Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: amwmprMkjRa6uTIpoI40dSrvA2U7KAAJYbe/RhtToa8=
Subject key identifier: 31:34:48:FF:EA:5B:C9:FB:33:61:E6:19:20:2E:64:82:8B:0D:34:EA
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 01A0D984151F790E2FCBFBD2250DD9924B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0A01
Signing time: Fri 25 Sep 2026 17:01:47 +0000
Manifest this update: Fri 25 Sep 2026 17:01:47 +0000
Manifest next update: Sat 26 Sep 2026 17:01:47 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: 94Cd7qkXzcVzvC8t9K8yMxm9NBzJW/XRd7KzlBDpFwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:15:1f:79:0e:2f:cb:fb:d2:25:0d:d9:92:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Sep 25 17:01:47 2026 GMT
Not After : Sep 26 17:01:47 2026 GMT
Subject: CN=313448ffea5bc9fb3361e619202e64828b0d34ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:0e:f1:77:a3:70:c8:4b:f4:26:7c:92:4f:
88:22:03:a1:22:88:31:39:8c:66:26:d5:ec:b0:d4:
76:85:1e:45:59:57:aa:bf:1f:b5:a7:7d:be:69:f9:
4a:7b:ad:0a:33:ae:29:39:a9:3b:5e:24:14:ac:72:
ef:1c:ac:aa:47:70:dd:3e:b8:04:7a:d9:60:f7:8d:
4e:69:b5:36:43:07:ef:f5:57:b2:1b:7c:11:91:b8:
91:19:17:34:f5:9b:04:ec:31:d7:63:83:cc:c8:2c:
e4:3d:22:e6:5b:2e:77:d5:ca:44:5d:51:08:f2:39:
5b:b3:b4:4e:98:13:53:43:9e:fe:c2:15:58:34:4e:
13:9d:6a:ca:9b:91:3e:3c:66:38:c1:e9:4d:4e:65:
c6:8b:8e:50:d2:9f:04:42:f7:8d:40:41:3f:3a:89:
0b:05:e4:b9:38:20:99:6c:c7:77:63:61:7a:fe:97:
bc:f0:1f:53:ab:b1:d7:04:e0:66:87:2e:28:ef:53:
4b:47:ad:08:5c:c5:9d:56:f4:bb:e8:a8:fb:53:39:
c1:9c:1e:2d:9f:bb:15:37:fc:7f:22:25:fc:cb:06:
33:b1:dc:1f:08:38:24:7e:66:1f:aa:af:74:1e:fe:
83:1b:48:37:aa:9e:02:5a:a7:78:87:12:e7:6c:57:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:48:FF:EA:5B:C9:FB:33:61:E6:19:20:2E:64:82:8B:0D:34:EA
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:19:e7:78:bb:26:cb:1e:67:f6:a9:24:5f:7a:5b:87:13:0b:
03:53:be:27:b1:c5:ba:da:5d:70:e3:8e:0c:22:d1:cd:15:36:
f8:01:8d:b8:1d:6b:5b:3a:0c:0f:df:ef:24:ba:ec:1e:89:d3:
d2:1a:73:ec:32:57:cf:26:a2:20:29:79:1e:13:83:7c:0e:23:
c7:a4:a9:e9:df:2d:b5:4a:41:56:de:ee:5b:9a:82:65:ab:f7:
24:d6:bd:88:6f:a5:eb:b3:0b:c1:18:70:2a:b3:ca:9b:fd:a9:
23:79:ea:1f:d4:f0:10:ca:36:73:e9:a4:f1:80:69:2e:7d:fc:
4d:11:56:bc:24:2c:4e:04:25:8c:d0:82:98:e4:a2:a8:51:bc:
70:5b:89:3d:0d:ac:53:7e:89:29:7f:dd:6e:d3:f7:fb:49:4d:
4b:f9:05:96:55:64:6a:be:92:d6:e7:f1:0f:fb:eb:35:74:d4:
5a:b5:dc:d0:77:b1:b1:38:13:ef:4d:c3:ce:5a:74:e9:0d:a1:
4e:cd:86:4e:f2:85:98:f5:0c:e1:5a:5f:53:6c:b5:6f:ff:16:
a0:02:5c:36:78:99:c7:b8:77:28:72:6e:9c:b1:8e:40:0b:05:
a3:7a:a4:ef:10:4e:8c:6d:f3:2c:a8:f7:61:9f:5a:07:83:d2:
8c:87:e5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZhBUfeQ4vy/vSJQ3ZkktPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjdhNTI0N2Q5ZjRlOTRmN2JkNTcxY2YxM2QzNWFiNDhi
MDFkMjQwHhcNMjYwOTI1MTcwMTQ3WhcNMjYwOTI2MTcwMTQ3WjAzMTEwLwYDVQQD
EygzMTM0NDhmZmVhNWJjOWZiMzM2MWU2MTkyMDJlNjQ4MjhiMGQzNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKQO8XejcMhL9CZ8kk+IIgOhIogx
OYxmJtXssNR2hR5FWVeqvx+1p32+aflKe60KM64pOak7XiQUrHLvHKyqR3DdPrgE
etlg941OabU2Qwfv9VeyG3wRkbiRGRc09ZsE7DHXY4PMyCzkPSLmWy531cpEXVEI
8jlbs7ROmBNTQ57+whVYNE4TnWrKm5E+PGY4welNTmXGi45Q0p8EQveNQEE/OokL
BeS5OCCZbMd3Y2F6/pe88B9Tq7HXBOBmhy4o71NLR60IXMWdVvS76Kj7UznBnB4t
n7sVN/x/IiX8ywYzsdwfCDgkfmYfqq90Hv6DG0g3qp4CWqd4hxLnbFdGLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE0SP/qW8n7M2HmGSAuZIKLDTTqMB8GA1UdIwQY
MBaAFINnpSR9n06U971XHPE9NatIsB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2Yt
NjM1NGVmMDc3MWM5LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2YtNjM1NGVmMDc3MWM5
LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhnneLsm
yx5n9qkkX3pbhxMLA1O+J7HFutpdcOOODCLRzRU2+AGNuB1rWzoMD9/vJLrsHonT
0hpz7DJXzyaiICl5HhODfA4jx6Sp6d8ttUpBVt7uW5qCZav3JNa9iG+l67MLwRhw
KrPKm/2pI3nqH9TwEMo2c+mk8YBpLn38TRFWvCQsTgQljNCCmOSiqFG8cFuJPQ2s
U36JKX/dbtP3+0lNS/kFllVkar6S1ufxD/vrNXTUWrXc0HexsTgT703Dzlp06Q2h
Ts2GTvKFmPUM4VpfU2y1b/8WoAJcNniZx7h3KHJunLGOQAsFo3qk7xBOjG3zLKj3
YZ9aB4PSjIfldA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:13 2026 by rpki-client