Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: AjvphUNIA1dTGpEqHlz/u1hPYHlM+yarxRSCGNqnZJg=
Subject key identifier: B1:B6:64:AE:7F:04:33:42:26:BA:14:05:71:EC:1B:55:B2:F7:CF:C2
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01A0C4B2696F9DBD3EE721859B1BEA3F36ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 16:00:21 +0000
Manifest this update: Mon 21 Sep 2026 16:00:21 +0000
Manifest next update: Tue 22 Sep 2026 16:00:21 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: 6bE7eQeMFQZ4m+Ap87gyJVqEhjTgpxgqnp+zKI9TfkU=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:69:6f:9d:bd:3e:e7:21:85:9b:1b:ea:3f:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Sep 21 16:00:21 2026 GMT
Not After : Sep 22 16:00:21 2026 GMT
Subject: CN=b1b664ae7f04334226ba140571ec1b55b2f7cfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:ce:81:b5:bc:97:5e:17:d1:52:a7:7f:6f:
3f:ee:2c:de:e3:24:dd:ce:21:0b:7a:62:55:73:8d:
6d:95:7d:5a:7a:74:1e:9b:f2:94:76:67:e8:13:b6:
86:1f:33:a7:54:78:fd:4b:67:52:ce:9a:34:9c:a3:
19:43:31:9e:92:e4:a7:2e:f1:55:9c:c5:7d:fd:ea:
5f:3f:b9:dc:e1:4b:f4:27:98:39:cb:22:a6:81:f1:
86:f5:25:04:e3:ee:ed:7b:6e:89:e1:78:e8:30:61:
2b:d2:ef:ac:d0:1b:51:13:d7:b7:10:4e:e2:91:64:
27:b0:db:7e:54:e6:b1:88:08:e7:30:6e:14:2e:a4:
4f:25:fb:a0:91:95:ac:23:77:d6:a9:df:f0:64:7e:
a2:a3:85:8c:b5:af:ee:e6:79:a4:f1:f9:13:47:33:
ce:4e:79:b5:21:21:6b:75:26:1c:11:a6:bf:f6:0b:
0b:ba:9f:d0:55:7b:87:07:0c:af:14:1a:c0:fb:c5:
a0:09:bc:c7:cd:90:8e:92:99:1d:43:e8:4e:17:3e:
c2:c7:0c:e1:86:d1:be:a6:bc:69:d2:72:19:77:1d:
ac:ba:7e:2e:16:77:b4:05:63:3c:0a:c0:ce:ec:4d:
5b:7f:03:fe:54:c2:2d:32:00:a0:db:88:e0:5c:21:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:64:AE:7F:04:33:42:26:BA:14:05:71:EC:1B:55:B2:F7:CF:C2
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d6:1b:0e:13:99:da:22:27:ab:34:8b:34:3a:05:8b:c2:7c:
84:d3:89:2f:8e:99:f6:bd:a6:67:67:f0:e8:6a:8b:65:73:5d:
b2:be:d7:07:83:20:46:b8:2a:2a:e8:47:11:cf:9e:41:fc:e6:
ed:e1:80:40:73:47:b4:e9:64:b7:41:73:b9:da:f7:88:7a:64:
6f:ba:0d:bb:61:91:09:a6:e2:d4:a0:7f:3a:bc:df:89:89:96:
a1:b1:17:6f:70:dc:c4:01:8e:01:79:93:d8:88:5c:16:49:32:
87:7c:45:92:ba:9d:25:44:ea:11:d0:07:89:9e:33:c2:2b:1c:
b0:0b:71:ec:fc:76:9a:24:10:7a:33:11:bd:7f:33:7a:47:91:
90:ce:f2:a7:1c:4e:59:b8:76:79:23:6b:1f:7a:d4:77:d7:07:
f8:c4:02:73:b1:88:05:ff:f2:53:4c:29:a4:64:10:e4:89:77:
b4:f9:d5:e6:d1:0f:19:c2:85:ab:88:58:e2:4b:93:40:23:1b:
63:40:c7:8e:ef:44:36:47:a2:c0:9b:85:ef:d7:dd:e1:c6:b8:
85:94:5f:b1:00:c8:7f:6b:b5:9b:9f:e7:d0:25:7c:66:ac:31:
5f:25:69:e9:d9:b5:0d:34:57:94:71:86:f5:bb:0a:8a:6c:af:
8e:bf:59:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEsmlvnb0+5yGFmxvqPzbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1
ZDg3NzEwHhcNMjYwOTIxMTYwMDIxWhcNMjYwOTIyMTYwMDIxWjAzMTEwLwYDVQQD
EyhiMWI2NjRhZTdmMDQzMzQyMjZiYTE0MDU3MWVjMWI1NWIyZjdjZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsujOgbW8l14X0VKnf28/7ize4yTd
ziELemJVc41tlX1aenQem/KUdmfoE7aGHzOnVHj9S2dSzpo0nKMZQzGekuSnLvFV
nMV9/epfP7nc4Uv0J5g5yyKmgfGG9SUE4+7te26J4XjoMGEr0u+s0BtRE9e3EE7i
kWQnsNt+VOaxiAjnMG4ULqRPJfugkZWsI3fWqd/wZH6io4WMta/u5nmk8fkTRzPO
Tnm1ISFrdSYcEaa/9gsLup/QVXuHBwyvFBrA+8WgCbzHzZCOkpkdQ+hOFz7Cxwzh
htG+prxp0nIZdx2sun4uFne0BWM8CsDO7E1bfwP+VMItMgCg24jgXCHGxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG2ZK5/BDNCJroUBXHsG1Wy98/CMB8GA1UdIwQY
MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt
YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz
LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0tYbDhOZ
2iInqzSLNDoFi8J8hNOJL46Z9r2mZ2fw6GqLZXNdsr7XB4MgRrgqKuhHEc+eQfzm
7eGAQHNHtOlkt0Fzudr3iHpkb7oNu2GRCabi1KB/OrzfiYmWobEXb3DcxAGOAXmT
2IhcFkkyh3xFkrqdJUTqEdAHiZ4zwiscsAtx7Px2miQQejMRvX8zekeRkM7ypxxO
Wbh2eSNrH3rUd9cH+MQCc7GIBf/yU0wppGQQ5Il3tPnV5tEPGcKFq4hY4kuTQCMb
Y0DHju9ENkeiwJuF79fd4ca4hZRfsQDIf2u1m5/n0CV8ZqwxXyVp6dm1DTRXlHGG
9bsKimyvjr9Z2Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:58:22 2026 by rpki-client