Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: bMdHKBXbGXlN41+AXQ2nlKVUqNECkaZ5pV/5/mHqNq8=
Subject key identifier: 62:3F:FC:83:AA:03:AE:91:80:18:B7:92:1A:47:AA:D3:77:88:FD:93
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01A0C669EC42941F0977C6945841250527F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 00:00:25 +0000
Manifest this update: Tue 22 Sep 2026 00:00:25 +0000
Manifest next update: Wed 23 Sep 2026 00:00:25 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: 9qwcmjksBehNexNQ95Uw/LR+UkVGKWAXSvyzJxbkCYk=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:ec:42:94:1f:09:77:c6:94:58:41:25:05:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Sep 22 00:00:25 2026 GMT
Not After : Sep 23 00:00:25 2026 GMT
Subject: CN=623ffc83aa03ae918018b7921a47aad37788fd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:fb:54:69:bc:b5:86:27:22:d7:4c:c7:60:
f7:e1:ea:0b:57:1f:58:da:2e:4c:9e:84:a2:db:d0:
06:fa:b3:fb:8d:0b:b6:81:8b:90:3e:6d:f6:5d:25:
58:18:1a:45:6e:bc:f0:7b:32:90:92:66:97:6f:e2:
14:8e:d0:9b:a5:dc:e7:cc:f2:f5:ba:d7:0f:16:68:
e6:fd:05:e9:c4:52:59:3c:e6:27:ef:f6:42:86:19:
d6:8c:af:0a:0a:59:50:4a:f3:c0:e6:2c:4e:08:66:
d2:08:64:c8:8e:4e:92:f5:04:fb:49:6e:ee:eb:f2:
16:35:89:4a:29:ad:12:cd:f0:8b:dd:af:84:dd:86:
7b:11:23:2b:7d:1f:c0:53:2a:45:e0:a9:50:c7:aa:
ee:38:b2:5c:3b:5b:3c:fa:f4:39:19:b3:b9:e5:79:
d9:a0:6b:56:0a:89:48:43:7d:53:03:32:01:e9:1e:
c2:d1:45:17:6c:08:a5:a5:95:a0:ee:7d:03:87:e3:
21:5d:9a:51:d2:f2:a4:1a:44:14:54:6a:8c:fc:2f:
7a:9a:29:4d:1b:aa:88:18:bd:bb:1e:b9:a4:11:d4:
15:34:ab:dc:93:9e:a5:94:f6:3e:5f:e0:fb:7c:52:
88:4f:07:af:05:99:63:71:9f:28:1c:75:e3:1b:00:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:FC:83:AA:03:AE:91:80:18:B7:92:1A:47:AA:D3:77:88:FD:93
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:65:8e:d4:1b:5f:f6:3c:7b:60:9c:63:0d:8a:19:45:92:ee:
a3:8d:19:d7:2c:d0:0a:74:69:4e:6f:04:73:83:76:fd:1a:14:
ed:87:7c:51:c8:60:7a:a9:2c:c5:33:14:d5:fd:a9:10:76:c5:
99:c4:9f:61:2a:38:40:fc:c0:3c:e7:74:e0:27:c6:1c:ee:16:
a1:54:77:b7:22:e9:67:b4:6a:98:cd:f8:25:41:b7:cc:ec:8c:
c9:2d:f5:f8:f8:e0:56:8a:13:e0:0e:e5:68:90:31:ad:b6:10:
00:29:d6:1c:e6:e7:fc:61:29:db:76:4b:fb:41:b6:5b:3c:02:
fc:40:e3:d6:29:98:73:34:5d:5b:de:f6:19:05:b1:b6:55:ba:
f6:81:dd:8a:63:db:8c:bb:e9:5d:df:41:97:7b:a3:db:8e:2a:
22:0e:a9:74:1e:bb:fb:36:6a:2b:74:de:eb:83:52:b4:80:ba:
a1:2e:15:b3:3d:d8:b3:36:a9:43:0f:e3:60:4b:fd:e6:1d:21:
95:00:f0:29:87:79:e9:04:46:11:d2:8b:b9:a7:fa:af:61:fd:
55:36:d6:d0:58:07:7e:ad:d8:db:7b:b1:8e:4e:bd:a8:de:18:
d7:48:f7:27:0c:c2:26:cb:ce:3d:5e:22:37:ff:b3:0e:c3:28:
b4:76:0b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaexClB8Jd8aUWEElBSfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjYwOTIyMDAwMDI1WhcNMjYwOTIzMDAwMDI1WjAzMTEwLwYDVQQD
Eyg2MjNmZmM4M2FhMDNhZTkxODAxOGI3OTIxYTQ3YWFkMzc3ODhmZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP77VGm8tYYnItdMx2D34eoLVx9Y
2i5MnoSi29AG+rP7jQu2gYuQPm32XSVYGBpFbrzwezKQkmaXb+IUjtCbpdznzPL1
utcPFmjm/QXpxFJZPOYn7/ZChhnWjK8KCllQSvPA5ixOCGbSCGTIjk6S9QT7SW7u
6/IWNYlKKa0SzfCL3a+E3YZ7ESMrfR/AUypF4KlQx6ruOLJcO1s8+vQ5GbO55XnZ
oGtWColIQ31TAzIB6R7C0UUXbAilpZWg7n0Dh+MhXZpR0vKkGkQUVGqM/C96milN
G6qIGL27HrmkEdQVNKvck56llPY+X+D7fFKITwevBZljcZ8oHHXjGwB6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI//IOqA66RgBi3khpHqtN3iP2TMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmWO1Btf
9jx7YJxjDYoZRZLuo40Z1yzQCnRpTm8Ec4N2/RoU7Yd8UchgeqksxTMU1f2pEHbF
mcSfYSo4QPzAPOd04CfGHO4WoVR3tyLpZ7RqmM34JUG3zOyMyS31+PjgVooT4A7l
aJAxrbYQACnWHObn/GEp23ZL+0G2WzwC/EDj1imYczRdW972GQWxtlW69oHdimPb
jLvpXd9Bl3uj244qIg6pdB67+zZqK3Te64NStIC6oS4Vsz3YszapQw/jYEv95h0h
lQDwKYd56QRGEdKLuaf6r2H9VTbW0FgHfq3Y23uxjk69qN4Y10j3JwzCJsvOPV4i
N/+zDsMotHYLiw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:51:17 2026 by rpki-client