Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: psYsHDVOQCCJ8mPL9sCt+KlBx37Q4ISM7kTZOHB1N+o=
Subject key identifier: 79:32:18:A8:A7:50:76:EB:CF:CA:9D:37:E5:83:27:B3:CA:4E:8E:03
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 01A0CA0F7F1DDDEBC196830777B045FA453D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 02AB
Signing time: Tue 22 Sep 2026 17:00:08 +0000
Manifest this update: Tue 22 Sep 2026 17:00:08 +0000
Manifest next update: Wed 23 Sep 2026 17:00:08 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: DRTVIgmIlj024FObouqhU7AQtqaIuy8FrLLBxQUeB60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:7f:1d:dd:eb:c1:96:83:07:77:b0:45:fa:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Sep 22 17:00:08 2026 GMT
Not After : Sep 23 17:00:08 2026 GMT
Subject: CN=793218a8a75076ebcfca9d37e58327b3ca4e8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:e3:4d:3b:a2:3e:ab:d0:08:db:0c:fd:78:
36:19:e2:d4:6b:08:5b:6f:3b:cf:18:b3:ee:8a:7a:
52:82:3a:97:63:e6:a2:6a:f9:a4:f7:68:a8:16:fa:
49:2c:85:00:62:ad:67:5a:0a:68:7e:59:38:e3:c6:
33:aa:d0:b2:ed:1a:26:1b:0e:51:12:7c:af:4a:0f:
ed:b0:4e:83:85:4b:1c:c2:80:34:6b:95:a7:63:a2:
c1:c3:d5:ab:d2:92:21:d4:da:de:66:23:0c:95:9e:
11:71:8d:d2:f6:3f:2b:bf:cf:40:7b:22:6e:58:f0:
2b:a7:bb:d3:02:ac:16:0d:de:f4:e9:11:e9:e9:7f:
59:a2:bf:eb:32:27:99:b0:43:9a:7e:68:d2:b5:9d:
c1:0d:ad:10:8f:34:2d:3b:27:1f:a8:4b:1b:8d:8b:
2b:a7:9d:b6:98:31:84:4a:3b:51:e9:a9:6b:7c:f5:
e6:e7:0a:a8:66:5e:d4:62:c5:a6:e3:99:77:66:9a:
97:6f:16:ee:a0:52:6f:e9:31:a7:2c:02:23:57:92:
cc:e2:2d:26:c7:79:41:96:de:9e:b9:f4:13:da:e2:
72:a0:b3:60:25:18:54:af:f1:d1:68:33:2e:69:69:
b6:fd:c6:9f:af:2a:f4:53:d0:19:1e:6d:30:d4:8d:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:18:A8:A7:50:76:EB:CF:CA:9D:37:E5:83:27:B3:CA:4E:8E:03
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:24:3e:33:9c:e2:ba:2e:c9:65:49:6c:8d:1f:8e:4c:bd:
8d:fa:95:1f:36:2f:c7:b3:67:de:0b:09:30:bd:18:18:db:08:
e0:89:c4:3c:ac:ad:a0:65:45:50:78:8a:68:2f:c8:b4:f9:b1:
9e:62:c9:27:63:17:cc:d0:38:5a:9b:5c:a1:4d:b9:3a:0e:43:
d5:76:b3:10:c5:66:18:52:9e:41:1c:c3:b8:aa:1d:61:ea:d8:
35:f2:28:e5:fa:3b:f8:df:fc:a8:fc:da:3b:43:27:c3:33:24:
75:2a:63:50:4e:3a:93:c9:80:f6:fc:e5:36:02:bd:eb:43:88:
76:06:42:ab:e7:b4:db:46:9a:a6:71:66:67:7e:e6:2f:10:7a:
cd:c8:aa:dc:8c:a5:f6:11:88:4b:fd:91:fa:c2:9e:b7:da:7d:
7d:9a:37:08:a6:a0:85:ee:44:41:8c:99:c0:6f:a4:9a:6e:d3:
4b:0d:4f:eb:5c:fe:9f:07:13:b6:f8:7b:32:b3:fd:34:aa:42:
48:6d:9a:c4:ca:fa:a8:4c:97:a1:4f:f1:3b:64:df:a9:ce:9c:
2d:11:d6:52:a8:c4:f7:61:b2:d1:5c:75:3d:62:eb:04:c0:90:
87:dc:6d:49:98:8b:0d:56:f8:64:5b:d4:58:85:7f:d5:9f:00:
80:4b:0f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD38d3evBloMHd7BF+kU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmYwY2M4NTM1NTRiZGRmOTA5OWFhM2NlZWJkMzUyNDZi
OTI4ZjUwHhcNMjYwOTIyMTcwMDA4WhcNMjYwOTIzMTcwMDA4WjAzMTEwLwYDVQQD
Eyg3OTMyMThhOGE3NTA3NmViY2ZjYTlkMzdlNTgzMjdiM2NhNGU4ZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0TjTTuiPqvQCNsM/Xg2GeLUawhb
bzvPGLPuinpSgjqXY+aiavmk92ioFvpJLIUAYq1nWgpoflk448YzqtCy7RomGw5R
EnyvSg/tsE6DhUscwoA0a5WnY6LBw9Wr0pIh1NreZiMMlZ4RcY3S9j8rv89AeyJu
WPArp7vTAqwWDd706RHp6X9Zor/rMieZsEOafmjStZ3BDa0QjzQtOycfqEsbjYsr
p522mDGESjtR6alrfPXm5wqoZl7UYsWm45l3ZpqXbxbuoFJv6TGnLAIjV5LM4i0m
x3lBlt6eufQT2uJyoLNgJRhUr/HRaDMuaWm2/cafryr0U9AZHm0w1I3guQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkyGKinUHbrz8qdN+WDJ7PKTo4DMB8GA1UdIwQY
MBaAFNn/DMhTVUvd+Qmao87r01JGuSj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAt
Y2FmZTVlN2RiNzU4LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAtY2FmZTVlN2RiNzU4
LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ90kPjOc
4rouyWVJbI0fjky9jfqVHzYvx7Nn3gsJML0YGNsI4InEPKytoGVFUHiKaC/ItPmx
nmLJJ2MXzNA4WptcoU25Og5D1XazEMVmGFKeQRzDuKodYerYNfIo5fo7+N/8qPza
O0MnwzMkdSpjUE46k8mA9vzlNgK960OIdgZCq+e020aapnFmZ37mLxB6zciq3Iyl
9hGIS/2R+sKet9p9fZo3CKaghe5EQYyZwG+kmm7TSw1P61z+nwcTtvh7MrP9NKpC
SG2axMr6qEyXoU/xO2Tfqc6cLRHWUqjE92Gy0Vx1PWLrBMCQh9xtSZiLDVb4ZFvU
WIV/1Z8AgEsPnw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:28 2026 by rpki-client