Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: vSQRIhPg6zY1VJZ98yajWjSxYDPVuF/obMWmitKoRi8=
Subject key identifier: 4C:8E:F5:C0:51:40:8D:F4:F6:54:BF:D9:04:B7:27:37:54:01:29:DB
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 01A0C66A8A1FB8201BF89D9B345C2BA1E740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 00:01:05 +0000
Manifest this update: Tue 22 Sep 2026 00:01:05 +0000
Manifest next update: Wed 23 Sep 2026 00:01:05 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: mFrleThvOJmFF3WO0YZzTf2HhmZYvRyK04LDS0m6U0I=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:8a:1f:b8:20:1b:f8:9d:9b:34:5c:2b:a1:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Sep 22 00:01:05 2026 GMT
Not After : Sep 23 00:01:05 2026 GMT
Subject: CN=4c8ef5c051408df4f654bfd904b72737540129db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:86:9c:d0:d3:35:0d:39:17:71:ee:84:f4:
81:c5:6b:f9:49:0d:2a:6c:51:10:b4:a6:8d:13:ae:
50:27:10:7b:8d:1a:2c:fc:85:fc:01:9d:6c:ce:17:
c7:c3:0d:f0:f3:7a:2a:32:70:0e:5e:9a:08:d3:98:
e3:18:24:99:db:b0:1d:12:5c:3c:92:73:fd:50:cf:
0f:ca:0c:b2:ef:28:16:8b:85:f1:5e:86:65:21:47:
46:31:8c:8a:49:3c:4d:b3:b3:91:f9:37:10:66:54:
2e:04:b1:bf:30:fc:8f:f8:d1:6b:a1:03:a1:d3:3f:
85:09:b9:dc:0f:36:23:a2:fd:b8:3e:1f:69:f2:39:
ce:59:bb:4c:25:9d:f0:70:ef:bc:3e:0d:39:aa:b9:
c8:7d:2a:bd:81:d5:17:98:46:e0:74:af:18:b1:c6:
cd:d3:1e:70:ee:a7:e9:d9:81:d0:b3:0c:df:11:18:
92:8a:53:7f:b0:e9:f4:5d:9b:d1:aa:f1:d3:66:76:
e1:a1:f3:23:d5:f8:84:29:66:11:58:56:a4:22:fe:
cf:b5:92:9e:5b:36:10:fe:50:6d:8e:6e:86:ee:33:
ef:e5:a8:bf:b8:44:6a:9c:94:29:a4:68:79:1e:30:
bd:fc:b8:a0:2b:da:23:93:7f:59:69:2d:d5:06:69:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:F5:C0:51:40:8D:F4:F6:54:BF:D9:04:B7:27:37:54:01:29:DB
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:98:4a:f5:ab:b9:9e:be:0c:4b:d6:f3:76:62:4d:0e:dd:
4c:92:0c:d0:97:ac:dc:4e:c8:cb:be:d4:b1:06:78:5a:d2:3f:
8c:42:e6:39:86:b9:02:79:23:4e:ea:ea:fb:bf:67:64:c3:c7:
89:b9:e8:0b:ad:0b:0f:51:2e:83:26:4f:fe:f7:99:d6:58:61:
9f:d7:96:fc:18:f0:12:6e:92:d5:22:d1:e7:c4:c9:c8:63:e8:
e8:47:37:d9:ae:2f:43:ab:fc:94:81:17:05:19:12:05:00:5f:
dc:c5:9e:f8:6f:08:26:6a:c9:f6:3e:ba:13:ff:4b:7f:79:74:
6c:dd:b3:77:8c:04:ba:4c:4e:f2:0e:47:86:79:f2:21:54:67:
31:53:16:c4:3d:d4:6a:f7:c8:48:e2:58:fc:c7:d2:1b:6d:bb:
48:2f:a9:85:5e:fe:d7:26:87:9e:77:27:ea:24:a4:bc:0a:a2:
82:b6:47:e1:04:bb:6a:a7:fb:9b:95:c1:97:56:7f:9e:d6:16:
3c:ba:de:79:a1:83:d2:8c:4e:30:0c:d3:bd:1a:0c:7c:0d:5f:
82:49:03:5b:ca:46:6b:40:fd:f5:60:84:7b:9a:9e:43:52:63:
fa:5e:72:c8:c7:93:f6:9a:4b:46:ae:46:cb:5e:3f:3b:da:c9:
78:9f:ca:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaoofuCAb+J2bNFwroedAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm
N2VjODEwHhcNMjYwOTIyMDAwMTA1WhcNMjYwOTIzMDAwMTA1WjAzMTEwLwYDVQQD
Eyg0YzhlZjVjMDUxNDA4ZGY0ZjY1NGJmZDkwNGI3MjczNzU0MDEyOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnemGnNDTNQ05F3HuhPSBxWv5SQ0q
bFEQtKaNE65QJxB7jRos/IX8AZ1szhfHww3w83oqMnAOXpoI05jjGCSZ27AdElw8
knP9UM8Pygyy7ygWi4XxXoZlIUdGMYyKSTxNs7OR+TcQZlQuBLG/MPyP+NFroQOh
0z+FCbncDzYjov24Ph9p8jnOWbtMJZ3wcO+8Pg05qrnIfSq9gdUXmEbgdK8YscbN
0x5w7qfp2YHQswzfERiSilN/sOn0XZvRqvHTZnbhofMj1fiEKWYRWFakIv7PtZKe
WzYQ/lBtjm6G7jPv5ai/uERqnJQppGh5HjC9/LigK9ojk39ZaS3VBmmZkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyO9cBRQI309lS/2QS3JzdUASnbMB8GA1UdIwQY
MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt
MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw
LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCiYSvWr
uZ6+DEvW83ZiTQ7dTJIM0Jes3E7Iy77UsQZ4WtI/jELmOYa5AnkjTurq+79nZMPH
ibnoC60LD1EugyZP/veZ1lhhn9eW/BjwEm6S1SLR58TJyGPo6Ec32a4vQ6v8lIEX
BRkSBQBf3MWe+G8IJmrJ9j66E/9Lf3l0bN2zd4wEukxO8g5HhnnyIVRnMVMWxD3U
avfISOJY/MfSG227SC+phV7+1yaHnncn6iSkvAqigrZH4QS7aqf7m5XBl1Z/ntYW
PLreeaGD0oxOMAzTvRoMfA1fgkkDW8pGa0D99WCEe5qeQ1Jj+l5yyMeT9ppLRq5G
y14/O9rJeJ/Khg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:50 2026 by rpki-client