Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: 9NgAHkg+qSZ8tM7Ye7Pbbxptd9MsGbGu2JPF6VrhMmI=
Subject key identifier: A6:17:6D:19:02:F0:65:57:08:80:DB:4E:E5:11:A8:95:5A:B0:6F:43
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 019FAC7593CF5D91BA5CCA51E9BF21970007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:14 +0000
Manifest this update: Wed 29 Jul 2026 06:00:14 +0000
Manifest next update: Thu 30 Jul 2026 06:00:14 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: AnIGI/tgxMSyEQg1oCkRij9ZlyZ3jdARFxsANDWs5nQ=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:93:cf:5d:91:ba:5c:ca:51:e9:bf:21:97:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Jul 29 06:00:14 2026 GMT
Not After : Jul 30 06:00:14 2026 GMT
Subject: CN=a6176d1902f065570880db4ee511a8955ab06f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:0d:58:4e:68:3f:4f:02:70:a6:fd:69:0a:
ce:7f:60:d5:1a:31:6e:3a:e7:15:54:94:8e:4b:c5:
1c:8b:79:3b:d0:54:d1:c4:e4:a8:e3:b2:5f:a0:4e:
4e:09:50:d4:09:3a:44:d5:e3:6b:be:c3:8c:56:20:
75:35:8b:cc:0e:c0:48:f4:17:f6:2a:0a:8b:d3:29:
86:2e:d2:3e:0c:af:03:25:83:20:94:ce:08:73:45:
bc:7f:9c:d4:d3:57:8d:c9:7a:0d:0c:c4:14:39:49:
4d:18:1c:90:5c:cf:14:e0:0a:f4:7a:48:80:5c:00:
47:e7:d0:61:9d:7c:2d:da:45:fb:6b:89:3d:7d:e0:
9c:b2:bd:15:1a:8f:1b:7e:be:06:d5:e8:1f:b2:cf:
54:3b:ab:ee:be:d6:1f:00:4c:ae:17:36:6a:b3:ae:
47:f2:51:31:30:f9:34:43:73:46:a6:81:2a:20:e8:
91:89:77:c5:6b:36:b8:9f:cf:1d:e3:e0:cf:2b:53:
5f:4b:3c:5e:44:3b:2a:ec:bf:e9:45:8d:0a:31:53:
ab:da:cb:33:35:6a:a4:d7:96:78:3b:3d:85:44:cc:
d0:cf:76:3f:c5:ee:bc:15:af:c1:d1:09:6d:44:a5:
31:1d:57:b0:cf:38:ce:35:33:fc:40:d8:9d:48:2a:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:6D:19:02:F0:65:57:08:80:DB:4E:E5:11:A8:95:5A:B0:6F:43
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:c8:63:9b:f6:cb:47:eb:f8:13:44:8f:13:ce:ba:95:09:
3f:4c:39:15:df:e4:e2:1c:70:88:f4:96:5d:fe:63:9f:fb:76:
38:20:5c:50:09:92:2b:9a:21:4f:ff:21:41:b6:f2:e4:8c:d8:
3c:09:05:ac:c5:f6:a5:16:99:e7:5c:9e:78:a5:df:ca:18:b0:
f4:07:13:36:f2:5b:15:92:a2:93:6e:bf:88:38:a7:ca:2b:d9:
1e:2e:4c:31:8a:5e:7e:15:6b:5b:4e:98:ed:cc:23:3b:48:81:
9f:6a:91:cb:b1:96:41:7e:e6:b6:d2:f6:14:0c:40:a4:43:a5:
8b:99:76:eb:01:bb:34:58:0b:95:a6:b6:ea:69:50:32:ac:7f:
f4:7d:ed:a6:81:94:62:5d:b0:18:cf:1a:1b:1d:2e:1c:cb:64:
dc:8a:cb:43:bb:bf:7e:08:d2:c5:13:b5:04:ab:82:5b:34:8d:
3d:d8:63:8f:8f:36:ec:f3:39:db:33:ab:1b:c1:6e:ab:9c:87:
a3:64:1c:f7:54:33:76:e7:3c:1b:31:d3:0b:f1:a9:b4:f6:35:
9a:70:bc:4f:10:ac:89:68:d6:45:4e:af:98:37:c6:3f:f2:3b:
85:cc:e3:fb:18:85:a2:1a:ba:76:f7:0b:fd:f9:b2:56:da:b9:
b8:47:e2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZPPXZG6XMpR6b8hlwAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODZmNTViNDVhMDY4OTg1NzQzNDUwYjdhZTUwZjRjYTcz
ZDYxMDkwHhcNMjYwNzI5MDYwMDE0WhcNMjYwNzMwMDYwMDE0WjAzMTEwLwYDVQQD
EyhhNjE3NmQxOTAyZjA2NTU3MDg4MGRiNGVlNTExYTg5NTVhYjA2ZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1YNWE5oP08CcKb9aQrOf2DVGjFu
OucVVJSOS8Uci3k70FTRxOSo47JfoE5OCVDUCTpE1eNrvsOMViB1NYvMDsBI9Bf2
KgqL0ymGLtI+DK8DJYMglM4Ic0W8f5zU01eNyXoNDMQUOUlNGByQXM8U4Ar0ekiA
XABH59BhnXwt2kX7a4k9feCcsr0VGo8bfr4G1egfss9UO6vuvtYfAEyuFzZqs65H
8lExMPk0Q3NGpoEqIOiRiXfFaza4n88d4+DPK1NfSzxeRDsq7L/pRY0KMVOr2ssz
NWqk15Z4Oz2FRMzQz3Y/xe68Fa/B0QltRKUxHVewzzjONTP8QNidSCrDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYXbRkC8GVXCIDbTuURqJVasG9DMB8GA1UdIwQY
MBaAFNiG9VtFoGiYV0NFC3rlD0ynPWEJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMWEwNDItMTAyZi00YzEyLTkzN2Yt
OWQ1ODVlMTRiNzYyLzEvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMWEwNDItMTAyZi00YzEyLTkzN2YtOWQ1ODVlMTRiNzYy
LzEvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeHIY5v2
y0fr+BNEjxPOupUJP0w5Fd/k4hxwiPSWXf5jn/t2OCBcUAmSK5ohT/8hQbby5IzY
PAkFrMX2pRaZ51yeeKXfyhiw9AcTNvJbFZKik26/iDinyivZHi5MMYpefhVrW06Y
7cwjO0iBn2qRy7GWQX7mttL2FAxApEOli5l26wG7NFgLlaa26mlQMqx/9H3tpoGU
Yl2wGM8aGx0uHMtk3IrLQ7u/fgjSxRO1BKuCWzSNPdhjj4827PM52zOrG8Fuq5yH
o2Qc91Qzduc8GzHTC/GptPY1mnC8TxCsiWjWRU6vmDfGP/I7hczj+xiFohq6dvcL
/fmyVtq5uEfiEg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:53 2026 by rpki-client