Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: yUOe3ZOYVKgltMj+neIfPSObw+0Bt1M6P+iteyhJU0Y=
Subject key identifier: 49:78:14:1B:11:DB:09:D6:BC:F8:B4:18:93:DF:77:32:58:68:DF:EC
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 01A0C40D9A74FDCDDF93BF63840BE28A352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 13:00:20 +0000
Manifest this update: Mon 21 Sep 2026 13:00:20 +0000
Manifest next update: Tue 22 Sep 2026 13:00:20 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: TXgmM1jBAYTvtavSA/NsffHrZ9/DeQmG7PYF7Mie6ck=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:9a:74:fd:cd:df:93:bf:63:84:0b:e2:8a:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Sep 21 13:00:20 2026 GMT
Not After : Sep 22 13:00:20 2026 GMT
Subject: CN=4978141b11db09d6bcf8b41893df77325868dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:22:ed:ef:f4:dc:2e:9f:c8:00:10:00:a6:
fa:32:c6:4d:6e:e4:c2:a6:d4:9e:46:24:5b:72:f3:
48:bc:e3:ac:95:e4:df:e9:f6:c4:63:9b:bb:8e:29:
7d:82:f0:4e:de:91:ac:49:13:e7:31:ea:8d:5f:a3:
53:7f:93:a4:e0:5b:c8:b4:e5:59:e1:5a:15:51:ed:
5b:4d:64:1e:10:32:a5:de:83:f9:46:f1:0d:41:b5:
1d:04:fb:95:a6:a7:78:11:d8:cf:38:36:d3:75:48:
08:f2:cb:cc:3e:7b:e8:73:8d:34:46:ba:c9:72:e7:
61:36:b8:77:81:48:13:e0:4e:4a:92:8a:44:6f:8a:
09:97:99:91:dd:83:fa:25:b4:b6:08:7b:74:e7:a5:
4c:e7:e1:db:14:80:50:5d:f8:92:04:ff:11:da:1c:
83:aa:25:36:36:3d:b1:5d:14:08:ff:7b:2b:b4:07:
c0:d6:26:36:ac:ec:e5:62:1c:4f:7f:56:36:a1:cc:
51:27:a4:3b:85:94:31:50:7f:73:80:97:ce:b0:99:
64:e8:46:5b:5a:01:27:fe:34:b5:47:6b:dd:d8:7a:
36:1a:5e:e3:e0:a0:b6:d7:2b:bb:3a:7a:7d:1a:d5:
b6:05:97:08:f1:48:22:b9:ff:6b:c3:39:03:7b:2b:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:14:1B:11:DB:09:D6:BC:F8:B4:18:93:DF:77:32:58:68:DF:EC
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:1a:b9:de:3f:ff:e3:24:28:70:32:3a:62:c9:6f:27:b4:
a2:f5:59:fd:56:86:71:b3:59:d9:4e:ad:47:bb:40:a6:aa:fd:
d6:c3:0f:82:38:fc:1f:a3:72:e9:a7:74:de:30:4d:94:f3:9a:
3f:f9:22:d3:e8:ff:c0:bf:67:06:48:8f:2d:e2:b5:86:e5:07:
80:e9:af:ee:44:25:8c:f3:a4:0d:db:25:f3:66:7a:07:e5:02:
50:d7:4e:9f:50:02:01:cf:dd:88:cb:58:3e:9a:90:98:a7:bd:
98:53:f8:e4:28:c2:94:5d:4b:fd:eb:9b:05:c3:34:fb:3d:4d:
3f:48:5d:59:31:af:c2:0b:9b:1b:7a:57:00:59:4e:b2:5b:0f:
98:9d:09:9b:e0:82:8e:c5:50:95:51:6b:02:51:37:30:37:87:
33:e0:26:18:e1:f5:00:ca:ef:ac:9b:0b:69:18:57:c9:c3:62:
e9:4e:9e:48:0c:46:7f:15:64:14:16:0d:9f:01:b4:f4:c6:7c:
84:0a:6e:30:af:2c:de:73:15:f8:8e:b4:25:4c:86:4b:02:b0:
e6:9f:fd:2f:2c:78:d6:d5:44:0b:f2:c6:b9:25:e8:34:47:a9:
e0:e7:e1:a9:04:2e:fc:d5:94:69:ad:0b:6d:a7:e8:37:ee:44:
38:ca:85:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDZp0/c3fk79jhAviijUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx
Zjc5NzcwHhcNMjYwOTIxMTMwMDIwWhcNMjYwOTIyMTMwMDIwWjAzMTEwLwYDVQQD
Eyg0OTc4MTQxYjExZGIwOWQ2YmNmOGI0MTg5M2RmNzczMjU4NjhkZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQi7e/03C6fyAAQAKb6MsZNbuTC
ptSeRiRbcvNIvOOsleTf6fbEY5u7jil9gvBO3pGsSRPnMeqNX6NTf5Ok4FvItOVZ
4VoVUe1bTWQeEDKl3oP5RvENQbUdBPuVpqd4EdjPODbTdUgI8svMPnvoc400RrrJ
cudhNrh3gUgT4E5KkopEb4oJl5mR3YP6JbS2CHt056VM5+HbFIBQXfiSBP8R2hyD
qiU2Nj2xXRQI/3srtAfA1iY2rOzlYhxPf1Y2ocxRJ6Q7hZQxUH9zgJfOsJlk6EZb
WgEn/jS1R2vd2Ho2Gl7j4KC21yu7Onp9GtW2BZcI8Ugiuf9rwzkDeysniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl4FBsR2wnWvPi0GJPfdzJYaN/sMB8GA1UdIwQY
MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt
NTYwODVjOWU1MjJlLzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl
LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4gaud4/
/+MkKHAyOmLJbye0ovVZ/VaGcbNZ2U6tR7tApqr91sMPgjj8H6Ny6ad03jBNlPOa
P/ki0+j/wL9nBkiPLeK1huUHgOmv7kQljPOkDdsl82Z6B+UCUNdOn1ACAc/diMtY
PpqQmKe9mFP45CjClF1L/eubBcM0+z1NP0hdWTGvwgubG3pXAFlOslsPmJ0Jm+CC
jsVQlVFrAlE3MDeHM+AmGOH1AMrvrJsLaRhXycNi6U6eSAxGfxVkFBYNnwG09MZ8
hApuMK8s3nMV+I60JUyGSwKw5p/9Lyx41tVEC/LGuSXoNEep4OfhqQQu/NWUaa0L
bafoN+5EOMqFBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:35 2026 by rpki-client