Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: uzxdjze7LQ5BH+4y7gWKgdqrSczArKIAyHRinx9lTTI=
Subject key identifier: D4:C5:1D:93:81:2F:D2:FD:D5:F3:73:C1:68:94:F0:B0:E4:42:2A:E7
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 01A0BEB125CA38129E1984889919C4DEF4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:15 +0000
Manifest this update: Sun 20 Sep 2026 12:01:15 +0000
Manifest next update: Mon 21 Sep 2026 12:01:15 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: H23Zx8TcKE48v0G0owXJ+MPvyp4agio79yPvBUWrt1c=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:25:ca:38:12:9e:19:84:88:99:19:c4:de:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Sep 20 12:01:15 2026 GMT
Not After : Sep 21 12:01:15 2026 GMT
Subject: CN=d4c51d93812fd2fdd5f373c16894f0b0e4422ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:4a:e6:ae:9a:04:47:c4:40:d8:d7:0a:76:
db:79:b4:4a:12:65:ec:2c:c0:c5:a0:8e:06:9e:f3:
d9:71:d0:a4:07:2c:61:13:01:62:5c:ae:91:bd:08:
c7:1a:44:d4:b4:88:40:07:71:ab:78:26:86:2b:c8:
ee:93:a2:70:88:3d:36:eb:2d:b0:86:16:8f:c5:a8:
2e:eb:12:1b:1c:b4:3f:6c:63:5d:63:54:09:c5:c5:
7b:6b:e7:36:82:16:50:0e:69:40:fa:5b:90:3d:77:
31:0d:be:61:c0:2f:fb:e3:f5:32:9c:85:2c:8b:a6:
40:13:dc:24:78:78:ac:c1:68:df:d2:1f:cf:20:ad:
37:bd:cd:07:98:65:a2:ac:2c:8b:38:6a:8d:7e:49:
a2:68:c7:f6:0c:f9:7d:c5:f6:96:80:fd:f6:c9:cc:
6d:2c:3d:73:e4:cc:38:06:73:18:56:43:f5:05:eb:
30:17:fc:e0:92:9a:57:b7:21:cf:5b:77:46:86:0f:
b4:c1:87:33:47:e3:74:27:0d:8a:75:34:18:cc:5e:
2c:a3:c3:d5:fb:13:ce:6b:9f:b0:99:d6:dd:b1:05:
52:57:4f:e7:e1:4e:a3:75:04:b2:7d:de:3a:30:c7:
84:fb:aa:11:fd:9b:80:31:32:e7:25:18:bd:e8:b9:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:1D:93:81:2F:D2:FD:D5:F3:73:C1:68:94:F0:B0:E4:42:2A:E7
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4b:a5:05:9b:02:bb:b3:73:04:75:78:27:94:25:9c:93:6e:
f9:ff:44:70:6e:07:d9:27:f6:b6:d2:8d:c1:c7:3f:bd:0f:ae:
71:d8:86:0e:6e:9e:e4:91:5d:a7:6c:9f:9e:eb:8b:9b:cf:a6:
de:22:42:51:bc:8e:5a:44:55:b8:7b:80:dc:9c:8c:32:2c:4a:
8f:b5:6d:61:1c:98:61:70:8c:6c:bf:38:50:a7:57:95:5d:64:
79:01:18:35:00:e2:12:84:70:cf:f8:4b:93:63:fc:9e:a0:07:
c9:52:95:0d:79:ea:23:fd:b9:91:30:e0:62:bd:01:ba:bb:6c:
d6:80:36:3c:bf:9c:3a:9c:e1:f9:9e:e1:8c:e6:1c:82:d4:6f:
68:16:51:91:21:46:91:1d:f4:a5:1c:c5:eb:0a:70:e3:33:02:
8e:65:6a:20:06:04:da:42:a3:8a:bd:88:42:3a:09:d0:d5:fa:
24:38:0b:cc:18:a0:13:8d:ce:bd:e7:dd:11:46:e6:c6:6e:61:
20:4d:8c:88:49:54:b3:d0:74:fd:d1:a9:b5:19:9b:36:56:03:
41:6e:c5:e0:5b:58:d7:9f:c3:bd:4e:59:a1:b3:eb:23:f3:e1:
31:30:e3:6f:38:c3:29:0f:4d:96:2a:70:1b:e1:52:fb:a0:44:
77:60:f6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sSXKOBKeGYSImRnE3vTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODZmNTViNDVhMDY4OTg1NzQzNDUwYjdhZTUwZjRjYTcz
ZDYxMDkwHhcNMjYwOTIwMTIwMTE1WhcNMjYwOTIxMTIwMTE1WjAzMTEwLwYDVQQD
EyhkNGM1MWQ5MzgxMmZkMmZkZDVmMzczYzE2ODk0ZjBiMGU0NDIyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVNK5q6aBEfEQNjXCnbbebRKEmXs
LMDFoI4GnvPZcdCkByxhEwFiXK6RvQjHGkTUtIhAB3GreCaGK8juk6JwiD026y2w
hhaPxagu6xIbHLQ/bGNdY1QJxcV7a+c2ghZQDmlA+luQPXcxDb5hwC/74/UynIUs
i6ZAE9wkeHiswWjf0h/PIK03vc0HmGWirCyLOGqNfkmiaMf2DPl9xfaWgP32ycxt
LD1z5Mw4BnMYVkP1BeswF/zgkppXtyHPW3dGhg+0wYczR+N0Jw2KdTQYzF4so8PV
+xPOa5+wmdbdsQVSV0/n4U6jdQSyfd46MMeE+6oR/ZuAMTLnJRi96LkQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTFHZOBL9L91fNzwWiU8LDkQirnMB8GA1UdIwQY
MBaAFNiG9VtFoGiYV0NFC3rlD0ynPWEJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMWEwNDItMTAyZi00YzEyLTkzN2Yt
OWQ1ODVlMTRiNzYyLzEvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMWEwNDItMTAyZi00YzEyLTkzN2YtOWQ1ODVlMTRiNzYy
LzEvMkliMVcwV2dhSmhYUTBVTGV1VVBUS2M5WVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0ulBZsC
u7NzBHV4J5QlnJNu+f9EcG4H2Sf2ttKNwcc/vQ+ucdiGDm6e5JFdp2yfnuuLm8+m
3iJCUbyOWkRVuHuA3JyMMixKj7VtYRyYYXCMbL84UKdXlV1keQEYNQDiEoRwz/hL
k2P8nqAHyVKVDXnqI/25kTDgYr0Burts1oA2PL+cOpzh+Z7hjOYcgtRvaBZRkSFG
kR30pRzF6wpw4zMCjmVqIAYE2kKjir2IQjoJ0NX6JDgLzBigE43OvefdEUbmxm5h
IE2MiElUs9B0/dGptRmbNlYDQW7F4FtY15/DvU5ZobPrI/PhMTDjbzjDKQ9Nlipw
G+FS+6BEd2D2lw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:32:46 2026 by rpki-client