Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: aNsCSF8v+QJIDTdmP6DyHtlzUhGq1NQ1sq7GnJmybYw=
Subject key identifier: C9:71:F8:8B:57:66:28:CA:24:23:98:38:DC:AE:01:DF:25:BD:54:0F
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 01A0D4CB8A69449DBD5DD815A827216196C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 023C
Signing time: Thu 24 Sep 2026 19:01:43 +0000
Manifest this update: Thu 24 Sep 2026 19:01:43 +0000
Manifest next update: Fri 25 Sep 2026 19:01:43 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: 6+94GRkqefk18ax5j5RiUX9s3/Ohnt4Sb8o8EPnYdvo=)
2: RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa (hash: npb1ZPrAdc0F36Du7VzbNSITtgjkjYoCxnKV2J1JMgg=)
3: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:8a:69:44:9d:bd:5d:d8:15:a8:27:21:61:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Sep 24 19:01:43 2026 GMT
Not After : Sep 25 19:01:43 2026 GMT
Subject: CN=c971f88b576628ca24239838dcae01df25bd540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:c7:e6:1b:f3:ae:68:e1:8a:4c:f3:3f:01:
a8:72:7b:7d:7b:f2:8c:0d:71:34:7a:47:56:f9:19:
c7:15:81:54:63:bd:5e:db:7e:24:e6:a8:24:54:4a:
c3:6b:fb:34:f3:0b:9f:19:77:a7:db:49:89:2f:1a:
b7:76:85:e2:99:ba:47:26:6f:96:46:17:c7:84:3f:
23:62:d9:a3:cc:2e:81:88:aa:94:af:23:f3:3b:71:
45:95:90:57:02:2e:e5:f4:76:d7:a0:b9:e1:e5:88:
6f:c5:59:98:2a:5c:85:5c:f6:d6:0d:9f:f3:e7:a2:
af:9a:11:38:dc:a3:e6:e2:74:4b:1f:24:ed:2f:83:
82:13:6b:f7:80:47:c0:8d:e0:3c:ba:85:67:9d:b0:
85:a0:60:d9:dd:5b:fd:2b:65:00:e2:a8:32:f3:40:
75:b5:cf:42:56:9c:8f:df:67:6f:5d:83:f3:b1:c7:
9e:87:ea:58:fb:6d:28:ce:e4:90:d4:4e:4b:c1:34:
c1:f5:a4:70:b7:5c:43:a6:a2:9b:77:44:ee:bf:ce:
52:fc:cb:48:0b:0e:3b:d9:50:d1:44:6c:35:c9:9f:
ac:11:66:eb:11:f3:8e:ad:02:ca:d8:13:c5:c3:68:
50:d3:ef:eb:aa:fa:69:56:fa:95:ea:7b:0e:e3:fd:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:F8:8B:57:66:28:CA:24:23:98:38:DC:AE:01:DF:25:BD:54:0F
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:db:8e:c8:60:f8:be:88:81:ca:cd:87:25:2d:2f:c3:36:
fc:16:57:dc:c6:ed:95:b7:3a:a7:61:53:e5:79:0c:a5:87:68:
67:b4:74:39:ed:e1:ab:dd:00:49:87:fa:ff:2e:c3:29:18:e1:
21:e6:f8:07:01:24:10:0d:d1:37:39:d0:03:60:ef:53:dd:81:
b1:36:3f:91:2c:ca:cf:b1:36:ae:37:9d:bb:9a:51:84:c7:2c:
77:a4:6e:5a:14:96:60:53:12:c5:46:08:f6:67:9a:fb:5d:a9:
18:a6:19:67:ce:e9:be:14:e2:63:95:2e:47:38:d5:70:f7:cd:
61:bf:da:1d:06:19:b9:e6:3d:4b:ff:a9:ac:b7:56:ba:60:10:
8e:82:ec:2c:a1:e5:33:b6:f8:0d:3a:6a:be:5e:72:b5:1c:15:
79:d4:80:a8:22:4a:ff:a8:30:23:4c:92:9a:6d:97:13:f8:dd:
8e:98:02:c6:bd:7f:2d:a6:84:22:04:ba:90:11:14:f0:26:9c:
d7:a7:ad:f5:34:a1:57:87:3a:ef:9b:15:fc:24:bb:28:f7:a3:
78:e6:65:8a:e1:cd:e0:75:56:d0:4c:bd:02:88:77:71:4b:15:
20:d5:c6:24:23:45:06:9e:34:3a:0d:99:92:e9:f4:60:85:77:
a3:26:69:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy4ppRJ29XdgVqCchYZbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBkZDI0NmY0MmI3YjM2NjgwNGNlOGQ4MDg0YWQzOTNk
MjFjNjMwHhcNMjYwOTI0MTkwMTQzWhcNMjYwOTI1MTkwMTQzWjAzMTEwLwYDVQQD
EyhjOTcxZjg4YjU3NjYyOGNhMjQyMzk4MzhkY2FlMDFkZjI1YmQ1NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsXH5hvzrmjhikzzPwGocnt9e/KM
DXE0ekdW+RnHFYFUY71e234k5qgkVErDa/s08wufGXen20mJLxq3doXimbpHJm+W
RhfHhD8jYtmjzC6BiKqUryPzO3FFlZBXAi7l9HbXoLnh5YhvxVmYKlyFXPbWDZ/z
56KvmhE43KPm4nRLHyTtL4OCE2v3gEfAjeA8uoVnnbCFoGDZ3Vv9K2UA4qgy80B1
tc9CVpyP32dvXYPzsceeh+pY+20ozuSQ1E5LwTTB9aRwt1xDpqKbd0Tuv85S/MtI
Cw472VDRRGw1yZ+sEWbrEfOOrQLK2BPFw2hQ0+/rqvppVvqV6nsO4/1TmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlx+ItXZijKJCOYONyuAd8lvVQPMB8GA1UdIwQY
MBaAFNsw3SRvQrezZoBM6NgIStOT0hxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYt
N2IwY2UzMjZiZGVhLzEvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYtN2IwY2UzMjZiZGVh
LzEvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApK/bjshg
+L6IgcrNhyUtL8M2/BZX3Mbtlbc6p2FT5XkMpYdoZ7R0Oe3hq90ASYf6/y7DKRjh
Ieb4BwEkEA3RNznQA2DvU92BsTY/kSzKz7E2rjedu5pRhMcsd6RuWhSWYFMSxUYI
9mea+12pGKYZZ87pvhTiY5UuRzjVcPfNYb/aHQYZueY9S/+prLdWumAQjoLsLKHl
M7b4DTpqvl5ytRwVedSAqCJK/6gwI0ySmm2XE/jdjpgCxr1/LaaEIgS6kBEU8Cac
16et9TShV4c675sV/CS7KPejeOZliuHN4HVW0Ey9Aoh3cUsVINXGJCNFBp40Og2Z
kun0YIV3oyZpjw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:02:06 2026 by rpki-client