Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: jd3T037/bTz7+AlhHVlwhdAtuyZ1bOkViwpBB9+4ny0=
Subject key identifier: 97:5B:1D:1A:80:B8:DD:A0:D4:B6:BC:00:AF:EB:CD:E0:C3:4D:C7:1C
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 01A0C40E85F5619E711BD30E5ECE4156F5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 12E3
Signing time: Mon 21 Sep 2026 13:01:21 +0000
Manifest this update: Mon 21 Sep 2026 13:01:21 +0000
Manifest next update: Tue 22 Sep 2026 13:01:21 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: zPY14/JyyUpNlzeQWfqRLzf+89n0N8seW1V9E57thWI=)
2: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (hash: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:85:f5:61:9e:71:1b:d3:0e:5e:ce:41:56:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Sep 21 13:01:21 2026 GMT
Not After : Sep 22 13:01:21 2026 GMT
Subject: CN=975b1d1a80b8dda0d4b6bc00afebcde0c34dc71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:a7:43:1d:f4:4a:4b:07:e9:b1:e8:eb:d1:
d3:97:10:21:04:93:cb:5b:7e:3a:79:c3:2b:5e:dd:
ef:9e:71:93:16:0c:ba:e8:fe:48:b7:6d:31:76:c3:
29:dd:e4:a0:fe:d2:ba:fd:1c:7f:f0:dd:6a:92:73:
d3:0b:84:e8:c5:d5:d0:41:a5:e8:6a:16:25:27:22:
9b:1b:c0:82:7f:5d:25:2c:cd:49:5b:a7:e0:07:07:
28:d4:41:11:a7:62:5d:36:2a:31:ea:f8:18:47:53:
53:e3:10:70:d9:63:5b:ae:58:97:9a:9d:65:6a:25:
17:f6:d8:2c:b3:75:fa:84:d6:7f:43:57:58:e2:82:
ec:a3:1f:07:8c:a2:70:30:d8:53:f4:03:33:94:66:
7e:3e:47:b3:09:73:50:1b:bb:ff:06:c3:b0:fb:8d:
07:26:5c:de:f5:c2:4b:71:7f:9e:63:10:92:46:76:
fe:04:cf:1f:21:2d:92:ed:04:f1:5f:cd:0f:16:77:
e3:15:8f:25:ef:e1:e4:19:7f:7d:cd:92:eb:b1:05:
2a:29:46:5c:9d:a5:cf:28:a0:61:b2:71:ae:1d:56:
73:d3:0f:e4:90:16:10:3c:30:a0:cf:35:9a:21:b8:
92:52:2f:11:08:31:24:e3:1a:38:de:45:1d:eb:38:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:1D:1A:80:B8:DD:A0:D4:B6:BC:00:AF:EB:CD:E0:C3:4D:C7:1C
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b5:41:3b:cc:9e:19:75:32:ac:e1:8a:a9:d9:2f:73:90:1c:
21:00:64:78:dc:30:e1:f2:a3:f9:cb:14:b2:f3:6a:ba:ed:8c:
35:e6:1c:2e:47:80:c0:a8:a4:d4:42:d7:8a:48:ff:bc:d3:27:
fe:14:ec:9a:a4:90:ae:bd:f2:4c:8d:e7:4e:57:a4:41:0c:21:
af:f9:85:5a:a2:48:90:f2:b1:9b:c3:58:bf:be:3c:a5:3c:34:
96:59:b9:4c:a0:08:00:35:37:a7:de:e9:a7:a3:31:dd:98:e1:
79:75:c3:fb:e6:6e:ef:69:18:18:d2:a8:9c:7d:cb:ba:a5:b5:
ba:ef:8b:27:c2:a3:0f:9b:c9:d5:7f:9d:d9:13:cb:34:77:3d:
d6:60:f8:42:0f:12:9b:57:ca:d1:8b:d8:52:69:5f:19:5c:98:
5b:98:56:58:8c:a0:17:21:80:95:95:50:81:97:a3:f3:9d:4c:
31:91:75:fd:5b:01:53:0c:5c:ac:25:09:e3:1e:4d:30:55:52:
f6:b5:63:32:71:d1:f5:87:ef:a3:f8:fc:25:25:49:e3:01:73:
c6:9c:8f:89:2a:70:af:bf:47:24:83:19:72:4d:2b:8e:b5:8b:
0a:02:7d:0d:be:ea:60:e8:4b:11:50:da:89:7f:c1:6d:76:76:
c1:cc:a6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDoX1YZ5xG9MOXs5BVvX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjYwOTIxMTMwMTIxWhcNMjYwOTIyMTMwMTIxWjAzMTEwLwYDVQQD
Eyg5NzViMWQxYTgwYjhkZGEwZDRiNmJjMDBhZmViY2RlMGMzNGRjNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwWnQx30SksH6bHo69HTlxAhBJPL
W346ecMrXt3vnnGTFgy66P5It20xdsMp3eSg/tK6/Rx/8N1qknPTC4ToxdXQQaXo
ahYlJyKbG8CCf10lLM1JW6fgBwco1EERp2JdNiox6vgYR1NT4xBw2WNbrliXmp1l
aiUX9tgss3X6hNZ/Q1dY4oLsox8HjKJwMNhT9AMzlGZ+PkezCXNQG7v/BsOw+40H
Jlze9cJLcX+eYxCSRnb+BM8fIS2S7QTxX80PFnfjFY8l7+HkGX99zZLrsQUqKUZc
naXPKKBhsnGuHVZz0w/kkBYQPDCgzzWaIbiSUi8RCDEk4xo43kUd6zgBCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdbHRqAuN2g1La8AK/rzeDDTcccMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrVBO8ye
GXUyrOGKqdkvc5AcIQBkeNww4fKj+csUsvNquu2MNeYcLkeAwKik1ELXikj/vNMn
/hTsmqSQrr3yTI3nTlekQQwhr/mFWqJIkPKxm8NYv748pTw0llm5TKAIADU3p97p
p6Mx3ZjheXXD++Zu72kYGNKonH3LuqW1uu+LJ8KjD5vJ1X+d2RPLNHc91mD4Qg8S
m1fK0YvYUmlfGVyYW5hWWIygFyGAlZVQgZej851MMZF1/VsBUwxcrCUJ4x5NMFVS
9rVjMnHR9Yfvo/j8JSVJ4wFzxpyPiSpwr79HJIMZck0rjrWLCgJ9Db7qYOhLEVDa
iX/BbXZ2wcymmQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:31:08 2026 by rpki-client