Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: Z1OEZH7PAgJJN+sKZqsgydpSyDCGFJWL5pz4fEC/AyI=
Subject key identifier: C8:60:2E:00:07:10:A8:E2:54:D7:29:03:D1:74:5C:29:1F:40:37:5A
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 01A0C8FD78C0540EAFCD94DA97B55A0126C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 04D5
Signing time: Tue 22 Sep 2026 12:00:49 +0000
Manifest this update: Tue 22 Sep 2026 12:00:49 +0000
Manifest next update: Wed 23 Sep 2026 12:00:49 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: txusb3krPKqeDsWvs+BBeKo78m2y6Z0GJbliU5ysA60=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:78:c0:54:0e:af:cd:94:da:97:b5:5a:01:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Sep 22 12:00:49 2026 GMT
Not After : Sep 23 12:00:49 2026 GMT
Subject: CN=c8602e000710a8e254d72903d1745c291f40375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:66:2f:28:e4:60:c4:49:8d:03:54:47:4c:
a8:56:bf:43:6b:0a:fd:91:ad:27:6e:f4:13:d5:ab:
48:ef:8d:e3:2d:20:bb:71:15:5a:95:48:06:7c:53:
e8:a3:c4:7b:ca:f3:a4:f1:e6:4e:96:ab:e8:48:20:
b3:8e:e2:23:83:59:4d:59:57:5c:20:43:bd:ae:b9:
69:14:49:91:6a:6f:28:cc:91:39:bb:65:09:87:41:
6a:84:ab:b1:ad:a8:df:88:dc:50:a7:6c:cd:55:31:
f4:dc:33:f5:55:a6:ad:6d:9a:5c:84:c5:cd:f1:ef:
ab:a4:82:71:1d:dd:4c:4c:02:3c:5f:d2:59:44:eb:
c7:10:a9:2d:1a:2e:db:43:6f:ed:0a:47:d1:0e:5d:
f9:ac:a6:33:c7:ec:00:6d:e6:41:bf:dd:e3:e6:8b:
91:8e:c3:32:e8:2c:2f:9a:6d:e9:15:78:1c:07:ed:
13:aa:ba:1d:67:5a:07:12:98:22:d5:17:02:fa:77:
a2:e5:52:67:e4:ea:0b:94:b9:c5:d5:68:13:c2:c4:
34:07:c4:f9:67:8c:a8:d2:0c:9e:f9:c4:05:19:3a:
b7:0f:2a:eb:b0:34:38:fb:87:32:e8:23:cd:bb:c7:
0e:75:a4:42:d0:f6:a6:da:8d:d2:69:73:2a:8b:bf:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:2E:00:07:10:A8:E2:54:D7:29:03:D1:74:5C:29:1F:40:37:5A
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:d3:9d:5d:38:a5:8c:c2:88:71:58:72:e5:e8:74:15:f5:
cd:70:ad:92:e3:0d:9b:ae:fd:7b:f7:85:ef:40:c3:cf:73:2b:
0d:d8:0f:22:3d:39:8d:f6:06:d1:3a:d0:40:bd:99:8f:c5:e7:
80:e6:fd:90:eb:7b:d4:91:9e:e7:ae:87:1a:3d:ff:31:46:f1:
4c:fa:59:55:e9:ef:bf:07:7d:69:c6:ad:d1:89:2c:99:b7:13:
db:e5:94:a6:ac:95:94:85:dc:d2:25:bf:60:f8:69:17:a9:bb:
69:c3:db:4f:56:64:e8:3c:ba:25:60:04:9d:33:3e:0d:b2:0e:
0b:05:17:38:a9:b5:d3:f3:9f:1e:e4:b1:21:9d:a2:fa:d9:cd:
6c:66:a6:5e:62:aa:74:ef:00:9e:04:15:ea:d1:bd:86:ec:a6:
05:a5:e3:7c:be:fc:d0:22:4d:b6:f4:3f:28:a2:40:27:ce:a2:
07:eb:da:57:33:e7:74:36:8e:eb:80:b2:e5:22:95:d6:06:db:
ea:3d:11:63:63:96:ad:df:63:2d:23:0a:58:e0:e0:3a:88:70:
cb:21:d8:f0:81:58:77:c2:c6:3b:fb:39:f3:8e:d3:70:e5:98:
30:ec:e5:f0:0b:48:82:56:87:d1:48:0a:c5:bf:f9:3d:b8:58:
ae:ca:54:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/XjAVA6vzZTal7VaASbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl
ZTc4MTgwHhcNMjYwOTIyMTIwMDQ5WhcNMjYwOTIzMTIwMDQ5WjAzMTEwLwYDVQQD
EyhjODYwMmUwMDA3MTBhOGUyNTRkNzI5MDNkMTc0NWMyOTFmNDAzNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorNmLyjkYMRJjQNUR0yoVr9Dawr9
ka0nbvQT1atI743jLSC7cRValUgGfFPoo8R7yvOk8eZOlqvoSCCzjuIjg1lNWVdc
IEO9rrlpFEmRam8ozJE5u2UJh0FqhKuxrajfiNxQp2zNVTH03DP1VaatbZpchMXN
8e+rpIJxHd1MTAI8X9JZROvHEKktGi7bQ2/tCkfRDl35rKYzx+wAbeZBv93j5ouR
jsMy6Cwvmm3pFXgcB+0TqrodZ1oHEpgi1RcC+nei5VJn5OoLlLnF1WgTwsQ0B8T5
Z4yo0gye+cQFGTq3DyrrsDQ4+4cy6CPNu8cOdaRC0Pam2o3SaXMqi7/jgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhgLgAHEKjiVNcpA9F0XCkfQDdaMB8GA1UdIwQY
MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct
NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl
LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddHTnV04
pYzCiHFYcuXodBX1zXCtkuMNm679e/eF70DDz3MrDdgPIj05jfYG0TrQQL2Zj8Xn
gOb9kOt71JGe566HGj3/MUbxTPpZVenvvwd9acat0YksmbcT2+WUpqyVlIXc0iW/
YPhpF6m7acPbT1Zk6Dy6JWAEnTM+DbIOCwUXOKm10/OfHuSxIZ2i+tnNbGamXmKq
dO8AngQV6tG9huymBaXjfL780CJNtvQ/KKJAJ86iB+vaVzPndDaO64Cy5SKV1gbb
6j0RY2OWrd9jLSMKWODgOohwyyHY8IFYd8LGO/s5847TcOWYMOzl8AtIglaH0UgK
xb/5PbhYrspUZg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:22 2026 by rpki-client