Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: 4YGkBLkdLcY6V4LUNPwKEe8CNUdrdN1LV9zHPFrQEa4=
Subject key identifier: 4D:65:4E:64:BD:B8:C3:90:98:7C:09:27:41:F9:5F:B8:F4:1D:8B:FC
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 01A06E707404F2E5B8B2BF58756235633F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 11CE
Signing time: Fri 04 Sep 2026 22:00:58 +0000
Manifest this update: Fri 04 Sep 2026 22:00:58 +0000
Manifest next update: Sat 05 Sep 2026 22:00:58 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: s14UbrzlcAht1FdUOusGLuaaQdrtBSQi0jlf5vLFKY4=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:74:04:f2:e5:b8:b2:bf:58:75:62:35:63:3f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Sep 4 22:00:58 2026 GMT
Not After : Sep 5 22:00:58 2026 GMT
Subject: CN=4d654e64bdb8c390987c092741f95fb8f41d8bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:19:98:f1:61:ae:de:a8:56:c7:30:5d:db:
25:61:be:8f:17:e2:9a:82:0f:7a:d9:24:88:c6:d2:
89:a2:3c:f7:e7:4b:ed:ca:3a:a0:55:98:9c:8e:a4:
6b:ae:1b:5b:81:12:30:ec:61:df:b3:54:f9:69:15:
1d:8f:71:5a:da:4a:7e:1c:7a:b8:05:eb:84:18:d6:
e2:df:36:5b:a0:4b:e4:80:d9:80:3a:21:35:e7:93:
70:6a:a5:e2:f7:0b:e4:c8:90:06:0e:e2:84:30:5d:
82:ca:b6:52:63:59:3d:5e:c5:80:cb:e7:8d:b5:d5:
1e:b6:b5:16:86:98:0e:64:d5:df:2b:21:6c:0e:7a:
1b:c0:9e:ed:e1:9b:b4:01:07:f2:08:82:60:ee:24:
84:b7:a8:47:6f:05:35:83:17:fd:25:72:82:d2:19:
41:c3:92:27:7b:64:b4:7d:c9:e6:69:07:0d:a8:e2:
92:d5:6f:fe:29:58:7b:30:77:29:6f:c0:dd:53:c9:
34:d8:0b:11:a9:59:8b:97:00:96:d8:ac:18:9b:74:
8f:6a:e3:74:cc:a6:a3:b7:01:fb:37:93:20:24:c4:
84:ff:b6:18:5e:6c:f1:13:b3:2a:c4:aa:bd:4e:b1:
5e:54:04:2e:ea:63:50:b3:20:bd:14:c2:c1:40:e4:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:65:4E:64:BD:B8:C3:90:98:7C:09:27:41:F9:5F:B8:F4:1D:8B:FC
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:f3:de:47:fa:ce:7b:51:17:b3:67:65:4d:27:2a:6d:ce:
ac:a5:d9:6f:4e:46:cb:b5:27:4d:f3:89:ff:58:06:62:7e:91:
69:6f:a8:67:b9:3c:ac:67:48:0e:86:ac:29:2e:5f:31:7b:21:
c2:6f:d7:59:a5:42:a0:31:ec:54:dc:d7:14:61:29:29:af:2f:
76:ce:16:f8:bf:22:91:78:79:31:be:60:53:3d:36:bd:13:09:
01:8b:7b:43:bf:f9:66:89:19:77:fd:b2:4f:a7:c9:95:6e:86:
ee:ff:d4:39:dd:93:09:23:04:89:d7:06:e9:0a:ad:45:d2:6e:
66:c3:c8:b3:ae:a0:cf:5a:89:f6:d3:81:17:64:0e:31:90:b0:
77:03:4b:4a:a2:b3:f3:85:54:62:c4:57:81:af:52:55:c1:8d:
23:7e:18:2c:50:6d:60:ae:f5:03:7b:29:b0:33:3c:75:8d:fd:
72:12:52:a1:f4:c6:a8:7f:06:14:27:da:72:9a:48:1a:41:e5:
7a:2e:50:ec:f1:5e:ff:d0:c0:b4:cf:4f:74:0f:d9:3a:4c:aa:
7f:41:59:71:db:fb:b1:e5:a7:9f:aa:fb:43:3c:ae:03:f8:d3:
b5:2e:d4:7c:3f:30:d2:1e:3d:11:6e:6c:d4:f1:71:a1:c8:d3:
09:dc:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:13 2026 by rpki-client