Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json)
Hash identifier: 7zkvCv3yhpLAi002RolgVWINL8odyMxs+87Nv1GuMCE=
Subject key identifier: 99:93:54:F4:54:EA:D4:4B:12:DF:31:AF:54:96:19:80:24:43:A1:B6
Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Certificate serial: 01A0CCA316BC0AA87A7EE96351FA9DA8AC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
Manifest number: 0347
Signing time: Wed 23 Sep 2026 05:00:35 +0000
Manifest this update: Wed 23 Sep 2026 05:00:35 +0000
Manifest next update: Thu 24 Sep 2026 05:00:35 +0000
Files and hashes: 1: 0AzcAjUT9N1QB5cI07RUAHonZOs.roa (hash: g0trIEnIrBs+QaX8y9UPsVa9Dhsva7/upARrEo7U33o=)
2: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: WVDe1Er2S7z9hbnBKgo2lmu+C3ymDsQqlYFwuFCGdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:16:bc:0a:a8:7a:7e:e9:63:51:fa:9d:a8:ac:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Validity
Not Before: Sep 23 05:00:35 2026 GMT
Not After : Sep 24 05:00:35 2026 GMT
Subject: CN=999354f454ead44b12df31af549619802443a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:0a:9b:d3:84:8b:bd:3a:33:29:8c:21:f6:
ea:8e:ae:0a:89:db:28:b4:70:23:19:8a:2c:e4:e5:
9d:fc:79:85:5d:23:f7:9a:97:00:7a:2f:51:7a:72:
10:6e:1a:dc:13:54:98:35:89:b3:5f:0d:56:15:74:
05:e3:3e:69:69:f6:77:09:9b:1d:0e:d4:6a:56:10:
c4:17:31:8e:f2:c2:6c:10:ef:31:83:54:c6:cd:15:
38:46:25:3e:97:64:3a:33:13:45:62:34:9d:90:d6:
56:2a:ac:db:f8:5d:42:d3:65:2f:58:f7:9c:b7:ae:
d9:5a:cb:30:06:df:b4:e0:2b:7f:f2:7e:71:d1:c7:
04:6a:36:5b:7a:c0:93:c0:1d:bf:b9:ff:1f:73:80:
3f:f2:99:bf:bc:84:58:2b:52:b2:17:3d:89:cb:77:
c6:da:50:f1:54:e8:2c:91:fb:d1:78:ad:ed:28:92:
7f:c5:36:70:e4:f1:77:0b:b1:7f:02:f1:4d:3a:43:
45:4a:74:fc:87:7b:4c:e1:e2:46:99:05:bc:03:cc:
1b:cd:eb:88:5e:f4:cf:df:6e:03:10:df:63:1f:aa:
f9:33:96:e1:b2:ca:b7:37:05:c1:41:8e:b5:db:9c:
df:fa:c1:09:9a:1b:17:5a:b1:23:13:57:d5:c8:70:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:54:F4:54:EA:D4:4B:12:DF:31:AF:54:96:19:80:24:43:A1:B6
X509v3 Authority Key Identifier:
keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:5a:76:5d:e6:c5:ad:32:53:bf:84:f3:b6:3f:84:c7:a0:
eb:ef:0a:55:54:da:fc:4a:34:3b:55:ba:e0:98:7c:a5:bc:1b:
33:fb:d2:27:49:21:b4:cd:70:32:5d:4c:1a:24:6e:12:a6:4a:
2c:5b:65:b0:c6:e2:4f:51:c7:57:ac:75:f9:12:ea:1c:c7:77:
d6:a3:83:66:98:d5:0c:83:99:d7:d1:d3:32:e6:b7:d8:98:79:
01:c3:8f:0b:71:96:2d:60:cd:33:77:ed:3a:48:d0:31:01:92:
7b:c2:55:f2:c4:68:5e:c6:00:0a:10:d0:b8:97:8f:07:fb:df:
ab:ed:8e:63:95:2c:36:8f:40:c2:7f:1d:2a:18:21:bf:da:0c:
fb:fe:c5:f1:e7:41:58:da:63:dd:c2:ac:f2:82:29:63:58:ed:
2f:2e:2c:92:c3:48:bb:5e:39:00:5e:df:8f:59:64:14:7f:95:
f7:58:bf:f1:df:b7:30:b8:f4:00:12:55:11:6e:79:45:64:a4:
85:51:14:22:cb:53:86:8e:4c:b6:75:9d:ec:93:bc:7e:1c:89:
ec:ca:31:c9:46:c3:f6:82:3f:25:de:62:56:12:ac:d3:21:7b:
45:0b:27:2d:1e:8b:d0:f8:36:89:fe:b4:49:3b:aa:4e:30:c1:
fd:4d:c2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMoxa8Cqh6fuljUfqdqKwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDNhMmMwY2IyNTNjZjliMzMzNWYwZTM1YTcwOGQ5YWU5
ZmM5ODYwHhcNMjYwOTIzMDUwMDM1WhcNMjYwOTI0MDUwMDM1WjAzMTEwLwYDVQQD
Eyg5OTkzNTRmNDU0ZWFkNDRiMTJkZjMxYWY1NDk2MTk4MDI0NDNhMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BkKm9OEi706MymMIfbqjq4Kidso
tHAjGYos5OWd/HmFXSP3mpcAei9RenIQbhrcE1SYNYmzXw1WFXQF4z5pafZ3CZsd
DtRqVhDEFzGO8sJsEO8xg1TGzRU4RiU+l2Q6MxNFYjSdkNZWKqzb+F1C02UvWPec
t67ZWsswBt+04Ct/8n5x0ccEajZbesCTwB2/uf8fc4A/8pm/vIRYK1KyFz2Jy3fG
2lDxVOgskfvReK3tKJJ/xTZw5PF3C7F/AvFNOkNFSnT8h3tM4eJGmQW8A8wbzeuI
XvTP324DEN9jH6r5M5bhssq3NwXBQY6125zf+sEJmhsXWrEjE1fVyHA3GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmTVPRU6tRLEt8xr1SWGYAkQ6G2MB8GA1UdIwQY
MBaAFNgDosDLJTz5szNfDjWnCNmun8mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAt
OGUyZDIxMmNlZmVmLzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAtOGUyZDIxMmNlZmVm
LzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5Radl3m
xa0yU7+E87Y/hMeg6+8KVVTa/Eo0O1W64Jh8pbwbM/vSJ0khtM1wMl1MGiRuEqZK
LFtlsMbiT1HHV6x1+RLqHMd31qODZpjVDIOZ19HTMua32Jh5AcOPC3GWLWDNM3ft
OkjQMQGSe8JV8sRoXsYAChDQuJePB/vfq+2OY5UsNo9Awn8dKhghv9oM+/7F8edB
WNpj3cKs8oIpY1jtLy4sksNIu145AF7fj1lkFH+V91i/8d+3MLj0ABJVEW55RWSk
hVEUIstTho5MtnWd7JO8fhyJ7MoxyUbD9oI/Jd5iVhKs0yF7RQsnLR6L0Pg2if60
STuqTjDB/U3CXw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:42 2026 by rpki-client