Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: VCGw7h1zFub/LgnJXeG/XADbdHjgKghTuysUOIVouY8=
Subject key identifier: B8:F9:5F:8B:0F:DD:8D:5F:BB:5E:F8:1A:75:D6:65:3D:C2:9E:C3:FA
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 01A0CBFE71976CDBD81EA5BF251AF25A3005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 188E
Signing time: Wed 23 Sep 2026 02:00:44 +0000
Manifest this update: Wed 23 Sep 2026 02:00:44 +0000
Manifest next update: Thu 24 Sep 2026 02:00:44 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: KPM2DRgY2uyoOGuXmM3btuNIHWyy/t51nS78P/tjLKI=)
2: JKIhvk4nR2Yatg3LSMzcvAB5gDY.roa (hash: Wu8o0XpgB80LZ5YT5dratdi0qOmv7LG2bN4vwgSeFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:71:97:6c:db:d8:1e:a5:bf:25:1a:f2:5a:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Sep 23 02:00:44 2026 GMT
Not After : Sep 24 02:00:44 2026 GMT
Subject: CN=b8f95f8b0fdd8d5fbb5ef81a75d6653dc29ec3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:f4:75:19:a5:7b:06:ee:f6:df:dd:93:f2:
a8:9a:cd:ce:4f:58:6e:d5:59:4a:e1:3e:b2:21:6b:
27:b2:bd:f3:36:83:5e:fe:1f:1e:87:60:da:68:aa:
42:a4:06:b5:8d:3b:be:1c:21:7b:12:ae:8c:72:d4:
99:23:b2:02:40:b8:94:a4:07:c8:f4:e9:e2:cd:63:
19:1b:2f:3b:6f:da:e5:91:2c:88:70:7a:b5:83:37:
41:da:46:11:62:7d:39:96:65:e3:b9:3f:3d:0f:67:
1c:29:ea:a1:61:c5:27:67:33:72:ab:9f:da:54:7f:
a2:47:37:b7:c4:7c:d0:64:3c:4a:9d:cd:ee:52:24:
19:f2:37:65:0f:72:7a:cd:dd:67:6d:1e:f1:74:78:
da:6d:80:2d:ad:b4:39:b1:27:80:ed:2c:4d:9e:0c:
30:f2:2a:fb:fe:be:d7:97:9b:4f:fa:40:41:aa:b6:
67:c8:82:11:7b:f6:9c:2b:18:73:13:2a:65:24:57:
96:63:11:e5:b5:1a:48:dd:26:ce:06:b7:7d:25:fd:
58:d3:b0:89:bf:82:46:7e:d9:b0:53:6d:3c:c2:bb:
a6:6a:e5:96:f3:61:f4:43:75:88:36:77:1f:b9:63:
43:ae:9d:82:8d:62:97:4e:55:03:0d:1a:4c:c0:56:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:5F:8B:0F:DD:8D:5F:BB:5E:F8:1A:75:D6:65:3D:C2:9E:C3:FA
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:64:6e:1c:72:bd:64:41:32:e5:d4:14:8a:b2:33:0e:b0:
50:fd:d7:86:c3:79:77:d2:7b:eb:0b:5d:c0:72:12:88:a5:8c:
85:75:a3:9d:62:51:a0:24:e2:2b:43:7a:5a:29:96:32:0f:90:
4b:5d:85:8c:3a:70:ea:2f:6a:f3:7a:26:13:c9:0e:68:de:1d:
61:95:7c:8b:af:b4:bf:08:92:d7:c7:06:39:bc:b6:9c:ac:d5:
a8:38:c9:1f:db:f9:b1:4d:1f:83:20:d8:77:8f:20:9f:6b:30:
07:8a:e1:af:e7:1f:a3:b5:26:c0:c6:66:ad:92:f2:ef:3f:7b:
a4:92:95:11:ca:7d:84:6b:b9:a1:02:81:d6:0e:12:0b:f7:51:
8a:80:ce:b8:db:94:74:b0:d3:67:c2:2e:52:3f:5f:3f:2a:3d:
2a:d6:9d:39:bc:89:0d:90:8f:1d:4d:a4:a2:6f:ba:3e:91:6c:
5c:12:1a:e5:58:ec:60:09:ce:eb:cd:15:77:98:6f:66:23:c0:
75:65:c5:80:50:b0:43:e3:65:ad:90:0a:46:f8:98:81:9e:31:
37:42:b1:88:aa:85:08:ea:d2:68:3f:5a:d6:7e:6e:0b:70:c7:
e0:83:51:be:2e:f0:49:77:48:c9:ff:f5:c3:ce:45:94:df:96:
7e:73:4f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/nGXbNvYHqW/JRryWjAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjYwOTIzMDIwMDQ0WhcNMjYwOTI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhiOGY5NWY4YjBmZGQ4ZDVmYmI1ZWY4MWE3NWQ2NjUzZGMyOWVjM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRz0dRmlewbu9t/dk/Koms3OT1hu
1VlK4T6yIWsnsr3zNoNe/h8eh2DaaKpCpAa1jTu+HCF7Eq6MctSZI7ICQLiUpAfI
9OnizWMZGy87b9rlkSyIcHq1gzdB2kYRYn05lmXjuT89D2ccKeqhYcUnZzNyq5/a
VH+iRze3xHzQZDxKnc3uUiQZ8jdlD3J6zd1nbR7xdHjabYAtrbQ5sSeA7SxNngww
8ir7/r7Xl5tP+kBBqrZnyIIRe/acKxhzEyplJFeWYxHltRpI3SbOBrd9Jf1Y07CJ
v4JGftmwU208wrumauWW82H0Q3WINncfuWNDrp2CjWKXTlUDDRpMwFa6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj5X4sP3Y1fu174GnXWZT3CnsP6MB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYZkbhxy
vWRBMuXUFIqyMw6wUP3XhsN5d9J76wtdwHISiKWMhXWjnWJRoCTiK0N6WimWMg+Q
S12FjDpw6i9q83omE8kOaN4dYZV8i6+0vwiS18cGOby2nKzVqDjJH9v5sU0fgyDY
d48gn2swB4rhr+cfo7UmwMZmrZLy7z97pJKVEcp9hGu5oQKB1g4SC/dRioDOuNuU
dLDTZ8IuUj9fPyo9KtadObyJDZCPHU2kom+6PpFsXBIa5VjsYAnO680Vd5hvZiPA
dWXFgFCwQ+NlrZAKRviYgZ4xN0KxiKqFCOrSaD9a1n5uC3DH4INRvi7wSXdIyf/1
w85FlN+WfnNPRg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:24:54 2026 by rpki-client