Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: bPdC1fVaVqGuG1oBdNuKLEMrGB5vFusfE2T+pUCO2BU=
Subject key identifier: F5:85:4C:D8:F7:09:67:01:F0:C2:72:D6:3B:40:10:B1:98:0C:8C:CA
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01A0C1E820D45E89F271D15A093F175CFCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 03:00:10 +0000
Manifest this update: Mon 21 Sep 2026 03:00:10 +0000
Manifest next update: Tue 22 Sep 2026 03:00:10 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: pfpVf+ERwrgPqRsu6hl7S5Q6O0NxTYZUwisECEIWShU=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:20:d4:5e:89:f2:71:d1:5a:09:3f:17:5c:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Sep 21 03:00:10 2026 GMT
Not After : Sep 22 03:00:10 2026 GMT
Subject: CN=f5854cd8f7096701f0c272d63b4010b1980c8cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c1:f1:88:0d:e9:7b:d5:8a:3f:ce:b8:97:e2:
25:fe:50:b6:ba:49:90:2d:6f:17:1b:bf:83:84:85:
02:1e:ef:18:b0:8c:10:03:44:97:8f:f4:5a:6e:57:
2e:d9:91:c0:b3:80:3a:51:9f:b4:be:a6:2e:c3:db:
d7:e9:07:e7:51:d3:db:03:a0:4c:ab:10:43:c8:b0:
93:4c:8b:c4:e0:2c:0c:14:4a:76:98:96:bb:74:7b:
1f:59:71:44:37:d4:96:35:b4:c6:d0:10:97:4c:67:
a2:3d:78:45:93:28:a4:5a:74:28:26:a3:c6:fc:9c:
00:77:e1:61:5d:cd:a3:09:f3:4c:5d:c3:ec:30:44:
00:92:22:aa:05:82:91:0c:f1:d8:cd:12:f0:ac:4f:
69:39:f8:e2:50:67:cc:e5:6f:db:86:b2:a5:c1:97:
3e:7b:bc:70:b3:d1:46:d3:f5:9e:9d:9d:4a:74:60:
de:59:89:29:2a:67:76:3a:a2:84:b4:7e:1c:82:19:
3f:24:e4:20:e4:10:fd:84:30:a9:6e:cc:27:59:5e:
3a:4a:15:b9:84:dd:f1:03:e1:d9:06:c1:f6:70:94:
8b:fc:16:38:a5:cf:8f:cb:b2:14:f4:02:cf:55:39:
f3:a7:4a:7f:e6:9c:3a:d0:0c:d0:23:f6:e0:3e:cb:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:4C:D8:F7:09:67:01:F0:C2:72:D6:3B:40:10:B1:98:0C:8C:CA
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:96:4f:11:06:33:d2:db:9e:5f:e5:ed:4c:77:19:cf:e3:
1d:5c:6a:a0:9a:08:94:db:45:1b:64:f9:de:9f:9c:a1:a2:29:
f9:1f:b9:e0:fa:a1:9b:06:6d:73:ab:2d:d5:0a:ca:c7:08:6a:
fd:06:d6:83:80:fe:d0:29:df:6e:b3:8f:54:31:f8:4e:6e:56:
cf:5b:d4:62:76:01:0b:b7:4d:11:7c:ad:3d:4a:b7:3e:28:09:
e5:bd:57:64:60:49:5c:d9:33:61:8a:6b:fe:2f:03:cf:35:fa:
96:22:4f:6f:b5:ba:eb:ac:d1:4b:f6:84:3d:5b:b5:b1:1c:e4:
60:ed:c0:e3:15:92:6b:97:7e:cc:d7:8a:4a:1e:a0:96:4b:24:
52:b7:25:8e:cb:31:55:49:f2:20:34:ca:1d:cc:ee:cf:f8:e5:
bd:2c:5f:5c:bd:f9:5b:09:89:f0:9a:6d:04:99:70:42:f0:77:
56:de:ed:c4:8d:db:04:3a:2a:77:84:cf:4d:d5:96:23:f8:67:
66:74:aa:f8:5c:f7:e5:4f:a6:e4:90:42:29:47:9f:e3:0b:4c:
23:a1:5a:11:37:cc:51:93:b3:a1:f4:61:c8:41:6d:34:9e:04:
cd:ed:3d:cf:80:d8:5c:b3:94:ca:01:50:1d:91:08:6c:dc:2f:
d3:d5:40:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6CDUXonycdFaCT8XXPzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjYwOTIxMDMwMDEwWhcNMjYwOTIyMDMwMDEwWjAzMTEwLwYDVQQD
EyhmNTg1NGNkOGY3MDk2NzAxZjBjMjcyZDYzYjQwMTBiMTk4MGM4Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9sHxiA3pe9WKP864l+Il/lC2ukmQ
LW8XG7+DhIUCHu8YsIwQA0SXj/Rablcu2ZHAs4A6UZ+0vqYuw9vX6QfnUdPbA6BM
qxBDyLCTTIvE4CwMFEp2mJa7dHsfWXFEN9SWNbTG0BCXTGeiPXhFkyikWnQoJqPG
/JwAd+FhXc2jCfNMXcPsMEQAkiKqBYKRDPHYzRLwrE9pOfjiUGfM5W/bhrKlwZc+
e7xws9FG0/WenZ1KdGDeWYkpKmd2OqKEtH4cghk/JOQg5BD9hDCpbswnWV46ShW5
hN3xA+HZBsH2cJSL/BY4pc+Py7IU9ALPVTnzp0p/5pw60AzQI/bgPsvCwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWFTNj3CWcB8MJy1jtAELGYDIzKMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8+WTxEG
M9Lbnl/l7Ux3Gc/jHVxqoJoIlNtFG2T53p+coaIp+R+54PqhmwZtc6st1QrKxwhq
/QbWg4D+0CnfbrOPVDH4Tm5Wz1vUYnYBC7dNEXytPUq3PigJ5b1XZGBJXNkzYYpr
/i8DzzX6liJPb7W666zRS/aEPVu1sRzkYO3A4xWSa5d+zNeKSh6glkskUrcljssx
VUnyIDTKHczuz/jlvSxfXL35WwmJ8JptBJlwQvB3Vt7txI3bBDoqd4TPTdWWI/hn
ZnSq+Fz35U+m5JBCKUef4wtMI6FaETfMUZOzofRhyEFtNJ4Eze09z4DYXLOUygFQ
HZEIbNwv09VAkw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:01 2026 by rpki-client