Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: IGcoavYwhS+EN/ObKZImJBl3E0hhGrlLVEJvbHPgNb8=
Subject key identifier: C9:C8:74:AE:F2:BE:CD:91:58:B7:19:93:8C:21:6F:70:79:B7:A9:AA
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 01A0C77C609DDCD64296509E2A64D326F274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 157A
Signing time: Tue 22 Sep 2026 05:00:12 +0000
Manifest this update: Tue 22 Sep 2026 05:00:12 +0000
Manifest next update: Wed 23 Sep 2026 05:00:12 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: V42X6TRi0UhFf779PZzXbGXDpKGbrYdcQ+u1ytw3VEA=)
2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:60:9d:dc:d6:42:96:50:9e:2a:64:d3:26:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Sep 22 05:00:12 2026 GMT
Not After : Sep 23 05:00:12 2026 GMT
Subject: CN=c9c874aef2becd9158b719938c216f7079b7a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:97:9b:3b:3f:8a:a9:7a:ba:bf:8c:a2:51:
ec:70:5e:90:fe:d0:07:3c:0f:4f:6e:8b:e1:3e:a8:
6a:4b:1a:ae:96:88:fd:5d:7d:7a:53:25:c6:c7:ff:
df:d9:99:f4:4e:eb:8b:e0:7f:f4:a8:6e:c4:0e:41:
08:99:ea:be:67:0c:f4:a2:90:25:13:ac:f1:0b:97:
e8:88:73:b9:ec:85:56:e7:41:d7:52:66:2b:47:3f:
34:20:89:5b:68:f2:52:aa:0d:30:81:4a:9e:ed:ce:
5a:32:03:ce:2f:2f:0f:96:97:b6:08:cd:ba:0f:51:
5a:fc:64:6c:4c:9c:23:d4:23:1f:a7:8e:0e:cd:75:
42:ba:eb:c9:8f:71:24:8c:93:62:ee:ad:f1:17:a9:
8d:d6:cf:47:42:38:b1:bf:d7:65:63:b3:73:08:b7:
4a:c1:2e:de:4e:7b:e9:ac:9c:65:62:75:51:90:92:
7a:49:36:77:23:13:ae:37:fa:c5:7f:fe:35:23:db:
33:85:0d:ed:77:e0:21:72:c1:4d:73:6f:85:dc:05:
85:8e:16:92:8c:90:85:04:7d:3a:4c:cf:a9:29:5b:
7e:eb:2f:93:35:dc:50:e2:2a:dc:b1:b7:03:71:9e:
c5:6f:26:ce:8f:89:91:0a:24:9c:a9:b3:d4:fb:1e:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:74:AE:F2:BE:CD:91:58:B7:19:93:8C:21:6F:70:79:B7:A9:AA
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:16:2a:63:5c:b9:2c:b5:5d:4e:92:a8:d4:13:e1:b8:9d:
4b:81:b7:b3:57:bd:67:4d:f4:77:2d:31:e4:86:b7:21:5f:b9:
10:84:db:89:35:9b:fe:3c:3d:4f:c7:0c:ab:54:3f:3c:db:36:
80:e2:4a:b2:34:81:da:21:b4:db:44:78:0d:48:f4:21:54:c8:
59:13:ad:18:83:41:92:1c:da:5e:ad:d5:a2:2b:b3:e9:54:54:
56:21:2c:86:09:60:64:14:da:61:60:49:39:d3:26:bb:2c:4a:
40:b0:e5:46:9b:c6:c1:24:d9:06:20:9a:f8:f2:4c:cc:04:98:
11:63:35:1e:0e:05:d9:53:b7:27:b4:79:1b:9b:ef:ff:12:eb:
d2:8c:bf:9f:a7:8b:2c:0d:fb:22:e2:b9:34:8a:9e:70:d0:93:
14:48:a0:1f:e7:55:a0:37:db:f4:a1:86:51:13:8b:3f:95:ca:
e6:2d:62:b0:d0:f6:02:76:f9:31:74:c9:2e:f1:4a:cc:eb:35:
99:57:2e:5d:1c:69:47:56:fb:ce:61:7b:9f:c4:5c:5e:08:61:
c9:ce:3d:6f:66:03:57:fa:62:49:6b:40:76:a5:1f:dc:b9:82:
c4:cc:d8:43:83:21:9e:73:4f:82:6d:39:73:76:40:ec:13:e3:
77:5a:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfGCd3NZCllCeKmTTJvJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2
NzVlZDUwHhcNMjYwOTIyMDUwMDEyWhcNMjYwOTIzMDUwMDEyWjAzMTEwLwYDVQQD
EyhjOWM4NzRhZWYyYmVjZDkxNThiNzE5OTM4YzIxNmY3MDc5YjdhOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFqXmzs/iql6ur+MolHscF6Q/tAH
PA9PbovhPqhqSxquloj9XX16UyXGx//f2Zn0TuuL4H/0qG7EDkEImeq+Zwz0opAl
E6zxC5foiHO57IVW50HXUmYrRz80IIlbaPJSqg0wgUqe7c5aMgPOLy8Plpe2CM26
D1Fa/GRsTJwj1CMfp44OzXVCuuvJj3EkjJNi7q3xF6mN1s9HQjixv9dlY7NzCLdK
wS7eTnvprJxlYnVRkJJ6STZ3IxOuN/rFf/41I9szhQ3td+AhcsFNc2+F3AWFjhaS
jJCFBH06TM+pKVt+6y+TNdxQ4ircsbcDcZ7FbybOj4mRCiScqbPU+x7GzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnIdK7yvs2RWLcZk4whb3B5t6mqMB8GA1UdIwQY
MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt
NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1
LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjIWKmNc
uSy1XU6SqNQT4bidS4G3s1e9Z030dy0x5Ia3IV+5EITbiTWb/jw9T8cMq1Q/PNs2
gOJKsjSB2iG020R4DUj0IVTIWROtGINBkhzaXq3Voiuz6VRUViEshglgZBTaYWBJ
OdMmuyxKQLDlRpvGwSTZBiCa+PJMzASYEWM1Hg4F2VO3J7R5G5vv/xLr0oy/n6eL
LA37IuK5NIqecNCTFEigH+dVoDfb9KGGUROLP5XK5i1isND2Anb5MXTJLvFKzOs1
mVcuXRxpR1b7zmF7n8RcXghhyc49b2YDV/piSWtAdqUf3LmCxMzYQ4MhnnNPgm05
c3ZA7BPjd1rC4g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:16:19 2026 by rpki-client