Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: aChSrtjapFYYgieqvEILi8Ee0m8cVIcvKEb0MpBhwe4=
Subject key identifier: 01:B5:FC:50:7F:AC:00:F7:83:4B:D8:9E:C2:2E:32:7E:E2:77:72:A1
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019FAC3EBA9782CD46B53AF4A3A24BC8BA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 028A
Signing time: Wed 29 Jul 2026 05:00:19 +0000
Manifest this update: Wed 29 Jul 2026 05:00:19 +0000
Manifest next update: Thu 30 Jul 2026 05:00:19 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: /UZOZoknBnKamzWZndEslOwJsaI+76FsgGRM+s9WsqE=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ba:97:82:cd:46:b5:3a:f4:a3:a2:4b:c8:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Jul 29 05:00:19 2026 GMT
Not After : Jul 30 05:00:19 2026 GMT
Subject: CN=01b5fc507fac00f7834bd89ec22e327ee27772a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:13:33:10:0b:a7:da:fc:ac:cf:41:35:84:
f7:8a:55:e2:02:9c:40:82:03:94:fd:08:63:f1:11:
bc:13:ad:13:37:6b:ad:65:d6:32:e9:cc:0b:7a:e3:
80:98:61:00:d9:6c:19:de:c0:b3:7a:70:b6:3e:a7:
5d:75:7b:ef:29:34:70:6c:49:f1:7e:36:9f:8e:b2:
a1:b1:ff:6b:ab:48:d3:26:8f:a3:d1:58:91:d0:cc:
f1:03:af:50:43:13:d1:d4:a1:70:f8:a7:61:1d:07:
39:cf:5d:37:a1:dc:22:d0:ab:36:73:36:13:fc:d5:
88:3b:bd:dc:c8:34:9d:1d:b4:cf:cf:82:29:9d:10:
44:7a:07:90:84:16:cf:aa:39:d8:42:af:73:ec:3b:
a3:f2:d3:36:ea:c1:78:c9:13:77:19:34:c9:02:e7:
79:c3:b0:c5:fc:d9:c3:7b:fa:a5:8d:86:88:97:27:
87:d4:d6:85:5b:4c:5f:e2:c6:97:27:40:14:cd:c0:
67:f6:7f:a1:db:69:db:6c:78:c5:b5:a7:8e:c6:c7:
32:61:73:d6:84:a8:2b:4a:23:ac:d1:32:ba:ae:12:
7f:c1:f6:0b:a0:4e:e5:a9:fe:24:2a:1e:49:b8:7f:
86:77:1d:b3:c6:6b:bb:b5:6e:fb:56:d1:23:fb:6f:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:FC:50:7F:AC:00:F7:83:4B:D8:9E:C2:2E:32:7E:E2:77:72:A1
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:8b:a6:d4:3d:68:e7:00:89:55:9f:04:ee:ce:e4:f6:33:
38:d2:e3:41:a5:75:ad:e3:f5:6f:d8:6e:1d:28:9c:aa:ed:8e:
ef:21:16:5f:57:91:fc:ca:0d:70:39:0d:cf:3c:ba:d4:ef:16:
ef:92:ce:e0:d2:f9:f0:05:88:ac:05:90:27:2c:c9:cd:3c:72:
cf:ab:b9:21:8e:8d:2f:f5:b0:66:53:b9:4a:be:52:00:97:d2:
3c:34:9e:8b:0e:64:57:18:a4:4a:43:85:f4:7a:85:3d:1a:29:
a6:56:10:dd:f3:45:35:64:fc:d1:80:f8:68:0a:82:0a:ea:0f:
bb:76:c7:a5:9c:0e:e4:d6:44:2c:cf:d7:af:96:37:c4:4b:2d:
1d:76:42:b4:f5:58:f4:bf:34:ff:bf:bd:49:b8:ef:8b:89:3f:
bb:d4:c3:d2:cf:5f:ce:08:be:93:2b:4a:ca:77:e3:df:54:bb:
5c:db:ac:55:93:79:bd:f6:9b:f5:05:b7:40:1c:97:a9:c6:f6:
e1:62:3b:37:59:54:b7:a2:63:16:9f:11:6a:a4:21:ac:4f:b0:
95:5c:a1:f1:7b:6d:d8:6e:6d:0f:7e:cd:3d:2f:e7:06:e5:53:
56:d7:99:7e:cd:2f:22:c0:e0:ff:e0:18:23:08:f1:95:3f:d7:
98:4a:d3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPrqXgs1GtTr0o6JLyLo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4
ZTNhMWMwHhcNMjYwNzI5MDUwMDE5WhcNMjYwNzMwMDUwMDE5WjAzMTEwLwYDVQQD
EygwMWI1ZmM1MDdmYWMwMGY3ODM0YmQ4OWVjMjJlMzI3ZWUyNzc3MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXsTMxALp9r8rM9BNYT3ilXiApxA
ggOU/Qhj8RG8E60TN2utZdYy6cwLeuOAmGEA2WwZ3sCzenC2PqdddXvvKTRwbEnx
fjafjrKhsf9rq0jTJo+j0ViR0MzxA69QQxPR1KFw+KdhHQc5z103odwi0Ks2czYT
/NWIO73cyDSdHbTPz4IpnRBEegeQhBbPqjnYQq9z7Duj8tM26sF4yRN3GTTJAud5
w7DF/NnDe/qljYaIlyeH1NaFW0xf4saXJ0AUzcBn9n+h22nbbHjFtaeOxscyYXPW
hKgrSiOs0TK6rhJ/wfYLoE7lqf4kKh5JuH+Gdx2zxmu7tW77VtEj+2/JCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG1/FB/rAD3g0vYnsIuMn7id3KhMB8GA1UdIwQY
MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt
M2ZmYTM5YjRkYzBiLzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi
LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg6LptQ9
aOcAiVWfBO7O5PYzONLjQaV1reP1b9huHSicqu2O7yEWX1eR/MoNcDkNzzy61O8W
75LO4NL58AWIrAWQJyzJzTxyz6u5IY6NL/WwZlO5Sr5SAJfSPDSeiw5kVxikSkOF
9HqFPRopplYQ3fNFNWT80YD4aAqCCuoPu3bHpZwO5NZELM/Xr5Y3xEstHXZCtPVY
9L80/7+9Sbjvi4k/u9TD0s9fzgi+kytKynfj31S7XNusVZN5vfab9QW3QByXqcb2
4WI7N1lUt6JjFp8RaqQhrE+wlVyh8Xtt2G5tD37NPS/nBuVTVteZfs0vIsDg/+AY
IwjxlT/XmErTmw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:26 2026 by rpki-client