Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: P/tcjkMYAFKWgPJdJtiLW2Tq+kjSJYnJ3rEOCOOu4M0=
Subject key identifier: AE:FE:78:AF:E3:54:5D:56:97:D8:BC:42:3E:4B:46:E7:62:F2:84:12
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 019FA975A3A53EB42711C6C189F5909CCCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 18BD
Signing time: Tue 28 Jul 2026 16:01:26 +0000
Manifest this update: Tue 28 Jul 2026 16:01:26 +0000
Manifest next update: Wed 29 Jul 2026 16:01:26 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: wXak/+YyWWfuKN8H/ooFMbmYxAILfVoxLlusz4P3H7Y=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a3:a5:3e:b4:27:11:c6:c1:89:f5:90:9c:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Jul 28 16:01:26 2026 GMT
Not After : Jul 29 16:01:26 2026 GMT
Subject: CN=aefe78afe3545d5697d8bc423e4b46e762f28412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:32:0a:ea:7f:00:c7:f5:f5:6d:4a:99:26:
ff:17:63:97:b2:14:6f:df:61:43:c4:ff:0a:82:d3:
05:66:af:33:29:05:e7:be:6a:66:a8:0d:33:5b:b4:
68:32:5e:3a:af:c2:51:c1:71:08:fd:5a:ca:1e:1e:
94:c6:4d:5b:b9:18:fe:f5:ee:5e:eb:5d:d8:6d:61:
a9:29:75:c2:0c:c2:86:a4:71:73:73:41:c2:62:b5:
39:a0:19:c9:26:01:03:57:ba:87:b6:60:90:f9:7f:
7b:cd:f0:a9:dd:b7:45:9c:ae:f2:95:34:d0:ba:e3:
c5:b2:ad:5f:03:d2:f1:bc:e9:40:51:2b:4e:78:24:
34:5a:a6:c7:39:2b:61:48:60:9d:1e:9b:d3:94:2a:
7f:e1:e7:20:05:fd:a8:26:f3:94:32:a5:13:e2:44:
a9:e6:e5:0c:29:38:e2:d3:e9:3f:fb:59:f7:ee:4a:
b0:f9:ba:70:6e:5d:c7:14:ff:f4:1b:9a:f1:1d:f5:
c8:4d:d0:87:df:df:0d:ad:44:64:01:dd:91:39:9d:
83:a5:70:a1:ce:01:69:54:91:a8:ad:7b:3e:a5:10:
9f:79:36:8c:1f:a2:e4:00:15:23:5d:b7:ed:12:18:
1e:9e:dd:f6:a2:4a:fa:66:75:1a:61:87:83:18:1f:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FE:78:AF:E3:54:5D:56:97:D8:BC:42:3E:4B:46:E7:62:F2:84:12
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:73:6f:26:37:78:c5:b8:73:42:2e:1c:53:a8:65:09:b0:a6:
6c:be:f8:73:90:ff:67:6b:bd:5a:9d:4d:b6:32:a6:ed:4d:4f:
4f:96:bb:00:3a:9d:9f:6a:85:0a:ec:4b:c0:49:15:bd:61:f8:
aa:e8:f9:8e:fd:8d:46:cf:04:c3:19:b0:af:0f:32:e9:2c:e5:
6f:06:1b:9e:d9:d6:e2:25:37:f3:b5:d0:01:ba:53:51:3e:16:
e9:80:37:74:c1:27:d2:7d:5e:8b:5b:1b:b1:a2:9d:0d:81:c1:
af:b9:02:d5:6b:f1:3e:60:9b:0e:b3:3e:b6:ce:99:28:b4:69:
d8:57:79:d6:86:eb:b7:0a:2f:d8:02:54:12:6a:f0:c5:9b:9f:
06:58:c2:de:35:91:ae:e9:6c:0f:ec:74:40:82:fe:08:54:eb:
2a:81:11:33:52:a9:98:06:d5:a8:c7:90:a2:1b:f6:66:89:4a:
8a:12:6f:58:e0:88:0a:eb:da:59:aa:b0:04:08:e5:48:d8:77:
87:58:d1:75:3e:3b:fb:93:f2:96:ee:e8:43:9f:5c:8b:ca:67:
5f:f3:c2:55:fc:1b:df:6b:3a:43:4f:b1:03:49:75:5a:f5:d8:
e6:cd:92:ed:e6:c9:91:dc:98:3f:b1:0f:ae:51:d8:8f:75:1e:
d3:f9:b9:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdaOlPrQnEcbBifWQnMyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjYwNzI4MTYwMTI2WhcNMjYwNzI5MTYwMTI2WjAzMTEwLwYDVQQD
EyhhZWZlNzhhZmUzNTQ1ZDU2OTdkOGJjNDIzZTRiNDZlNzYyZjI4NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY0yCup/AMf19W1KmSb/F2OXshRv
32FDxP8KgtMFZq8zKQXnvmpmqA0zW7RoMl46r8JRwXEI/VrKHh6Uxk1buRj+9e5e
613YbWGpKXXCDMKGpHFzc0HCYrU5oBnJJgEDV7qHtmCQ+X97zfCp3bdFnK7ylTTQ
uuPFsq1fA9LxvOlAUStOeCQ0WqbHOSthSGCdHpvTlCp/4ecgBf2oJvOUMqUT4kSp
5uUMKTji0+k/+1n37kqw+bpwbl3HFP/0G5rxHfXITdCH398NrURkAd2ROZ2DpXCh
zgFpVJGorXs+pRCfeTaMH6LkABUjXbftEhgent32okr6ZnUaYYeDGB96oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7+eK/jVF1Wl9i8Qj5LRudi8oQSMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3NvJjd4
xbhzQi4cU6hlCbCmbL74c5D/Z2u9Wp1NtjKm7U1PT5a7ADqdn2qFCuxLwEkVvWH4
quj5jv2NRs8Ewxmwrw8y6SzlbwYbntnW4iU387XQAbpTUT4W6YA3dMEn0n1ei1sb
saKdDYHBr7kC1WvxPmCbDrM+ts6ZKLRp2Fd51obrtwov2AJUEmrwxZufBljC3jWR
rulsD+x0QIL+CFTrKoERM1KpmAbVqMeQohv2ZolKihJvWOCICuvaWaqwBAjlSNh3
h1jRdT47+5Pylu7oQ59ci8pnX/PCVfwb32s6Q0+xA0l1WvXY5s2S7ebJkdyYP7EP
rlHYj3Ue0/m5eQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:34 2026 by rpki-client