Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: JGxt0knZgPEJF6MuUWvAZtxg9kGoN268yPzQywOrh+o=
Subject key identifier: A4:02:F6:1E:00:6B:BE:B3:15:CB:5B:AC:AB:02:88:CA:80:42:51:92
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019FA899011B79F242BF1687BB087BAD6FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0FB1
Signing time: Tue 28 Jul 2026 12:00:27 +0000
Manifest this update: Tue 28 Jul 2026 12:00:27 +0000
Manifest next update: Wed 29 Jul 2026 12:00:27 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 82qHD8kSoysj7RYfV/vssLBXf4MgHumnSCBU/J18KDQ=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:01:1b:79:f2:42:bf:16:87:bb:08:7b:ad:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jul 28 12:00:27 2026 GMT
Not After : Jul 29 12:00:27 2026 GMT
Subject: CN=a402f61e006bbeb315cb5bacab0288ca80425192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:99:90:54:fd:1f:d9:9d:fe:61:0a:f5:7f:
ac:af:79:c1:d9:ef:e0:1c:f1:24:9a:40:46:79:fd:
45:43:f6:0c:73:a2:75:8f:10:27:52:14:76:0d:ea:
68:7d:03:c3:8b:87:cf:27:0d:ae:bb:30:92:29:85:
b7:ad:82:bf:26:56:74:e2:81:dc:0b:f0:6a:5e:2e:
52:de:57:e0:1b:84:1c:af:14:6f:a1:85:44:3b:c6:
83:b2:9a:86:3f:e9:0d:13:cb:76:ca:2c:18:91:3f:
95:e9:75:46:cf:91:7c:7c:d1:1f:15:02:99:cc:2a:
b1:b9:41:0d:3e:25:b9:24:16:7d:ac:ce:26:9b:66:
c8:37:05:34:09:71:4d:d4:a8:9a:76:8b:22:07:ff:
b1:92:19:79:d9:d2:4a:79:7a:ee:d1:d4:09:b4:e7:
2e:22:6c:56:26:17:01:61:f3:61:b2:05:62:c9:a6:
9a:00:ff:59:e1:53:62:4b:ed:07:8c:4a:c0:74:95:
94:b0:08:ce:37:86:07:9a:cf:b2:64:14:ca:ac:b9:
5f:07:44:be:e9:ff:93:78:c0:d5:e4:7f:e8:8c:44:
07:ed:98:42:bb:e1:6b:c5:49:b9:ee:aa:3d:30:50:
c9:b7:94:ae:cf:d8:90:13:d5:59:b0:7c:c1:a9:b3:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:F6:1E:00:6B:BE:B3:15:CB:5B:AC:AB:02:88:CA:80:42:51:92
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:6d:69:53:5e:d1:b7:a4:96:73:05:b1:82:59:1b:24:a0:
b7:72:65:bd:9e:63:68:ef:70:7e:de:4c:8e:9c:92:62:74:8e:
fb:5e:08:60:2f:4e:54:c5:17:32:26:01:eb:e6:d8:7b:30:78:
22:7b:ad:60:82:3f:83:21:71:b6:7d:d8:74:be:df:23:e3:15:
02:9c:23:d5:2f:7a:5b:0e:79:03:d8:1e:ec:f8:7c:d8:7b:d5:
24:59:83:ea:6a:2e:21:04:31:ed:a3:3c:0e:8a:a4:d9:c9:16:
f3:dd:f5:12:aa:98:24:10:53:cb:90:83:ec:db:50:cc:4f:85:
c6:f5:a3:29:48:99:40:0c:76:30:6b:12:52:91:5d:16:d5:80:
72:09:e6:29:5a:ee:df:a8:06:76:08:21:2d:51:4d:8d:40:61:
b8:a2:f5:11:cf:f7:2d:4e:7f:89:35:5d:5f:68:42:28:73:b6:
ca:98:b4:a2:0c:92:ee:fd:1c:f9:9f:01:18:13:ea:73:0e:92:
5e:cf:c3:c8:1e:8f:fb:04:a7:9b:c9:08:92:8a:4e:82:b4:79:
1b:6c:83:5a:6b:62:54:fd:0f:6a:c6:a9:db:46:46:a1:a5:1d:
9b:9e:a1:91:18:b8:5c:5b:7c:4e:b4:dd:da:3c:53:67:a1:9d:
06:06:13:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omQEbefJCvxaHuwh7rW+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5
ZjAxNDAwHhcNMjYwNzI4MTIwMDI3WhcNMjYwNzI5MTIwMDI3WjAzMTEwLwYDVQQD
EyhhNDAyZjYxZTAwNmJiZWIzMTVjYjViYWNhYjAyODhjYTgwNDI1MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8aZkFT9H9md/mEK9X+sr3nB2e/g
HPEkmkBGef1FQ/YMc6J1jxAnUhR2DepofQPDi4fPJw2uuzCSKYW3rYK/JlZ04oHc
C/BqXi5S3lfgG4QcrxRvoYVEO8aDspqGP+kNE8t2yiwYkT+V6XVGz5F8fNEfFQKZ
zCqxuUENPiW5JBZ9rM4mm2bINwU0CXFN1KiadosiB/+xkhl52dJKeXru0dQJtOcu
ImxWJhcBYfNhsgViyaaaAP9Z4VNiS+0HjErAdJWUsAjON4YHms+yZBTKrLlfB0S+
6f+TeMDV5H/ojEQH7ZhCu+FrxUm57qo9MFDJt5Suz9iQE9VZsHzBqbOKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQC9h4Aa76zFctbrKsCiMqAQlGSMB8GA1UdIwQY
MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt
YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2
LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXptaVNe
0beklnMFsYJZGySgt3JlvZ5jaO9wft5MjpySYnSO+14IYC9OVMUXMiYB6+bYezB4
InutYII/gyFxtn3YdL7fI+MVApwj1S96Ww55A9ge7Ph82HvVJFmD6mouIQQx7aM8
Doqk2ckW8931EqqYJBBTy5CD7NtQzE+FxvWjKUiZQAx2MGsSUpFdFtWAcgnmKVru
36gGdgghLVFNjUBhuKL1Ec/3LU5/iTVdX2hCKHO2ypi0ogyS7v0c+Z8BGBPqcw6S
Xs/DyB6P+wSnm8kIkopOgrR5G2yDWmtiVP0Pasap20ZGoaUdm56hkRi4XFt8TrTd
2jxTZ6GdBgYT8Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:01 2026 by rpki-client