Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: kMnWAMDVNY1X0vfRcbUFNACKDMRXloCqj/O1nDk2eko=
Subject key identifier: CF:2F:07:68:43:13:36:4C:4B:88:6C:E3:5A:9B:DE:F1:7F:A1:BE:C1
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 01A0E1AAFD4B7FD44B677C01EAB73A494D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 1066
Signing time: Sun 27 Sep 2026 07:01:14 +0000
Manifest this update: Sun 27 Sep 2026 07:01:14 +0000
Manifest next update: Mon 28 Sep 2026 07:01:14 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: LjIwSfzlIQJH1jzU+l11hJwph2K5uvc3jL2IbjQeQ2U=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:aa:fd:4b:7f:d4:4b:67:7c:01:ea:b7:3a:49:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Sep 27 07:01:14 2026 GMT
Not After : Sep 28 07:01:14 2026 GMT
Subject: CN=cf2f07684313364c4b886ce35a9bdef17fa1bec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:b9:14:73:ef:15:ef:7d:21:cb:3f:4c:be:
fb:8d:c4:08:89:fb:5b:c1:a7:9d:cf:14:13:89:e6:
9b:5d:a8:ab:06:cc:e7:99:10:3c:17:d6:cb:2f:67:
87:7d:6e:f5:3c:f0:eb:5e:fc:38:6a:9a:64:84:f7:
97:93:89:76:e8:c5:e9:d0:7c:b2:7d:6e:74:6b:d8:
b4:97:e6:74:2c:26:57:03:30:19:d7:26:9f:55:35:
15:06:87:c7:69:87:c9:80:36:b6:d3:4f:67:2c:7b:
86:83:a2:ec:a7:bc:7e:22:4e:23:49:ba:86:bf:65:
39:1f:57:3e:85:b2:0e:91:e4:69:c8:16:6c:fe:8d:
13:75:6c:0a:11:b2:ae:4a:5b:e6:c3:5f:c3:0c:b0:
e5:49:cf:b2:d0:99:ee:fb:2d:0e:61:03:29:05:a2:
08:85:f5:55:82:24:b8:d2:6f:f1:5a:9d:c1:71:18:
10:89:19:63:25:c2:0e:fd:b0:49:fb:4a:b1:a6:c0:
f0:19:10:4b:e2:b9:36:9a:9a:7d:f2:1f:04:56:e0:
e6:8c:1e:a8:d8:e1:44:1d:1a:3c:1e:d4:62:4c:f3:
ae:6a:7f:84:c6:4e:81:48:4c:04:00:79:c6:32:bc:
2c:36:f3:58:93:1e:48:c7:75:0d:7f:cd:8b:ce:e2:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:07:68:43:13:36:4C:4B:88:6C:E3:5A:9B:DE:F1:7F:A1:BE:C1
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c6:22:bd:3a:67:20:d3:c7:a6:49:e6:f2:e2:c1:bc:9a:5c:
f7:5a:f0:7b:ff:55:55:7f:f3:29:e3:1a:99:6d:43:04:22:19:
d0:3c:a6:88:2a:42:6b:6b:7a:57:68:69:de:4b:c4:6b:b6:80:
3c:d0:65:68:79:02:ad:2c:81:63:9a:e4:89:2f:3b:d7:f5:8b:
00:fd:29:1d:7d:4c:74:75:1a:ec:53:17:ed:d6:fb:e9:d1:c9:
3f:f8:14:5a:10:7b:06:9e:83:1a:3d:81:8c:f8:07:fa:83:c5:
19:91:05:7f:e0:8f:02:d6:b4:e7:3d:53:18:21:56:6c:62:94:
df:91:7b:39:c0:04:84:18:92:28:29:3c:bd:4c:3c:27:54:c1:
3d:ad:bb:19:0e:04:b1:66:e2:e5:80:ed:69:4d:61:76:b0:a8:
79:35:f4:44:ae:ff:f5:5f:41:43:8a:96:97:b3:f6:b6:e0:37:
69:be:50:28:50:4b:be:61:9f:71:1e:f2:fd:df:cd:42:6c:43:
0f:ef:2b:cd:83:78:c7:62:89:32:05:d8:ca:d7:59:95:3b:a4:
43:52:ef:7f:be:2d:e2:ef:68:67:22:df:40:b2:23:61:eb:5f:
ed:8f:31:23:28:d6:c6:f5:c6:13:9e:01:ae:b7:63:b4:a7:c5:
d5:2e:9b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhqv1Lf9RLZ3wB6rc6SU1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi
Y2M0MmMwHhcNMjYwOTI3MDcwMTE0WhcNMjYwOTI4MDcwMTE0WjAzMTEwLwYDVQQD
EyhjZjJmMDc2ODQzMTMzNjRjNGI4ODZjZTM1YTliZGVmMTdmYTFiZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N65FHPvFe99Ics/TL77jcQIiftb
waedzxQTieabXairBsznmRA8F9bLL2eHfW71PPDrXvw4appkhPeXk4l26MXp0Hyy
fW50a9i0l+Z0LCZXAzAZ1yafVTUVBofHaYfJgDa2009nLHuGg6Lsp7x+Ik4jSbqG
v2U5H1c+hbIOkeRpyBZs/o0TdWwKEbKuSlvmw1/DDLDlSc+y0Jnu+y0OYQMpBaII
hfVVgiS40m/xWp3BcRgQiRljJcIO/bBJ+0qxpsDwGRBL4rk2mpp98h8EVuDmjB6o
2OFEHRo8HtRiTPOuan+Exk6BSEwEAHnGMrwsNvNYkx5Ix3UNf82LzuILaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8vB2hDEzZMS4hs41qb3vF/ob7BMB8GA1UdIwQY
MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct
MjNiMjhmMzlhNjAyLzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy
LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMYivTpn
INPHpknm8uLBvJpc91rwe/9VVX/zKeMamW1DBCIZ0DymiCpCa2t6V2hp3kvEa7aA
PNBlaHkCrSyBY5rkiS871/WLAP0pHX1MdHUa7FMX7db76dHJP/gUWhB7Bp6DGj2B
jPgH+oPFGZEFf+CPAta05z1TGCFWbGKU35F7OcAEhBiSKCk8vUw8J1TBPa27GQ4E
sWbi5YDtaU1hdrCoeTX0RK7/9V9BQ4qWl7P2tuA3ab5QKFBLvmGfcR7y/d/NQmxD
D+8rzYN4x2KJMgXYytdZlTukQ1Lvf74t4u9oZyLfQLIjYetf7Y8xIyjWxvXGE54B
rrdjtKfF1S6buA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:31:42 2026 by rpki-client