Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: d7tbhgqYp3emlBWghdzdzo4/EpvQT0F7cpdF3iQHEFM=
Subject key identifier: 1D:B1:3F:FF:04:01:19:6D:9B:9B:59:FF:38:DC:1C:89:B2:63:0D:E6
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 01A0C2FB0D3027F4803B5489CAE256C610B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 14D6
Signing time: Mon 21 Sep 2026 08:00:27 +0000
Manifest this update: Mon 21 Sep 2026 08:00:27 +0000
Manifest next update: Tue 22 Sep 2026 08:00:27 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: ofegRU+ObRfpvyse2yAEPbBb7cQpKYiCWar3MoTXNWM=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:0d:30:27:f4:80:3b:54:89:ca:e2:56:c6:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Sep 21 08:00:27 2026 GMT
Not After : Sep 22 08:00:27 2026 GMT
Subject: CN=1db13fff0401196d9b9b59ff38dc1c89b2630de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:d4:fb:1e:67:28:ad:ea:e3:de:bf:d4:5d:
1c:6e:5d:ec:75:8a:b5:25:2c:2b:c2:cd:31:ee:64:
c1:0d:23:78:03:57:b9:c7:25:dc:21:94:1a:56:c1:
22:e4:73:09:69:65:69:7a:6e:4a:14:3b:11:15:b5:
be:a6:3d:ea:88:0e:53:e4:a1:35:0a:ba:70:21:4a:
62:9b:ad:ac:a0:44:15:8d:92:54:15:d7:51:1b:3a:
8c:11:00:32:c2:01:2a:5f:7f:23:3d:c8:ae:d3:df:
cd:19:16:0f:8f:e1:5e:d4:25:11:cb:ae:7c:9b:79:
8d:b8:24:76:31:1d:f9:62:9f:12:e2:de:c3:b6:28:
85:c2:c7:8c:20:6e:2c:3a:44:3b:dd:c8:9e:ae:05:
f1:4b:a3:d8:d8:ff:06:68:8d:14:4f:5f:37:b7:d0:
aa:00:c0:59:65:3c:83:db:c5:4e:c8:a9:55:0e:89:
0d:f2:2c:0c:cc:1b:b1:f0:e6:6a:04:3a:eb:ca:7a:
48:f2:af:27:32:dd:23:66:6e:f1:0a:23:d5:73:0d:
b2:8d:4b:11:43:e9:f3:75:b8:51:24:f7:eb:e8:49:
b1:e1:70:6b:65:97:a3:74:6c:94:fa:f6:a5:fc:e9:
8c:2c:0c:a4:66:82:f6:85:30:93:c8:f2:67:1a:1a:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B1:3F:FF:04:01:19:6D:9B:9B:59:FF:38:DC:1C:89:B2:63:0D:E6
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:55:db:d1:cb:28:bd:15:26:d5:28:ca:65:aa:f7:bc:e4:42:
e5:cd:84:29:98:f0:63:0c:31:53:93:ec:1d:81:f0:99:01:e3:
b1:85:7a:70:80:20:b3:22:5d:99:1a:17:e5:97:55:3f:ff:f0:
c3:20:56:3b:ea:8c:14:8a:3d:55:ff:41:97:d9:b9:ef:b6:12:
c3:9e:d4:5a:e5:68:08:f6:19:ea:37:bd:57:a9:a4:83:43:61:
69:be:f4:14:61:ad:ee:c2:e8:7e:44:c2:6b:23:db:a8:9d:21:
bd:f0:4d:ea:ee:58:e9:e4:a8:3e:31:c6:07:51:6a:21:06:6c:
63:15:40:86:0b:8d:36:55:85:ee:c4:57:dc:64:27:52:1a:e2:
02:a5:15:5d:33:60:4e:9c:52:b1:36:da:e3:74:05:44:99:ad:
bf:8d:42:b8:c1:6c:cd:8b:e9:f5:59:81:50:48:21:e4:04:82:
34:14:c7:4f:00:db:11:22:dc:2f:6f:35:71:41:1c:95:fd:c9:
c9:c0:48:92:de:f8:3e:ad:a2:e2:4a:6a:97:15:2c:9e:90:16:
96:0e:86:09:af:0c:51:29:05:50:39:cb:ec:14:9d:8c:00:83:
16:36:fd:1e:2e:cf:6d:df:00:bd:dc:12:99:ca:b3:ad:a0:3c:
44:a7:dc:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+w0wJ/SAO1SJyuJWxhCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTZiZGZlNDI3ODAwOGY3MTZkNGQ3YjBiOWY5MmY3ZTAz
NmViMjYwHhcNMjYwOTIxMDgwMDI3WhcNMjYwOTIyMDgwMDI3WjAzMTEwLwYDVQQD
EygxZGIxM2ZmZjA0MDExOTZkOWI5YjU5ZmYzOGRjMWM4OWIyNjMwZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpTU+x5nKK3q496/1F0cbl3sdYq1
JSwrws0x7mTBDSN4A1e5xyXcIZQaVsEi5HMJaWVpem5KFDsRFbW+pj3qiA5T5KE1
CrpwIUpim62soEQVjZJUFddRGzqMEQAywgEqX38jPciu09/NGRYPj+Fe1CURy658
m3mNuCR2MR35Yp8S4t7DtiiFwseMIG4sOkQ73ciergXxS6PY2P8GaI0UT183t9Cq
AMBZZTyD28VOyKlVDokN8iwMzBux8OZqBDrrynpI8q8nMt0jZm7xCiPVcw2yjUsR
Q+nzdbhRJPfr6Emx4XBrZZejdGyU+val/OmMLAykZoL2hTCTyPJnGhrLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2xP/8EARltm5tZ/zjcHImyYw3mMB8GA1UdIwQY
MBaAFNrmvf5CeACPcW1NewufkvfgNusmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMt
YmYyNGU3NzViMmJjLzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMtYmYyNGU3NzViMmJj
LzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVXb0cso
vRUm1SjKZar3vORC5c2EKZjwYwwxU5PsHYHwmQHjsYV6cIAgsyJdmRoX5ZdVP//w
wyBWO+qMFIo9Vf9Bl9m577YSw57UWuVoCPYZ6je9V6mkg0Nhab70FGGt7sLofkTC
ayPbqJ0hvfBN6u5Y6eSoPjHGB1FqIQZsYxVAhguNNlWF7sRX3GQnUhriAqUVXTNg
TpxSsTba43QFRJmtv41CuMFszYvp9VmBUEgh5ASCNBTHTwDbESLcL281cUEclf3J
ycBIkt74Pq2i4kpqlxUsnpAWlg6GCa8MUSkFUDnL7BSdjACDFjb9Hi7Pbd8AvdwS
mcqzraA8RKfc7g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:07 2026 by rpki-client