Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: ZOWSTyqDUJqfn/pMhsjEOx2JGzwDlKsJLjXQBBxnLTM=
Subject key identifier: 82:C4:40:E6:56:68:36:67:0C:0A:E2:11:BA:3E:38:D5:D4:7A:07:AE
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01A0C368E577C97115A22B7DA0A916A59700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 194F
Signing time: Mon 21 Sep 2026 10:00:26 +0000
Manifest this update: Mon 21 Sep 2026 10:00:26 +0000
Manifest next update: Tue 22 Sep 2026 10:00:26 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: pQ7Lch5J7qx6WgGA8/Crb70xilDc5Y8P4ky0mAqB2kQ=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:e5:77:c9:71:15:a2:2b:7d:a0:a9:16:a5:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Sep 21 10:00:26 2026 GMT
Not After : Sep 22 10:00:26 2026 GMT
Subject: CN=82c440e6566836670c0ae211ba3e38d5d47a07ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:fc:06:48:d3:3c:21:be:f7:90:bc:a7:ec:
3f:9c:54:a8:d0:a2:3a:e0:52:ae:c5:93:27:19:1f:
63:64:55:f7:03:d4:a3:f1:af:3d:c1:ae:7d:28:12:
5c:1c:5a:5e:b2:05:58:18:17:4f:49:9b:49:0a:63:
1a:7f:5e:30:b8:bc:e4:44:aa:cf:8e:71:ce:09:58:
44:61:43:cd:62:3e:c7:9a:68:4f:64:89:20:db:36:
34:f8:8a:e8:9b:e4:73:fe:2c:19:18:b5:cb:78:5c:
82:64:07:a3:20:b6:85:39:51:7e:14:bb:ac:24:c1:
a5:94:7b:2e:9d:fa:d4:ef:34:c9:52:33:6f:49:37:
31:0e:db:63:4d:fc:10:0c:02:18:be:af:c8:d6:86:
de:62:a4:39:6b:dc:06:a7:c0:e8:e9:90:af:ff:f8:
1a:a2:f6:c4:04:e4:8a:59:29:98:9b:9b:0e:77:12:
8a:ab:c2:4b:2e:69:fc:57:e4:61:72:9d:12:49:a6:
46:ff:87:01:30:10:c5:80:b2:a5:22:4a:ab:16:20:
67:dd:a0:96:d1:35:93:a7:67:40:91:86:2a:d4:9e:
79:9e:da:57:f8:91:6c:2f:70:37:db:45:c3:3a:63:
f2:be:3e:a0:ba:35:bf:4f:9c:e5:a0:4e:60:d0:cf:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:40:E6:56:68:36:67:0C:0A:E2:11:BA:3E:38:D5:D4:7A:07:AE
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:2b:1e:39:98:1e:99:e5:4b:ff:ea:fa:90:cf:93:8a:24:
1b:09:c1:86:16:66:bf:9c:ef:04:77:e4:8d:5a:c7:d3:85:18:
92:c6:bd:1f:de:2b:60:0c:63:4c:18:a3:56:e9:10:6c:84:10:
6e:98:98:c1:8f:68:5b:27:ba:71:00:5f:63:b0:3a:3c:49:82:
9e:38:b4:e6:6c:4a:67:85:ac:92:d1:ab:4f:41:6e:25:8d:25:
ff:9a:df:2f:4c:cb:01:3b:62:90:c1:b4:05:a8:4e:30:00:90:
2b:ec:be:aa:19:0f:03:10:fa:83:43:08:c0:b6:4a:78:3b:71:
7d:05:ac:97:57:ab:cf:a8:3e:53:37:2d:d7:be:0f:ea:ab:e3:
f3:c3:4a:bc:55:37:4f:62:45:b9:36:64:09:cc:9c:33:e7:3c:
39:f5:1e:28:0a:6c:1e:9f:d7:1e:8f:eb:78:76:dd:41:06:63:
19:33:30:08:a2:b3:b5:b9:5e:7a:91:e3:57:b4:a4:3d:4d:00:
06:e2:a5:24:bb:32:14:b7:35:1f:9d:39:73:3a:ef:a0:69:00:
7d:24:3d:08:c1:98:d1:92:4b:e6:bd:d5:51:cd:6f:f9:33:c9:
30:6c:06:44:7c:63:1f:74:dc:2b:73:1e:06:6b:94:e7:66:98:
c8:eb:52:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaOV3yXEVoit9oKkWpZcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjYwOTIxMTAwMDI2WhcNMjYwOTIyMTAwMDI2WjAzMTEwLwYDVQQD
Eyg4MmM0NDBlNjU2NjgzNjY3MGMwYWUyMTFiYTNlMzhkNWQ0N2EwN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0r8BkjTPCG+95C8p+w/nFSo0KI6
4FKuxZMnGR9jZFX3A9Sj8a89wa59KBJcHFpesgVYGBdPSZtJCmMaf14wuLzkRKrP
jnHOCVhEYUPNYj7HmmhPZIkg2zY0+Irom+Rz/iwZGLXLeFyCZAejILaFOVF+FLus
JMGllHsunfrU7zTJUjNvSTcxDttjTfwQDAIYvq/I1obeYqQ5a9wGp8Do6ZCv//ga
ovbEBOSKWSmYm5sOdxKKq8JLLmn8V+Rhcp0SSaZG/4cBMBDFgLKlIkqrFiBn3aCW
0TWTp2dAkYYq1J55ntpX+JFsL3A320XDOmPyvj6gujW/T5zloE5g0M+R6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILEQOZWaDZnDAriEbo+ONXUegeuMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6UrHjmY
HpnlS//q+pDPk4okGwnBhhZmv5zvBHfkjVrH04UYksa9H94rYAxjTBijVukQbIQQ
bpiYwY9oWye6cQBfY7A6PEmCnji05mxKZ4WsktGrT0FuJY0l/5rfL0zLATtikMG0
BahOMACQK+y+qhkPAxD6g0MIwLZKeDtxfQWsl1erz6g+Uzct174P6qvj88NKvFU3
T2JFuTZkCcycM+c8OfUeKApsHp/XHo/reHbdQQZjGTMwCKKztbleepHjV7SkPU0A
BuKlJLsyFLc1H505czrvoGkAfSQ9CMGY0ZJL5r3VUc1v+TPJMGwGRHxjH3TcK3Me
BmuU52aYyOtSWA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:45:26 2026 by rpki-client