Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier: oXxcLg7h3NPoe1gWsCMR1/cstYN79ujfL3w3b4ES4io=
Subject key identifier: 06:40:74:21:64:19:C1:B6:99:53:88:3E:BC:71:9B:4E:CF:66:BF:C9
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer: /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial: 01A0C17B5B648ED2A5BB683C516675E261D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number: 086E
Signing time: Mon 21 Sep 2026 01:01:21 +0000
Manifest this update: Mon 21 Sep 2026 01:01:21 +0000
Manifest next update: Tue 22 Sep 2026 01:01:21 +0000
Files and hashes: 1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: WSykBHE8W/pIb/+5rdpS/FDhmAeaQt0KPVBz5jdrn0c=)
2: TCpyx_sVvP5JGxVQQH4mzcKulrU.asa (hash: rOUVgrvkKatP5Bi9OoZO4FGXksJVZPYhgmSbWckcqFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:5b:64:8e:d2:a5:bb:68:3c:51:66:75:e2:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Validity
Not Before: Sep 21 01:01:21 2026 GMT
Not After : Sep 22 01:01:21 2026 GMT
Subject: CN=064074216419c1b69953883ebc719b4ecf66bfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:7d:62:a7:06:f7:c2:59:b9:df:76:11:2b:
41:44:a0:53:01:45:f5:3d:3f:2d:86:73:ff:55:15:
66:fe:2d:c6:48:8c:5b:c4:f2:c4:8b:99:99:9f:b1:
e7:4d:2d:0e:05:72:cd:9c:eb:43:81:cd:a1:18:e0:
c2:73:be:7c:9b:fb:ff:d4:8a:4a:68:d7:39:7a:38:
99:e7:93:eb:8e:79:fa:eb:9e:b3:66:d7:6b:f6:1e:
15:d5:7d:ae:d5:7b:c3:c5:10:93:f2:94:cc:84:27:
6a:e5:6a:f1:21:ae:47:1a:6a:15:97:06:d2:a3:78:
f1:d8:45:15:27:7a:5d:63:8d:d2:4e:8a:14:c8:d4:
7f:4e:42:5c:2c:77:8d:52:27:34:cf:fc:5d:3b:76:
d3:ff:7d:09:88:32:b3:8a:f3:fb:98:3d:d1:5f:46:
fd:ff:4d:06:00:63:e0:21:66:4b:46:4f:e9:e3:8e:
e9:31:36:ae:d2:05:9f:e2:a2:e9:a7:84:8e:38:a9:
42:5b:7b:24:df:55:38:be:8a:42:41:90:ed:78:32:
b5:ae:4d:33:25:7b:53:39:a2:52:6a:99:88:6d:0c:
f4:81:c7:f0:88:d0:be:d5:80:9b:d4:19:c5:24:bf:
5a:22:ce:d7:0b:3d:83:e7:7b:cf:80:59:3c:98:61:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:74:21:64:19:C1:B6:99:53:88:3E:BC:71:9B:4E:CF:66:BF:C9
X509v3 Authority Key Identifier:
keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:f9:c2:97:6f:fc:39:f4:58:de:4b:cf:2b:f5:0c:f8:35:
37:c6:5f:15:21:f9:73:14:8b:84:c8:9e:10:ec:6a:79:0c:65:
33:b4:e9:23:a4:0a:a6:76:fb:ea:ff:2a:38:f7:f9:85:05:a0:
da:46:66:d2:39:d3:1e:8d:2d:da:21:e9:3c:f2:9c:f8:31:b2:
22:0d:6f:07:d1:ea:dd:01:3c:08:74:5f:6e:a8:b9:33:a9:4a:
56:c6:18:05:92:2c:95:87:95:36:2a:a3:aa:1c:8f:b6:a8:0c:
79:94:86:7e:5a:cf:6e:d9:31:aa:bf:6a:0e:bc:9c:1a:fd:b1:
7c:93:d1:94:6d:63:f2:a5:9f:e2:0a:55:09:bb:2b:dd:62:10:
91:13:98:6a:ac:51:84:a3:32:73:5e:e7:1b:29:f2:47:cd:0a:
bf:bb:d8:e6:50:27:69:35:f9:45:1a:61:c8:35:73:6f:b0:56:
30:ce:da:3b:86:6f:d5:d9:58:b0:9f:9f:7b:45:25:46:d5:78:
4b:61:d0:4a:9c:69:af:54:28:2b:17:c4:19:43:1e:90:68:c0:
2e:aa:f7:f8:ca:47:76:76:b7:f6:d1:5e:19:6a:11:b3:e8:89:
99:8b:e5:85:fa:d2:96:71:54:ba:84:b9:2e:b6:1e:54:e7:51:
d9:ae:c4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBe1tkjtKlu2g8UWZ14mHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTFkZDIyZjdlYWYyNzJiYzRiZjNlYmIxNTJkMzY0YmI0
ZDk3NTMwHhcNMjYwOTIxMDEwMTIxWhcNMjYwOTIyMDEwMTIxWjAzMTEwLwYDVQQD
EygwNjQwNzQyMTY0MTljMWI2OTk1Mzg4M2ViYzcxOWI0ZWNmNjZiZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4519YqcG98JZud92EStBRKBTAUX1
PT8thnP/VRVm/i3GSIxbxPLEi5mZn7HnTS0OBXLNnOtDgc2hGODCc758m/v/1IpK
aNc5ejiZ55Prjnn6656zZtdr9h4V1X2u1XvDxRCT8pTMhCdq5WrxIa5HGmoVlwbS
o3jx2EUVJ3pdY43STooUyNR/TkJcLHeNUic0z/xdO3bT/30JiDKzivP7mD3RX0b9
/00GAGPgIWZLRk/p447pMTau0gWf4qLpp4SOOKlCW3sk31U4vopCQZDteDK1rk0z
JXtTOaJSapmIbQz0gcfwiNC+1YCb1BnFJL9aIs7XCz2D53vPgFk8mGE+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZAdCFkGcG2mVOIPrxxm07PZr/JMB8GA1UdIwQY
MBaAFNgR3SL36vJyvEvz67FS02S7TZdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80NzYyYzYtNWVhZi00ZTdjLWE4MjQt
ZjcwYWRmMWRjMGZlLzEvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80NzYyYzYtNWVhZi00ZTdjLWE4MjQtZjcwYWRmMWRjMGZl
LzEvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXP5wpdv
/Dn0WN5Lzyv1DPg1N8ZfFSH5cxSLhMieEOxqeQxlM7TpI6QKpnb76v8qOPf5hQWg
2kZm0jnTHo0t2iHpPPKc+DGyIg1vB9Hq3QE8CHRfbqi5M6lKVsYYBZIslYeVNiqj
qhyPtqgMeZSGflrPbtkxqr9qDrycGv2xfJPRlG1j8qWf4gpVCbsr3WIQkROYaqxR
hKMyc17nGynyR80Kv7vY5lAnaTX5RRphyDVzb7BWMM7aO4Zv1dlYsJ+fe0UlRtV4
S2HQSpxpr1QoKxfEGUMekGjALqr3+MpHdna39tFeGWoRs+iJmYvlhfrSlnFUuoS5
LrYeVOdR2a7EfQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:20 2026 by rpki-client