Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: BTeLr97yqWVZots2Igcm/3K/V+J59KaPG2KhaJ5Kf8U=
Subject key identifier: 73:F1:06:61:6A:0E:F0:F9:A4:0A:AC:26:DB:2D:46:0F:68:54:ED:D7
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01A13F7013F7B0D4B446B4061300BC53BE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 11EC
Signing time: Thu 15 Oct 2026 12:01:11 +0000
Manifest this update: Thu 15 Oct 2026 12:01:11 +0000
Manifest next update: Fri 16 Oct 2026 12:01:11 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: VxYSOnKhdx/Jl15gdlLNVKyhgwPdm/j5SDjoCvg/yOY=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:13:f7:b0:d4:b4:46:b4:06:13:00:bc:53:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Oct 15 12:01:11 2026 GMT
Not After : Oct 16 12:01:11 2026 GMT
Subject: CN=73f106616a0ef0f9a40aac26db2d460f6854edd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:78:6b:35:43:d1:e1:88:3e:42:8a:f0:24:
ce:f1:99:3b:40:19:15:a2:d7:68:d4:01:d8:57:9e:
45:34:2b:6b:c8:c1:df:dc:1f:7c:c5:d1:3e:be:3e:
2d:68:9d:54:7a:76:1d:33:52:34:c2:9f:c0:5c:c5:
a9:f0:7e:52:08:48:53:4b:eb:41:3c:5e:29:c7:02:
36:1d:0c:2e:13:28:9a:fa:5a:28:85:88:44:c2:4b:
ec:fa:0f:8c:cd:f6:b2:95:0b:ff:9d:1d:94:8b:55:
30:64:02:56:00:11:e9:5a:74:63:a1:ee:da:5c:aa:
0a:79:e6:e8:52:30:c5:89:3e:3d:fa:48:ea:d8:04:
b9:a3:7a:15:b3:02:57:20:1b:34:ee:28:19:86:63:
26:9c:00:22:19:fe:7b:9a:86:d5:ab:dc:f2:0e:9c:
3c:61:c4:e1:53:4d:dd:6b:74:25:23:f8:7d:07:13:
5f:b8:f0:21:74:82:c9:cd:db:94:f0:54:02:15:5c:
3a:44:2d:5a:3a:4a:62:a3:fb:0e:0c:84:0b:e3:9f:
a6:3a:fd:45:3f:2c:05:89:95:aa:38:5c:2f:27:09:
ef:85:e6:1e:c2:a0:ae:54:02:24:f1:9a:f9:62:34:
c0:da:40:64:d8:b1:f3:ab:d6:58:15:ab:0f:71:4e:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:06:61:6A:0E:F0:F9:A4:0A:AC:26:DB:2D:46:0F:68:54:ED:D7
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:6d:d0:50:60:c5:78:87:fd:d0:c2:7c:fe:30:1d:6c:01:
be:b0:d6:6f:37:b8:5f:fe:b9:3e:41:13:44:3a:ab:21:c2:f8:
10:29:da:5f:8f:41:cc:0a:31:13:fc:9b:49:f8:66:c9:a6:55:
8c:c9:b7:99:21:13:59:69:ba:c7:d6:dd:6e:ce:ad:ff:83:bf:
58:e3:bc:39:f6:10:19:d2:37:21:be:19:0c:0b:8c:d7:5d:26:
eb:d5:0a:f4:b0:73:92:7d:74:46:3e:90:c3:06:36:4a:b1:56:
c5:cc:39:b0:fd:36:79:38:f4:c5:e4:56:3b:b0:e6:8b:16:c8:
3f:cd:89:62:02:06:98:ba:bc:fb:94:d4:c9:ca:ec:10:e2:92:
40:66:12:48:66:6a:24:47:81:da:65:1f:2b:df:41:a5:0c:e5:
27:db:06:0f:a7:a4:de:ba:07:e6:30:ea:54:cb:ba:d1:20:d6:
b8:8b:a3:7d:8a:0d:b8:80:d7:0b:f1:9b:57:5f:77:7e:33:80:
50:f7:55:7b:cd:6f:3b:96:cd:e9:21:46:dc:f6:ae:1d:8c:a5:
03:48:f4:b4:e9:3f:9e:24:34:3e:10:bf:1f:76:fa:99:4b:c5:
b8:fc:1b:59:09:49:5c:3f:e5:96:63:de:58:da:02:dc:e2:d6:
f3:b5:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:06 2026 by rpki-client