Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File: 2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier: zey3NqKKZ+jMsSAHgodkATD4hh2uDUQV3njMc7ab9I4=
Subject key identifier: 03:E8:A7:50:06:20:BA:5E:B1:2C:F4:DE:54:03:64:64:F6:BA:2E:42
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 01A0C2FB61F120BFFC5DB99FE6B4A746801B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number: 1A77
Signing time: Mon 21 Sep 2026 08:00:49 +0000
Manifest this update: Mon 21 Sep 2026 08:00:49 +0000
Manifest next update: Tue 22 Sep 2026 08:00:49 +0000
Files and hashes: 1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: 92iFzS7gH5ZnzkIW0e9j3wdJpWCuyQ5sF3LvwzR+lRs=)
2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
5: tvjO7d2OruGUM05e3v_9VK0Tnvg.roa (hash: av53I/iTLdQRU3qkC6MQBoQi4smDbLlIv8oPMv9ZXBY=)
6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:61:f1:20:bf:fc:5d:b9:9f:e6:b4:a7:46:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Sep 21 08:00:49 2026 GMT
Not After : Sep 22 08:00:49 2026 GMT
Subject: CN=03e8a7500620ba5eb12cf4de54036464f6ba2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:2e:01:a6:7b:6a:13:ee:8d:c7:19:64:39:
71:71:75:78:94:1a:e3:2b:7e:b1:54:f6:74:a2:1f:
7d:bd:bf:11:5f:af:e5:08:15:4b:e1:c6:b3:92:05:
38:a1:0d:22:2f:21:a6:53:f5:8c:fb:d5:22:55:f4:
fe:a3:83:e1:db:06:fb:78:53:f1:1a:10:60:a3:80:
42:51:57:54:a0:ee:eb:b8:94:8c:a5:1d:60:ad:23:
2d:e9:54:6a:87:00:85:ff:d4:60:c3:94:85:24:ba:
80:1f:4b:e9:42:8f:5d:2a:5c:89:81:4e:f9:19:15:
7e:46:2e:a5:81:cf:bf:86:47:49:3d:2d:75:d6:ee:
d4:74:30:3f:ac:0a:3d:d6:9b:d3:21:2c:ed:5b:0d:
8c:a2:96:70:e0:2d:34:47:f7:fd:94:75:06:ec:12:
8e:c7:62:35:f7:2e:aa:31:da:ab:1b:58:49:45:b5:
26:a8:07:ce:4e:0f:1b:8a:fc:2c:9c:89:87:df:4f:
6e:71:a4:51:b0:dd:1d:c0:fd:54:3f:53:6b:9e:6f:
69:14:5d:e9:f7:c4:05:d7:eb:1c:6b:63:3e:a4:24:
ee:4e:8b:af:00:91:48:d6:1e:fd:2e:2d:c4:86:63:
ec:e7:16:e3:1d:f1:67:37:89:6e:2d:7b:25:2a:6f:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:A7:50:06:20:BA:5E:B1:2C:F4:DE:54:03:64:64:F6:BA:2E:42
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:58:7c:e5:0d:b2:74:1b:7d:d2:62:f5:c2:ec:03:eb:64:73:
07:50:93:c9:da:42:5f:dc:55:62:90:d9:74:a9:d0:78:df:9b:
9d:40:d7:11:cc:49:a4:5d:4b:8d:81:2f:01:e9:16:ce:99:c4:
90:82:c8:d8:e8:bb:d8:f2:41:14:17:c2:45:e6:66:fa:86:46:
f1:9f:d6:bf:a9:1d:24:99:d2:a7:2e:c9:cf:70:e0:2d:3d:f7:
21:0f:31:1d:0f:2b:e9:f0:ed:a7:64:3b:bc:8f:97:ab:4d:da:
6e:60:fc:89:e0:6a:0b:24:7e:9e:56:c7:1e:31:4c:71:52:2d:
68:18:fd:64:5e:f4:84:43:bb:f4:3c:6b:e2:61:c0:4e:59:35:
f9:63:8d:82:30:2c:41:d9:88:22:98:d2:d6:ce:7b:9e:d7:d3:
79:1a:e8:e1:d8:fd:76:a7:b5:05:c9:56:be:04:84:93:0a:2f:
30:e4:1c:7a:c4:fe:56:88:60:76:8d:ca:56:b3:d7:4f:dd:cd:
8b:e8:93:0c:7a:92:7f:42:29:eb:78:ab:e6:b0:75:72:d8:b0:
b7:0f:da:67:53:e0:75:bb:f6:51:4a:c0:14:77:77:4a:ca:aa:
ca:0f:ce:0b:3b:35:69:dd:91:cd:89:71:80:f0:65:88:88:be:
13:16:d0:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+2HxIL/8Xbmf5rSnRoAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjYwOTIxMDgwMDQ5WhcNMjYwOTIyMDgwMDQ5WjAzMTEwLwYDVQQD
EygwM2U4YTc1MDA2MjBiYTVlYjEyY2Y0ZGU1NDAzNjQ2NGY2YmEyZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSguAaZ7ahPujccZZDlxcXV4lBrj
K36xVPZ0oh99vb8RX6/lCBVL4cazkgU4oQ0iLyGmU/WM+9UiVfT+o4Ph2wb7eFPx
GhBgo4BCUVdUoO7ruJSMpR1grSMt6VRqhwCF/9Rgw5SFJLqAH0vpQo9dKlyJgU75
GRV+Ri6lgc+/hkdJPS111u7UdDA/rAo91pvTISztWw2MopZw4C00R/f9lHUG7BKO
x2I19y6qMdqrG1hJRbUmqAfOTg8bivwsnImH309ucaRRsN0dwP1UP1Nrnm9pFF3p
98QF1+sca2M+pCTuTouvAJFI1h79Li3EhmPs5xbjHfFnN4luLXslKm/kjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPop1AGILpesSz03lQDZGT2ui5CMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVh85Q2y
dBt90mL1wuwD62RzB1CTydpCX9xVYpDZdKnQeN+bnUDXEcxJpF1LjYEvAekWzpnE
kILI2Oi72PJBFBfCReZm+oZG8Z/Wv6kdJJnSpy7Jz3DgLT33IQ8xHQ8r6fDtp2Q7
vI+Xq03abmD8ieBqCyR+nlbHHjFMcVItaBj9ZF70hEO79Dxr4mHATlk1+WONgjAs
QdmIIpjS1s57ntfTeRro4dj9dqe1BclWvgSEkwovMOQcesT+Vohgdo3KVrPXT93N
i+iTDHqSf0Ip63ir5rB1ctiwtw/aZ1Pgdbv2UUrAFHd3Ssqqyg/OCzs1ad2RzYlx
gPBliIi+ExbQrQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:26:55 2026 by rpki-client