Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: VvF+rpAPyPQrufRXDtzv6a3yMGDiVZZhmJXQLPXH7FQ=
Subject key identifier: E1:D3:EA:D4:DE:6D:D0:B1:93:C9:AA:1F:08:41:C9:75:68:3E:CA:FD
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 01A0C39F909DE8488DFC85E6B40DC5659842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 19BF
Signing time: Mon 21 Sep 2026 11:00:09 +0000
Manifest this update: Mon 21 Sep 2026 11:00:09 +0000
Manifest next update: Tue 22 Sep 2026 11:00:09 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: 20tvrrp4TymJN1iNUAQsz2inv98mraZyRv9/TpqyPa4=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:90:9d:e8:48:8d:fc:85:e6:b4:0d:c5:65:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Sep 21 11:00:09 2026 GMT
Not After : Sep 22 11:00:09 2026 GMT
Subject: CN=e1d3ead4de6dd0b193c9aa1f0841c975683ecafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:14:51:21:4e:3d:41:68:2f:26:b3:63:fe:
1f:54:f9:bc:39:94:62:3e:4a:03:df:36:57:9c:55:
f4:14:ff:3b:7f:04:d5:3f:13:6b:0e:6f:f9:be:b3:
e7:67:14:df:b4:eb:e2:30:1e:77:1b:1c:05:0a:03:
b6:59:20:38:43:96:b3:0a:7a:9a:70:c9:d0:3f:6b:
16:10:19:36:03:32:21:23:a3:53:57:20:68:0d:51:
2b:95:56:f0:1a:15:c9:78:03:b9:dd:d1:b6:7a:f9:
10:0e:69:24:be:92:c4:c2:20:95:1e:0c:70:f1:59:
b9:34:3e:05:68:b2:ab:d1:67:31:4a:1e:75:92:e0:
d0:34:91:8e:c7:d0:07:05:23:8a:14:77:55:6a:b2:
46:e0:97:3a:19:02:bd:1e:15:69:aa:55:8b:d6:c3:
5b:2b:f0:4b:f7:56:1e:a9:36:87:3c:ba:0b:b7:d7:
db:9d:ad:09:f1:1a:70:b0:6a:f1:8f:13:b7:31:f2:
c4:59:b2:ad:bd:08:28:37:47:12:e7:c2:44:38:86:
66:e0:ad:06:bc:45:fd:4d:93:49:2d:9e:7c:a0:60:
b0:ae:bc:1e:e9:d3:1f:26:9c:72:7c:01:b9:f1:7c:
aa:da:18:45:79:b8:29:f2:2f:fe:d9:a0:b0:39:94:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:EA:D4:DE:6D:D0:B1:93:C9:AA:1F:08:41:C9:75:68:3E:CA:FD
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:2a:cf:5f:46:4d:65:d9:b2:b2:53:0f:28:e9:a3:a0:95:
64:24:d3:aa:c5:eb:5c:86:94:e5:a3:23:f8:1f:b3:35:ce:f9:
0b:8a:d3:b3:25:e4:da:ff:c2:3a:8e:5f:e8:46:7e:82:89:42:
1f:ca:00:77:1a:c6:ba:4a:1c:51:4d:26:ee:b3:cb:f3:bc:cc:
94:4d:b8:7f:d5:56:a7:f6:7e:4e:46:10:cd:e3:37:fd:4d:71:
6e:22:8b:7d:c6:d8:5b:42:bd:d7:4e:5b:84:a9:44:71:46:60:
90:2d:f0:cd:f7:4a:6c:c9:9d:81:7e:f9:ab:60:6f:ce:4f:12:
9e:da:d2:b6:4c:81:7a:3c:20:ce:28:87:1f:06:96:10:27:07:
76:5a:c9:db:96:cb:58:63:df:97:74:de:80:b1:2e:d7:3e:08:
7b:70:a1:1d:1a:d7:50:20:98:10:e7:bd:47:4f:9f:f6:f0:74:
c2:d6:e2:98:fb:83:8e:b1:9d:63:96:3a:18:de:48:39:b9:8d:
23:8e:0e:68:55:b1:35:8c:0e:0f:e0:ec:1f:5f:be:50:90:d5:
50:f9:83:22:ee:e6:bf:5e:12:d4:56:1d:ca:c7:35:c4:34:71:
78:44:8e:cb:a9:70:f4:c0:8d:4b:04:a6:43:35:2b:ca:b4:e6:
e9:43:c9:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn5Cd6EiN/IXmtA3FZZhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5
MzAyZmQwHhcNMjYwOTIxMTEwMDA5WhcNMjYwOTIyMTEwMDA5WjAzMTEwLwYDVQQD
EyhlMWQzZWFkNGRlNmRkMGIxOTNjOWFhMWYwODQxYzk3NTY4M2VjYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hsUUSFOPUFoLyazY/4fVPm8OZRi
PkoD3zZXnFX0FP87fwTVPxNrDm/5vrPnZxTftOviMB53GxwFCgO2WSA4Q5azCnqa
cMnQP2sWEBk2AzIhI6NTVyBoDVErlVbwGhXJeAO53dG2evkQDmkkvpLEwiCVHgxw
8Vm5ND4FaLKr0WcxSh51kuDQNJGOx9AHBSOKFHdVarJG4Jc6GQK9HhVpqlWL1sNb
K/BL91YeqTaHPLoLt9fbna0J8RpwsGrxjxO3MfLEWbKtvQgoN0cS58JEOIZm4K0G
vEX9TZNJLZ58oGCwrrwe6dMfJpxyfAG58Xyq2hhFebgp8i/+2aCwOZQJRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHT6tTebdCxk8mqHwhByXVoPsr9MB8GA1UdIwQY
MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt
Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5
LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSgqz19G
TWXZsrJTDyjpo6CVZCTTqsXrXIaU5aMj+B+zNc75C4rTsyXk2v/COo5f6EZ+golC
H8oAdxrGukocUU0m7rPL87zMlE24f9VWp/Z+TkYQzeM3/U1xbiKLfcbYW0K9105b
hKlEcUZgkC3wzfdKbMmdgX75q2Bvzk8SntrStkyBejwgziiHHwaWECcHdlrJ25bL
WGPfl3TegLEu1z4Ie3ChHRrXUCCYEOe9R0+f9vB0wtbimPuDjrGdY5Y6GN5IObmN
I44OaFWxNYwOD+DsH1++UJDVUPmDIu7mv14S1FYdysc1xDRxeESOy6lw9MCNSwSm
QzUryrTm6UPJkg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:37 2026 by rpki-client