Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: /7Ts8LNC90hfdEji28SnyD1eMkipbI3HAFhCrfnvWqg=
Subject key identifier: 2D:E9:11:C3:EE:6A:BD:3D:1B:4A:FD:CE:65:42:BD:23:0F:0D:F5:32
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01A0C70EE05CB93ABEA5A52383BABF716F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 03:00:35 +0000
Manifest this update: Tue 22 Sep 2026 03:00:35 +0000
Manifest next update: Wed 23 Sep 2026 03:00:35 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: MbUbM8I28tGRZik1jjH3LOQJq75QeVTwqr6Pr5ex+/E=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:e0:5c:b9:3a:be:a5:a5:23:83:ba:bf:71:6f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Sep 22 03:00:35 2026 GMT
Not After : Sep 23 03:00:35 2026 GMT
Subject: CN=2de911c3ee6abd3d1b4afdce6542bd230f0df532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:ca:af:91:aa:a2:21:de:d1:42:54:32:59:
11:28:b0:1b:cb:68:e8:bb:00:09:68:60:d3:7f:3d:
ef:85:0a:b8:56:29:cf:20:2d:95:38:2a:94:6d:1a:
3b:be:8b:f8:22:1f:fd:59:89:6a:b6:f5:4e:cf:37:
ef:c2:f6:2b:90:d1:e9:f9:65:a1:f2:af:31:ff:4f:
08:0d:98:4f:72:50:e0:4b:db:f7:e4:86:09:73:7b:
24:13:72:18:90:db:8a:34:b4:8b:a7:d5:af:50:4f:
65:02:fc:32:24:32:31:72:d7:90:f1:a6:50:39:e3:
4d:73:49:42:bb:75:22:6a:f1:6f:12:a7:a7:32:1d:
e3:83:93:40:3f:2f:24:20:67:df:7c:c5:db:27:e2:
c9:f5:55:d5:97:66:e8:76:2b:c9:cc:fe:f5:d9:05:
0c:66:34:b1:93:92:42:47:88:32:ce:5e:41:08:db:
d2:c5:6c:13:fc:05:ad:40:2d:2d:84:01:81:b6:ce:
b1:a2:4d:7b:a7:c2:fe:98:6a:8c:b6:2d:5a:35:97:
c8:d3:85:a1:00:a0:92:50:93:6c:89:21:bd:6e:f1:
4c:62:3c:84:77:ac:68:ea:2f:d1:a1:4e:cb:88:b9:
96:7b:a0:80:53:a0:f8:4a:00:05:32:cd:77:72:ae:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:11:C3:EE:6A:BD:3D:1B:4A:FD:CE:65:42:BD:23:0F:0D:F5:32
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:cb:4d:05:90:5f:99:7f:6f:b6:55:9b:8f:34:33:b9:60:
06:0f:6f:f3:68:f8:81:b7:ad:77:4e:b9:fb:3f:72:85:50:fc:
45:15:d9:8f:fb:2e:87:7e:be:bf:4b:bf:a2:fc:2a:7c:70:54:
5d:84:f0:66:f1:af:f4:b6:8d:0c:27:73:fe:76:99:9b:80:4e:
ee:5e:b7:cc:cb:21:b6:e1:03:45:ee:ae:89:40:5e:ad:26:71:
96:75:48:0e:78:88:33:9d:de:89:fb:f4:b5:b8:0e:70:89:b6:
f2:52:61:d6:30:9f:dc:1f:0f:d4:f3:73:c4:42:de:8f:51:66:
85:6f:eb:e0:cc:42:f3:34:b2:88:ab:a6:0c:ba:b6:13:27:ba:
6c:9f:a0:eb:2b:eb:ca:f0:b3:a6:64:8b:14:e5:de:5b:02:e6:
c6:2c:74:fa:ab:3f:b1:dc:b7:36:e6:58:aa:90:cd:17:42:7a:
6d:b1:d4:48:c0:0a:0d:e8:d1:76:99:c4:81:25:c0:83:c9:1e:
8a:48:97:5d:0f:9d:f2:f7:6b:36:0a:28:42:11:b4:81:3b:30:
4e:0e:c7:85:0f:a1:1c:4f:0e:89:e9:bf:b6:c3:4e:cd:e8:6f:
a1:17:55:5a:db:e0:04:03:65:07:29:b0:64:82:a8:a8:a9:4f:
e7:03:90:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDuBcuTq+paUjg7q/cW93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjYwOTIyMDMwMDM1WhcNMjYwOTIzMDMwMDM1WjAzMTEwLwYDVQQD
EygyZGU5MTFjM2VlNmFiZDNkMWI0YWZkY2U2NTQyYmQyMzBmMGRmNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk7Kr5GqoiHe0UJUMlkRKLAby2jo
uwAJaGDTfz3vhQq4VinPIC2VOCqUbRo7vov4Ih/9WYlqtvVOzzfvwvYrkNHp+WWh
8q8x/08IDZhPclDgS9v35IYJc3skE3IYkNuKNLSLp9WvUE9lAvwyJDIxcteQ8aZQ
OeNNc0lCu3UiavFvEqenMh3jg5NAPy8kIGfffMXbJ+LJ9VXVl2bodivJzP712QUM
ZjSxk5JCR4gyzl5BCNvSxWwT/AWtQC0thAGBts6xok17p8L+mGqMti1aNZfI04Wh
AKCSUJNsiSG9bvFMYjyEd6xo6i/RoU7LiLmWe6CAU6D4SgAFMs13cq7lKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3pEcPuar09G0r9zmVCvSMPDfUyMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRHLTQWQ
X5l/b7ZVm480M7lgBg9v82j4gbetd065+z9yhVD8RRXZj/suh36+v0u/ovwqfHBU
XYTwZvGv9LaNDCdz/naZm4BO7l63zMshtuEDRe6uiUBerSZxlnVIDniIM53eifv0
tbgOcIm28lJh1jCf3B8P1PNzxELej1FmhW/r4MxC8zSyiKumDLq2Eye6bJ+g6yvr
yvCzpmSLFOXeWwLmxix0+qs/sdy3NuZYqpDNF0J6bbHUSMAKDejRdpnEgSXAg8ke
ikiXXQ+d8vdrNgooQhG0gTswTg7HhQ+hHE8Oiem/tsNOzehvoRdVWtvgBANlBymw
ZIKoqKlP5wOQgA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:41 2026 by rpki-client