Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
File: 2kwgul9abQ5TyOwNWhveygb6cKM.mft (raw, json)
Hash identifier: 36IkCWASpY6NkbwFkhTRcTnlCMYq001h8jPg3Q2QLqw=
Subject key identifier: D4:B0:50:EF:7C:44:C9:F3:FA:86:1E:12:1E:EF:03:82:BF:96:7A:C2
Authority key identifier: DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
Certificate issuer: /CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Certificate serial: 01A1133C317C76985C2F9292A14ECEF91EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
Manifest number: CC
Signing time: Tue 06 Oct 2026 22:01:14 +0000
Manifest this update: Tue 06 Oct 2026 22:01:14 +0000
Manifest next update: Wed 07 Oct 2026 22:01:14 +0000
Files and hashes: 1: 2kwgul9abQ5TyOwNWhveygb6cKM.crl (hash: q/0CWoaSq8+KAsIINmwmgv+V61DelGNyUkNVmWqSGDg=)
2: UzXtxDxgkbhFDH_EVPuNo0M10SA.roa (hash: FpOUcZwTu/CVw3/85q0MMvR2nT0K2SD9ZyPfseDyCxs=)
3: WT3vaOwOOseS7yID9cVyq57zIoI.asa (hash: vqCOF7NopSR2Vc1g5HAdbSGBQcXK00JYgksWrl2ekCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:31:7c:76:98:5c:2f:92:92:a1:4e:ce:f9:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Validity
Not Before: Oct 6 22:01:14 2026 GMT
Not After : Oct 7 22:01:14 2026 GMT
Subject: CN=d4b050ef7c44c9f3fa861e121eef0382bf967ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:f3:0a:ee:ea:44:c8:e8:67:bf:73:20:1c:
55:a6:69:6f:e9:22:7d:b9:40:48:1e:ff:b5:73:ff:
7d:b4:ba:54:2c:7a:78:58:92:a3:7c:3e:9b:41:77:
14:c2:ad:b7:52:03:6e:9f:22:c0:a4:06:5e:f2:20:
98:5f:d1:73:e2:fc:b7:61:e0:fe:8d:00:a2:12:18:
4f:b1:26:ab:68:ca:fa:24:35:70:9e:4f:c3:88:86:
d9:18:81:83:fb:70:c2:b6:cd:65:b4:e4:7b:ce:d8:
23:e7:f4:aa:15:ee:06:85:4e:29:3c:96:94:4f:52:
a9:2a:94:d1:7c:76:fe:2b:f5:25:8c:39:32:4d:27:
43:30:87:76:77:51:ab:1f:63:05:4b:f3:37:c9:5a:
43:88:62:16:fc:00:e1:57:cf:9b:34:c5:66:4d:0d:
a4:03:ae:32:c3:c8:63:c8:5c:10:87:91:4a:60:de:
d5:f7:de:2c:56:8c:3a:a1:67:9b:38:9c:84:6b:f1:
d0:38:fb:95:d4:4e:c9:72:e5:6d:98:32:c8:c3:33:
e1:c1:cd:ba:1f:cc:b4:a7:9e:86:c7:29:70:8b:92:
bd:d1:ea:30:0f:1f:30:57:79:8f:1f:ae:df:86:76:
f5:39:1f:9c:aa:0f:2f:e3:2f:82:d9:d5:10:b8:8c:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:50:EF:7C:44:C9:F3:FA:86:1E:12:1E:EF:03:82:BF:96:7A:C2
X509v3 Authority Key Identifier:
keyid:DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4e:21:24:b4:82:b7:4d:59:bd:da:43:0f:05:71:9d:86:e3:
fe:98:a8:47:ea:7c:4f:66:ea:40:4e:30:43:0a:ba:46:c6:36:
be:45:46:96:93:08:be:a9:f9:7b:a4:91:b1:69:41:a3:46:ec:
36:2c:0d:90:01:d0:33:4f:92:36:1c:fa:99:ff:76:77:47:df:
ed:87:35:b0:b1:1a:72:31:5c:6e:a5:67:bb:a6:0f:fd:bd:f8:
3a:83:dc:8f:14:fb:6b:ef:88:d2:30:6d:42:c1:71:ef:93:fa:
73:41:33:68:fc:0d:ab:64:da:37:96:46:b3:3d:ff:f0:c0:9c:
31:b3:92:90:7e:ed:4b:f3:16:e6:1a:db:04:7a:c5:3c:05:ec:
b6:e1:8e:0e:94:cf:97:25:2a:86:86:db:cd:0c:f9:49:f0:3d:
0d:36:a0:d0:b9:d3:4e:1b:9a:66:9f:48:bf:cc:24:c8:37:bd:
cc:a8:46:96:81:2d:d3:ad:18:32:35:d4:a9:db:64:59:67:97:
bb:58:c1:be:70:3f:34:33:14:a4:e5:3b:71:c1:c3:f5:20:ea:
a1:63:35:ba:c8:db:21:71:59:26:a4:ba:ee:0f:89:4e:d8:d0:
1d:53:66:95:fc:e1:23:5e:60:76:d0:ec:b4:7e:92:33:3d:f9:
6e:02:16:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETPDF8dphcL5KSoU7O+R7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGMyMGJhNWY1YTZkMGU1M2M4ZWMwZDVhMWJkZWNhMDZm
YTcwYTMwHhcNMjYxMDA2MjIwMTE0WhcNMjYxMDA3MjIwMTE0WjAzMTEwLwYDVQQD
EyhkNGIwNTBlZjdjNDRjOWYzZmE4NjFlMTIxZWVmMDM4MmJmOTY3YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxinzCu7qRMjoZ79zIBxVpmlv6SJ9
uUBIHv+1c/99tLpULHp4WJKjfD6bQXcUwq23UgNunyLApAZe8iCYX9Fz4vy3YeD+
jQCiEhhPsSaraMr6JDVwnk/DiIbZGIGD+3DCts1ltOR7ztgj5/SqFe4GhU4pPJaU
T1KpKpTRfHb+K/UljDkyTSdDMId2d1GrH2MFS/M3yVpDiGIW/ADhV8+bNMVmTQ2k
A64yw8hjyFwQh5FKYN7V994sVow6oWebOJyEa/HQOPuV1E7JcuVtmDLIwzPhwc26
H8y0p56Gxylwi5K90eowDx8wV3mPH67fhnb1OR+cqg8v4y+C2dUQuIwbTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSwUO98RMnz+oYeEh7vA4K/lnrCMB8GA1UdIwQY
MBaAFNpMILpfWm0OU8jsDVob3soG+nCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAt
NTViZTcwOTZkYmYwLzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAtNTViZTcwOTZkYmYw
LzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtE4hJLSC
t01ZvdpDDwVxnYbj/pioR+p8T2bqQE4wQwq6RsY2vkVGlpMIvqn5e6SRsWlBo0bs
NiwNkAHQM0+SNhz6mf92d0ff7Yc1sLEacjFcbqVnu6YP/b34OoPcjxT7a++I0jBt
QsFx75P6c0EzaPwNq2TaN5ZGsz3/8MCcMbOSkH7tS/MW5hrbBHrFPAXstuGODpTP
lyUqhobbzQz5SfA9DTag0LnTThuaZp9Iv8wkyDe9zKhGloEt060YMjXUqdtkWWeX
u1jBvnA/NDMUpOU7ccHD9SDqoWM1usjbIXFZJqS67g+JTtjQHVNmlfzhI15gdtDs
tH6SMz35bgIWqg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:12:27 2026 by rpki-client