Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: 4zIXtOjVStXDcIa80Q4B2XM7e4Len4FJY9JHiJPY7jE=
Subject key identifier: F2:E4:FE:17:47:0A:DF:44:4D:37:0E:85:A4:85:96:A1:1D:AF:06:53
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01A0C39F9EDAC99ED3A5A709CF0983A3DB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 07A4
Signing time: Mon 21 Sep 2026 11:00:13 +0000
Manifest this update: Mon 21 Sep 2026 11:00:13 +0000
Manifest next update: Tue 22 Sep 2026 11:00:13 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: Nl0NFpXfZOZyEFRu//wsl/tQJ/K5p9V5csvgZrLG53k=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:9e:da:c9:9e:d3:a5:a7:09:cf:09:83:a3:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Sep 21 11:00:13 2026 GMT
Not After : Sep 22 11:00:13 2026 GMT
Subject: CN=f2e4fe17470adf444d370e85a48596a11daf0653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:16:b9:ae:b1:d4:c3:bd:eb:dc:93:9c:8f:
82:75:0b:c4:3a:76:c4:30:61:23:c8:bc:5d:97:e2:
5a:a9:57:1f:0b:77:90:79:94:60:e8:84:98:ec:c0:
6d:bf:4a:df:b9:e0:16:15:93:78:f0:fb:77:11:ea:
eb:8b:10:c3:ce:f3:1a:5c:41:5b:61:a0:a4:52:18:
f8:cd:04:67:3b:bd:2b:f9:05:10:71:40:4d:dc:bc:
a3:77:4b:4e:31:e5:53:ce:97:c4:6e:11:bf:2d:1f:
30:f5:5b:9e:a6:be:bc:f1:e8:da:3f:70:fe:37:44:
85:8d:c2:98:99:36:9f:07:32:50:13:8d:a9:7a:d3:
57:12:22:b3:58:e6:a0:5b:65:99:8e:27:86:7d:6a:
ab:5b:d8:9d:4f:3c:fa:60:23:b5:1f:c7:e5:98:46:
4a:a0:37:2e:b6:c9:47:3d:d1:7b:24:b9:b2:2b:b0:
3f:b0:1b:29:e9:0d:b4:f0:50:67:32:f3:9a:35:40:
70:00:d0:63:53:d0:68:78:3e:79:f0:15:00:14:4f:
98:98:a1:89:2b:60:06:a8:7b:fc:bc:6d:cd:18:bd:
67:97:d5:47:ba:e3:a3:ad:f2:62:6d:82:c7:6d:7e:
47:7e:1d:30:28:0b:2f:7c:6c:5c:09:e5:12:26:19:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E4:FE:17:47:0A:DF:44:4D:37:0E:85:A4:85:96:A1:1D:AF:06:53
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:42:b1:f9:0c:f4:1d:c6:2a:4f:42:f9:e5:b3:ea:f7:28:64:
94:3e:65:b1:7f:1c:50:2e:e1:c9:fc:3f:b8:7a:2b:bc:03:ff:
a6:5e:1b:a6:83:ba:9b:58:7e:21:10:cd:ae:81:82:3c:98:c5:
6d:5e:9b:4b:9c:bc:94:e2:59:8e:0b:65:30:52:8a:f1:18:eb:
6d:3d:8e:16:24:84:d6:61:cb:7e:25:3b:3d:1e:e2:a5:95:47:
a6:d6:42:5b:23:c8:22:a0:9a:2d:c1:3e:64:2c:9a:57:1a:4b:
1f:e7:09:6a:7c:e2:c5:80:18:43:3e:10:e8:0d:d7:40:15:3f:
aa:8d:8e:f8:44:d9:8a:42:ce:65:3b:1d:58:c6:a4:f5:cf:bf:
cb:8c:fa:0c:94:e9:16:6b:9b:23:03:09:1b:3c:6c:6d:63:05:
4c:05:45:19:79:3b:ba:6a:30:26:aa:dd:2c:39:20:18:62:a8:
80:78:10:eb:39:3b:f7:04:e7:af:02:32:54:45:f0:87:82:4c:
60:1b:42:94:ff:a7:cc:76:62:1f:5a:bf:80:fa:77:d4:05:03:
83:e9:79:92:a8:4b:22:9e:0d:ee:f6:dd:d2:93:a8:49:ae:c1:
c0:7e:e7:20:39:af:1e:f6:ed:c8:12:8d:d7:80:ae:2f:09:58:
ad:a3:cb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn57ayZ7TpacJzwmDo9trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjYwOTIxMTEwMDEzWhcNMjYwOTIyMTEwMDEzWjAzMTEwLwYDVQQD
EyhmMmU0ZmUxNzQ3MGFkZjQ0NGQzNzBlODVhNDg1OTZhMTFkYWYwNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wQWua6x1MO969yTnI+CdQvEOnbE
MGEjyLxdl+JaqVcfC3eQeZRg6ISY7MBtv0rfueAWFZN48Pt3EerrixDDzvMaXEFb
YaCkUhj4zQRnO70r+QUQcUBN3Lyjd0tOMeVTzpfEbhG/LR8w9Vuepr688ejaP3D+
N0SFjcKYmTafBzJQE42petNXEiKzWOagW2WZjieGfWqrW9idTzz6YCO1H8flmEZK
oDcutslHPdF7JLmyK7A/sBsp6Q208FBnMvOaNUBwANBjU9BoeD558BUAFE+YmKGJ
K2AGqHv8vG3NGL1nl9VHuuOjrfJibYLHbX5Hfh0wKAsvfGxcCeUSJhn76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLk/hdHCt9ETTcOhaSFlqEdrwZTMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUKx+Qz0
HcYqT0L55bPq9yhklD5lsX8cUC7hyfw/uHorvAP/pl4bpoO6m1h+IRDNroGCPJjF
bV6bS5y8lOJZjgtlMFKK8RjrbT2OFiSE1mHLfiU7PR7ipZVHptZCWyPIIqCaLcE+
ZCyaVxpLH+cJanzixYAYQz4Q6A3XQBU/qo2O+ETZikLOZTsdWMak9c+/y4z6DJTp
FmubIwMJGzxsbWMFTAVFGXk7umowJqrdLDkgGGKogHgQ6zk79wTnrwIyVEXwh4JM
YBtClP+nzHZiH1q/gPp31AUDg+l5kqhLIp4N7vbd0pOoSa7BwH7nIDmvHvbtyBKN
14CuLwlYraPLYA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:07:20 2026 by rpki-client