Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: LtMnuBcM0rYagdRQqyhJQLStWTJQlqLT2y3GcoNtbU0=
Subject key identifier: 93:DC:95:D8:BF:FB:8E:D0:7A:C1:D9:E3:22:2C:C5:BA:FE:E5:D4:E4
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 01A0C40E85411754557829F786320F71757E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 1999
Signing time: Mon 21 Sep 2026 13:01:20 +0000
Manifest this update: Mon 21 Sep 2026 13:01:20 +0000
Manifest next update: Tue 22 Sep 2026 13:01:20 +0000
Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: aA5QjWt5fJIF/1ZFHN4FSPvV2iGRDr4Fbk32Mwjl/yg=)
3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:85:41:17:54:55:78:29:f7:86:32:0f:71:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Sep 21 13:01:20 2026 GMT
Not After : Sep 22 13:01:20 2026 GMT
Subject: CN=93dc95d8bffb8ed07ac1d9e3222cc5bafee5d4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:44:c8:7f:b5:6a:71:8b:61:0e:ea:f0:cc:
cb:67:b6:11:dc:b1:6a:52:c0:5c:79:09:b3:cc:6d:
9b:88:85:71:cc:aa:f8:f4:97:ec:bd:66:c0:20:39:
5d:c6:b9:b4:a8:45:83:24:50:c3:41:d3:63:6a:f8:
51:09:a5:0c:73:34:29:56:5a:6b:1d:94:42:37:5e:
25:1f:70:4c:42:0d:fa:d9:b1:75:ae:40:18:dd:dd:
99:32:49:e9:1d:e9:b4:3d:18:25:4e:26:d1:8a:fe:
cf:8b:40:93:f4:ab:7d:e3:83:af:45:89:6b:15:e7:
44:3f:5a:0f:1d:ed:8c:60:8f:ce:0f:e9:15:c2:0c:
1a:4d:13:1e:84:9c:fd:cf:67:0f:8b:1c:89:ed:c3:
03:d3:41:77:13:8d:7b:5a:31:81:89:2c:c9:d1:cd:
2b:46:dd:cb:39:0a:e7:8c:e4:fa:25:1c:a5:b2:37:
f7:be:6a:61:a6:81:4d:19:5d:d8:25:c7:69:57:e3:
ed:30:0b:1d:32:93:ef:93:f0:86:7f:71:d1:f9:e5:
12:71:84:db:c2:9e:11:27:a4:8f:ed:f4:60:3b:e5:
83:91:41:01:62:c6:d5:75:3d:41:69:f9:6d:dd:28:
3a:09:3d:36:96:5e:00:1b:65:43:68:ba:16:d0:33:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:95:D8:BF:FB:8E:D0:7A:C1:D9:E3:22:2C:C5:BA:FE:E5:D4:E4
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:37:0b:e1:a2:4e:56:d5:f9:5a:94:c8:7b:ed:6e:6b:5d:
6b:eb:98:ef:f8:3f:5f:fa:9b:a2:d2:45:c9:13:f0:b4:c6:99:
b1:13:e3:65:36:b7:75:b9:a6:77:56:23:86:66:04:d8:86:79:
a0:7e:97:a7:fa:c0:57:af:1d:aa:93:bc:83:0f:86:1c:fb:38:
de:8f:af:d8:30:76:a4:27:f0:75:25:41:68:a1:d2:1d:cd:5c:
9a:a9:48:e8:f8:4b:21:75:52:32:2a:87:86:8a:0d:ee:82:b2:
f3:80:25:20:fa:80:3d:43:a6:89:68:7e:04:8d:3a:f2:5f:14:
65:7a:30:fd:29:2e:db:a8:52:11:16:f3:79:a5:27:3a:74:77:
a0:9a:90:92:fe:f8:e2:24:0c:0e:1f:bd:96:d1:32:13:12:ba:
84:56:78:da:e5:7b:24:b8:10:da:1c:4a:0c:a5:3b:d6:f5:85:
20:b4:fc:c4:f1:8b:7b:e5:ba:85:d3:02:ca:33:d2:9d:72:de:
eb:6c:de:ab:e6:4e:7e:eb:75:0c:a7:8b:a0:63:80:0b:e5:c4:
c8:09:1f:03:4b:3c:11:f0:c9:c5:35:d6:37:2d:93:f5:47:f1:
78:df:a5:5b:2a:86:d2:70:15:1a:9a:28:08:05:cb:50:ea:8c:
d7:31:a3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDoVBF1RVeCn3hjIPcXV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3
MDg0ZjkwHhcNMjYwOTIxMTMwMTIwWhcNMjYwOTIyMTMwMTIwWjAzMTEwLwYDVQQD
Eyg5M2RjOTVkOGJmZmI4ZWQwN2FjMWQ5ZTMyMjJjYzViYWZlZTVkNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWFEyH+1anGLYQ7q8MzLZ7YR3LFq
UsBceQmzzG2biIVxzKr49JfsvWbAIDldxrm0qEWDJFDDQdNjavhRCaUMczQpVlpr
HZRCN14lH3BMQg362bF1rkAY3d2ZMknpHem0PRglTibRiv7Pi0CT9Kt944OvRYlr
FedEP1oPHe2MYI/OD+kVwgwaTRMehJz9z2cPixyJ7cMD00F3E417WjGBiSzJ0c0r
Rt3LOQrnjOT6JRylsjf3vmphpoFNGV3YJcdpV+PtMAsdMpPvk/CGf3HR+eUScYTb
wp4RJ6SP7fRgO+WDkUEBYsbVdT1Baflt3Sg6CT02ll4AG2VDaLoW0DP8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPcldi/+47QesHZ4yIsxbr+5dTkMB8GA1UdIwQY
MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt
ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy
LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK83C+Gi
TlbV+VqUyHvtbmtda+uY7/g/X/qbotJFyRPwtMaZsRPjZTa3dbmmd1YjhmYE2IZ5
oH6Xp/rAV68dqpO8gw+GHPs43o+v2DB2pCfwdSVBaKHSHc1cmqlI6PhLIXVSMiqH
hooN7oKy84AlIPqAPUOmiWh+BI068l8UZXow/Sku26hSERbzeaUnOnR3oJqQkv74
4iQMDh+9ltEyExK6hFZ42uV7JLgQ2hxKDKU71vWFILT8xPGLe+W6hdMCyjPSnXLe
62zeq+ZOfut1DKeLoGOAC+XEyAkfA0s8EfDJxTXWNy2T9UfxeN+lWyqG0nAVGpoo
CAXLUOqM1zGjDA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:11 2026 by rpki-client