:
b9:40:2b:7f:ab:40:ae:ef:44:f5:3e:62:14:a6:8c:
b0:e8:a5:40:53:0c:f9:b3:8a:b9:34:9b:81:ae:f2:
63:e3:69:a4:78:d9:70:e3:b1:d5:9e:a8:53:57:12:
64:eb:01:d2:6d:61:2d:f8:4e:55:ed:21:b4:bc:37:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:B4:65:EB:B3:23:ED:D7:D5:2A:AC:E5:71:EE:75:5D:9D:73:1D
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:f5:90:6c:93:6d:54:ac:19:ad:90:d7:64:6b:e1:34:73:
6c:6a:a4:1e:e9:c9:53:dd:d9:a5:02:0f:3a:07:e4:e7:95:67:
97:9e:80:80:f9:9f:d7:38:26:33:8e:0e:07:e0:a1:a9:2f:1c:
87:80:73:19:27:3c:53:58:ab:13:5c:ba:91:0a:08:f9:83:d6:
53:d2:c9:b3:35:0c:39:a9:56:88:a7:4c:84:f9:56:c8:3b:7d:
0f:70:90:95:53:3a:9b:84:27:2f:05:43:4f:c9:22:cd:80:19:
95:81:c1:b7:2b:54:5b:43:ff:d7:ba:81:92:e8:a5:e9:04:7f:
f0:09:e9:bc:b6:9e:46:84:c3:27:34:c1:f4:51:c2:99:c6:a7:
9d:91:74:c4:1e:90:3a:82:ad:11:23:a8:2b:1b:6b:ce:f1:4b:
9d:22:c3:53:2b:87:62:f5:da:cc:8d:6a:23:04:e8:a5:b9:dd:
3f:75:c2:fc:f2:7c:d1:8d:d3:c7:aa:ff:16:d9:4c:87:65:b4:
b6:7c:07:1b:cb:f0:98:a2:1c:63:2e:2f:6d:41:a3:39:a9:de:
32:8d:7f:d9:24:c4:97:1f:b4:cf:25:66:1d:93:1e:a5:87:e3:
41:f5:6f:6a:e6:62:d4:e8:9a:f6:6f:e1:2f:43:24:09:ad:2b:
7c:12:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:54 2026 by rpki-client