Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: X9RTM47WBgUX6Eq3mK8SylHAEI/quFuSs+C4JcVfXWk=
Subject key identifier: 7D:BD:CB:52:B1:55:E4:13:12:BA:E3:2D:CF:BB:90:1D:3B:BF:E7:A3
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01A0CEC80F5A959A89C002DF3F8E580C97B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 15:00:12 +0000
Manifest this update: Wed 23 Sep 2026 15:00:12 +0000
Manifest next update: Thu 24 Sep 2026 15:00:12 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: 7lQxdu9lYCPXLgQNzJzQsm/CJzLAm2cX9/XsXvLdh1o=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:0f:5a:95:9a:89:c0:02:df:3f:8e:58:0c:97:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Sep 23 15:00:12 2026 GMT
Not After : Sep 24 15:00:12 2026 GMT
Subject: CN=7dbdcb52b155e41312bae32dcfbb901d3bbfe7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:a0:ce:4e:67:51:d2:e2:57:68:49:40:b0:
36:ff:5a:68:07:71:6e:ee:09:7a:b0:ca:5d:95:b3:
8d:3d:c9:7c:0e:d3:cf:2c:d0:75:e8:40:f0:ac:17:
df:d4:f9:8d:5c:cf:19:92:8a:a2:fa:4a:21:01:fe:
e3:13:31:53:d6:ab:9a:06:f5:62:a4:2e:02:89:97:
11:fc:b6:6c:0b:a8:6e:d9:3f:37:63:99:16:b6:7d:
5a:3f:86:fb:5d:e8:78:71:36:cf:cd:bb:3c:3b:bd:
a7:60:92:3a:57:de:54:94:71:fb:99:ae:e4:f1:63:
24:31:1e:5d:3f:38:34:64:41:91:5b:11:1c:44:df:
96:da:4f:dc:48:c4:91:62:f4:ad:9c:12:80:b7:7b:
6d:c7:3a:3f:3c:65:e1:6e:1a:23:9e:f0:1d:cd:80:
e4:5a:a0:a0:8a:d4:72:3b:a2:29:4e:08:10:71:2d:
a1:62:0c:77:5e:ac:7d:70:a9:5f:5d:30:37:21:46:
04:93:1c:5a:95:f7:a6:ea:2d:e3:58:61:6c:79:f7:
8a:a5:2c:4b:1e:01:3e:82:43:f1:f6:b0:78:aa:c8:
4a:17:e8:cf:3c:45:97:ea:e1:3e:69:02:21:75:bc:
be:7c:a0:02:c8:0b:ef:2c:0f:f6:b0:c8:1b:c0:22:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:CB:52:B1:55:E4:13:12:BA:E3:2D:CF:BB:90:1D:3B:BF:E7:A3
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:42:49:9f:d4:8d:65:8a:6f:57:39:20:66:d9:24:27:77:
7d:88:1d:a4:b3:c0:3e:41:d3:49:97:f3:30:a9:63:2d:3b:eb:
53:67:81:6d:d0:e9:5d:8a:4a:d6:c2:63:d4:cb:69:26:9d:c9:
87:87:3a:99:03:79:bd:9e:aa:66:c8:0c:28:04:56:ad:c8:81:
ed:73:be:96:71:41:5a:ef:a9:9a:99:77:7b:76:86:21:59:35:
36:9d:e8:22:c2:a3:23:0c:c7:46:7a:1c:51:97:5a:1f:b5:8e:
c3:69:cc:c6:68:e1:e6:79:9b:7a:43:6c:68:2d:86:db:5f:6a:
71:67:13:2b:a2:d2:4a:f0:65:ca:6b:ad:0d:a2:c2:de:a7:f3:
01:61:ee:c7:49:08:dc:ef:d3:e0:c9:85:54:5d:41:64:d0:a5:
7c:c4:85:45:9b:96:87:05:fc:02:f6:fc:90:2a:6f:f2:9d:70:
3b:91:f9:ac:10:79:64:75:11:e4:60:20:36:ad:0e:ca:4d:79:
9b:7f:32:1b:99:f2:db:31:72:7a:d0:ab:ac:39:43:dd:c6:48:
a2:3b:1d:00:3d:06:37:15:08:2d:c1:bd:3b:65:dd:92:22:08:
cd:9c:65:e2:30:18:21:e0:1b:3b:00:10:d2:4a:91:9d:a8:21:
07:3f:e6:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyA9alZqJwALfP45YDJe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjYwOTIzMTUwMDEyWhcNMjYwOTI0MTUwMDEyWjAzMTEwLwYDVQQD
Eyg3ZGJkY2I1MmIxNTVlNDEzMTJiYWUzMmRjZmJiOTAxZDNiYmZlN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgGgzk5nUdLiV2hJQLA2/1poB3Fu
7gl6sMpdlbONPcl8DtPPLNB16EDwrBff1PmNXM8Zkoqi+kohAf7jEzFT1quaBvVi
pC4CiZcR/LZsC6hu2T83Y5kWtn1aP4b7Xeh4cTbPzbs8O72nYJI6V95UlHH7ma7k
8WMkMR5dPzg0ZEGRWxEcRN+W2k/cSMSRYvStnBKAt3ttxzo/PGXhbhojnvAdzYDk
WqCgitRyO6IpTggQcS2hYgx3Xqx9cKlfXTA3IUYEkxxalfem6i3jWGFsefeKpSxL
HgE+gkPx9rB4qshKF+jPPEWX6uE+aQIhdby+fKACyAvvLA/2sMgbwCL9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH29y1KxVeQTErrjLc+7kB07v+ejMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX9CSZ/U
jWWKb1c5IGbZJCd3fYgdpLPAPkHTSZfzMKljLTvrU2eBbdDpXYpK1sJj1MtpJp3J
h4c6mQN5vZ6qZsgMKARWrciB7XO+lnFBWu+pmpl3e3aGIVk1Np3oIsKjIwzHRnoc
UZdaH7WOw2nMxmjh5nmbekNsaC2G219qcWcTK6LSSvBlymutDaLC3qfzAWHux0kI
3O/T4MmFVF1BZNClfMSFRZuWhwX8Avb8kCpv8p1wO5H5rBB5ZHUR5GAgNq0Oyk15
m38yG5ny2zFyetCrrDlD3cZIojsdAD0GNxUILcG9O2XdkiIIzZxl4jAYIeAbOwAQ
0kqRnaghBz/mqQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:37:07 2026 by rpki-client