Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: Zvnua+CxkE/XlCPWIexH9CZO2wOWHaoav14PNOMPrF0=
Subject key identifier: 18:16:03:04:0E:D0:F1:2F:3B:DC:A8:4B:53:05:B5:94:7C:E0:64:0F
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01A0C2FAC6EBC8513D633165CF4F0C9CF3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1409
Signing time: Mon 21 Sep 2026 08:00:09 +0000
Manifest this update: Mon 21 Sep 2026 08:00:09 +0000
Manifest next update: Tue 22 Sep 2026 08:00:09 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: /w0HEwQOOVLqqVJZJxeAsy6lM4geh8aqeSeRXEd9q2Y=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:c6:eb:c8:51:3d:63:31:65:cf:4f:0c:9c:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Sep 21 08:00:09 2026 GMT
Not After : Sep 22 08:00:09 2026 GMT
Subject: CN=181603040ed0f12f3bdca84b5305b5947ce0640f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:8c:45:4d:f9:59:ef:56:19:4e:ee:02:57:
34:4b:8d:5f:00:4f:fc:0c:8c:93:de:c1:7b:f6:fd:
3e:b3:31:19:0b:61:70:1e:5c:4d:f1:6c:1c:b4:fe:
e7:e4:17:b3:1e:6c:4f:14:37:59:b9:f4:3e:2c:3f:
4e:e1:b6:bd:26:dd:4a:ad:7f:43:b7:c9:8b:9d:50:
5f:d2:0c:ff:a7:89:15:9e:b0:95:42:78:2e:ec:75:
a0:ab:bf:77:03:95:06:2b:8c:20:6f:e3:05:5c:68:
7d:6c:0c:8c:3e:5b:6a:2d:50:54:c9:bf:3d:8a:99:
d2:f1:2e:c2:7d:dc:b2:2e:70:54:cc:ed:8b:29:2d:
da:d2:69:3b:41:d0:c5:22:b5:ff:49:1d:b5:b0:3f:
f3:dd:58:de:a6:96:3c:fb:24:59:4e:1c:48:99:f7:
57:d3:b5:eb:27:84:8b:b2:d9:83:75:d4:ec:77:c8:
d7:e5:6b:e1:17:e6:c6:07:6a:8d:f8:71:02:3b:d5:
86:77:8c:78:69:d9:da:e8:89:91:c4:76:c4:e2:db:
61:fe:a7:88:81:6e:93:8b:10:67:77:d6:d6:02:7d:
d8:9e:f5:08:3b:5e:25:ef:10:f6:1d:a4:ed:64:5c:
ae:80:23:dd:28:5d:20:3a:01:8d:17:05:4e:78:88:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:03:04:0E:D0:F1:2F:3B:DC:A8:4B:53:05:B5:94:7C:E0:64:0F
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:2f:3b:7f:c6:56:35:87:5f:39:59:47:18:2a:70:24:9d:
ee:29:a6:2a:79:36:e0:20:3e:68:5f:58:f8:da:7c:55:c5:ac:
28:fc:bb:ad:9c:eb:09:22:ad:fe:2f:8a:cc:85:1b:4a:93:52:
89:20:c8:3e:1e:c9:84:ee:3c:27:da:85:7a:0f:43:59:b8:15:
15:d5:04:dd:89:fc:26:0c:fe:6e:fa:e5:8c:77:57:22:14:09:
4b:22:23:4f:bf:82:ba:5c:0e:d1:65:8c:f4:60:88:5c:1d:7c:
9b:58:a4:e9:cf:67:b4:92:28:eb:ef:75:2e:cc:fa:51:3a:7c:
58:bb:6d:2f:83:01:30:01:33:0f:b0:75:a9:78:c5:8c:e2:61:
9f:72:be:c1:df:3d:f8:78:4f:8b:19:93:ad:ed:23:10:1c:f6:
95:12:26:b7:24:b6:f5:80:59:e3:41:0c:1c:20:56:4b:f6:4b:
bb:f2:f3:4b:e4:76:b6:f6:bc:38:12:29:91:4d:9a:30:fa:fb:
87:43:e0:40:5e:3d:fd:d1:a4:aa:8b:05:30:52:5e:39:db:5a:
87:ed:70:bc:a2:ad:a9:c1:44:34:de:90:04:00:70:7e:7c:94:
d5:01:89:bf:cb:16:00:2f:fc:de:39:f0:6d:e4:95:c4:85:54:
57:d7:26:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+sbryFE9YzFlz08MnPP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjYwOTIxMDgwMDA5WhcNMjYwOTIyMDgwMDA5WjAzMTEwLwYDVQQD
EygxODE2MDMwNDBlZDBmMTJmM2JkY2E4NGI1MzA1YjU5NDdjZTA2NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p2MRU35We9WGU7uAlc0S41fAE/8
DIyT3sF79v0+szEZC2FwHlxN8WwctP7n5BezHmxPFDdZufQ+LD9O4ba9Jt1KrX9D
t8mLnVBf0gz/p4kVnrCVQngu7HWgq793A5UGK4wgb+MFXGh9bAyMPltqLVBUyb89
ipnS8S7CfdyyLnBUzO2LKS3a0mk7QdDFIrX/SR21sD/z3VjeppY8+yRZThxImfdX
07XrJ4SLstmDddTsd8jX5WvhF+bGB2qN+HECO9WGd4x4adna6ImRxHbE4tth/qeI
gW6TixBnd9bWAn3YnvUIO14l7xD2HaTtZFyugCPdKF0gOgGNFwVOeIgcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgWAwQO0PEvO9yoS1MFtZR84GQPMB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv8vO3/G
VjWHXzlZRxgqcCSd7immKnk24CA+aF9Y+Np8VcWsKPy7rZzrCSKt/i+KzIUbSpNS
iSDIPh7JhO48J9qFeg9DWbgVFdUE3Yn8Jgz+bvrljHdXIhQJSyIjT7+CulwO0WWM
9GCIXB18m1ik6c9ntJIo6+91Lsz6UTp8WLttL4MBMAEzD7B1qXjFjOJhn3K+wd89
+HhPixmTre0jEBz2lRImtyS29YBZ40EMHCBWS/ZLu/LzS+R2tva8OBIpkU2aMPr7
h0PgQF49/dGkqosFMFJeOdtah+1wvKKtqcFENN6QBABwfnyU1QGJv8sWAC/83jnw
beSVxIVUV9cmvg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:58 2026 by rpki-client