Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: OGY2nmJitIFrT5LhYxVIwzR80sUwJh0IGche3mvSb/k=
Subject key identifier: 00:5F:2E:08:4F:70:89:9E:A8:D4:DD:58:5A:DC:C4:48:31:2D:B1:87
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01A0F97CA99AC853D954D68F101D2C6E849D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1A89
Signing time: Thu 01 Oct 2026 22:01:31 +0000
Manifest this update: Thu 01 Oct 2026 22:01:31 +0000
Manifest next update: Fri 02 Oct 2026 22:01:31 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: bSjnuqlF/ZGtxwyk22pnHbzSTGYRs62f6sWTVskKRug=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:a9:9a:c8:53:d9:54:d6:8f:10:1d:2c:6e:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Oct 1 22:01:31 2026 GMT
Not After : Oct 2 22:01:31 2026 GMT
Subject: CN=005f2e084f70899ea8d4dd585adcc448312db187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:51:4f:f8:32:1e:23:be:1b:f9:c1:32:8b:
97:47:3f:0f:28:91:f1:47:f6:a2:53:9c:fb:69:6e:
38:21:1f:2d:a5:35:c7:5e:0b:cc:e2:63:36:3c:5e:
65:f0:da:6e:1d:00:1a:c5:1b:09:f5:0d:8d:fa:6c:
41:3b:77:c2:93:71:d0:b5:34:c6:f8:a4:19:3f:12:
b9:59:7b:b9:60:9c:6b:52:88:ca:40:dc:7c:69:27:
2d:45:ef:e0:27:df:2a:57:64:d7:4f:e6:de:78:16:
c1:1f:a3:f1:8f:38:b5:2f:41:a6:e4:fa:1a:41:d6:
00:f8:78:86:6a:4e:02:18:f2:7a:7c:4e:c9:e0:14:
92:4d:56:ae:02:2c:c1:51:0e:a6:06:36:5f:dc:5a:
43:71:85:68:dc:c5:0d:6d:48:4d:14:bb:34:fd:6c:
c0:7d:68:20:82:cc:ac:a5:a8:36:5b:ed:61:56:97:
66:26:7d:ad:bb:00:fa:94:2a:d1:14:c8:5d:81:37:
e3:cc:db:2b:8d:12:5e:66:04:10:37:46:c0:12:aa:
cd:c4:0a:01:b7:a7:ad:c4:66:ab:bf:53:eb:87:4b:
a6:a9:67:5a:a3:38:0a:b1:27:c5:c7:8b:da:51:ac:
eb:ad:83:44:cb:f6:66:65:0d:82:4d:32:0d:7d:a2:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:2E:08:4F:70:89:9E:A8:D4:DD:58:5A:DC:C4:48:31:2D:B1:87
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:79:e9:17:03:f5:c8:ea:8c:ad:cc:0f:eb:50:c9:39:bf:70:
78:2e:2f:cf:c6:2a:69:89:6a:36:f2:3a:6c:43:13:11:60:94:
8c:1c:d8:62:96:2c:1e:85:4d:a9:be:9b:ae:8e:92:b0:8f:5b:
b6:7e:6e:ce:d5:c2:e6:a5:11:2b:11:09:13:f7:e5:e8:27:60:
45:65:aa:2d:2b:cf:56:c0:38:b9:40:da:2c:61:a3:86:30:47:
d6:3c:70:74:6a:38:4f:b5:47:d1:67:4a:6d:ce:fd:67:1b:3b:
d7:86:3b:ee:90:20:0a:fb:0c:ff:b9:c7:b4:97:8d:21:2a:02:
f4:0d:94:c3:e5:de:81:ec:83:6e:43:d5:b1:c1:14:37:10:f2:
67:05:fb:4f:79:62:ad:6a:6d:9b:dc:e5:5f:fe:bd:4a:59:79:
f9:b3:fb:50:98:a1:82:1d:f9:94:11:74:0b:3b:74:67:42:ea:
6a:dc:05:92:cd:54:75:15:19:a6:9f:d9:0b:29:09:6b:6b:14:
96:de:a4:56:9e:6c:40:45:9b:4e:65:5d:f4:0a:02:2b:a1:30:
00:dd:ec:1e:c0:6c:f6:e8:c1:c7:6d:2f:18:f9:b2:43:88:60:
49:f0:8b:c6:57:35:31:a6:62:b5:da:87:5b:c8:27:52:dc:8f:
6f:6a:e4:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5fKmayFPZVNaPEB0sboSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjYxMDAxMjIwMTMxWhcNMjYxMDAyMjIwMTMxWjAzMTEwLwYDVQQD
EygwMDVmMmUwODRmNzA4OTllYThkNGRkNTg1YWRjYzQ0ODMxMmRiMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxRT/gyHiO+G/nBMouXRz8PKJHx
R/aiU5z7aW44IR8tpTXHXgvM4mM2PF5l8NpuHQAaxRsJ9Q2N+mxBO3fCk3HQtTTG
+KQZPxK5WXu5YJxrUojKQNx8aSctRe/gJ98qV2TXT+beeBbBH6Pxjzi1L0Gm5Poa
QdYA+HiGak4CGPJ6fE7J4BSSTVauAizBUQ6mBjZf3FpDcYVo3MUNbUhNFLs0/WzA
fWgggsyspag2W+1hVpdmJn2tuwD6lCrRFMhdgTfjzNsrjRJeZgQQN0bAEqrNxAoB
t6etxGarv1Prh0umqWdaozgKsSfFx4vaUazrrYNEy/ZmZQ2CTTINfaIQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABfLghPcImeqNTdWFrcxEgxLbGHMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3npFwP1
yOqMrcwP61DJOb9weC4vz8YqaYlqNvI6bEMTEWCUjBzYYpYsHoVNqb6bro6SsI9b
tn5uztXC5qURKxEJE/fl6CdgRWWqLSvPVsA4uUDaLGGjhjBH1jxwdGo4T7VH0WdK
bc79Zxs714Y77pAgCvsM/7nHtJeNISoC9A2Uw+XegeyDbkPVscEUNxDyZwX7T3li
rWptm9zlX/69Sll5+bP7UJihgh35lBF0Czt0Z0LqatwFks1UdRUZpp/ZCykJa2sU
lt6kVp5sQEWbTmVd9AoCK6EwAN3sHsBs9ujBx20vGPmyQ4hgSfCLxlc1MaZitdqH
W8gnUtyPb2rkYg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 06:28:35 2026 by rpki-client