Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
File: 2unfRXblxlT_VX2fm-ox8rZ3hgg.mft (raw, json)
Hash identifier: orsP2uD+48zogOHnPiFB3TY582eDv28zXj5JgoIHYlI=
Subject key identifier: BD:B8:7A:22:F1:3E:7C:BA:22:FA:61:FE:D3:17:92:B2:D7:8C:16:55
Authority key identifier: DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
Certificate issuer: /CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Certificate serial: 01A0D9BB3667D1F264F2CD87B1BCA21E23E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
Manifest number: 0153
Signing time: Fri 25 Sep 2026 18:01:59 +0000
Manifest this update: Fri 25 Sep 2026 18:01:59 +0000
Manifest next update: Sat 26 Sep 2026 18:01:59 +0000
Files and hashes: 1: 2unfRXblxlT_VX2fm-ox8rZ3hgg.crl (hash: 8RK6EncIGYP/Av9R5pvLOx8TEWQcT2U04SWDBauxc6A=)
2: TGOOYRcNmV295qXxS4iLaJusiBo.roa (hash: oqdkVui8+d5XgQplzUQ+/bNjoHy7U9CmnNlp4TiyCZ0=)
3: TaFHcEVpHBuOtmOo9bfUHF86wA8.roa (hash: W6pJRD0Lz0NwRk9iK9nsLKMeEmNlAixYW23qwf2NLk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:36:67:d1:f2:64:f2:cd:87:b1:bc:a2:1e:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Validity
Not Before: Sep 25 18:01:59 2026 GMT
Not After : Sep 26 18:01:59 2026 GMT
Subject: CN=bdb87a22f13e7cba22fa61fed31792b2d78c1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:c5:e1:06:c4:e4:f1:c3:fc:ba:64:34:90:
81:55:1e:4e:0b:2f:9e:72:15:3d:62:7a:55:f5:e2:
8c:24:05:42:45:3e:9b:a8:a5:48:87:53:4d:bb:88:
89:da:e8:c7:6f:21:96:a4:74:4a:27:43:52:eb:fb:
b7:62:f2:f9:98:c5:a8:95:d1:35:1b:a7:f8:6a:16:
0b:98:b6:47:c7:e8:00:50:3a:87:0a:8a:9d:48:7a:
e2:3d:f3:ba:93:06:e8:5c:8a:31:12:0d:5a:3c:6c:
ca:76:28:ea:e0:7c:82:55:59:4d:1d:ef:e9:36:05:
0b:b9:76:48:b8:a1:67:d3:d8:06:b1:b4:88:37:21:
39:6c:2c:8e:72:f2:e0:a1:24:ba:37:8a:4b:2f:d0:
7f:df:80:3f:1a:12:e7:1c:4c:0f:6a:52:b2:53:25:
32:ba:d3:45:31:5e:11:0e:b6:b5:0c:f6:df:fd:ec:
11:f0:44:f2:d9:90:46:a8:e8:00:08:d5:96:77:50:
76:56:91:8c:48:ba:5d:df:b7:fd:ce:fd:8f:32:d9:
34:17:7a:e8:6e:1b:69:3a:e2:d5:61:e9:9a:1a:0c:
c1:16:53:70:32:20:56:6d:c6:92:43:67:74:33:f3:
28:29:62:57:10:b5:49:30:e3:0e:c5:5e:87:a8:c7:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:7A:22:F1:3E:7C:BA:22:FA:61:FE:D3:17:92:B2:D7:8C:16:55
X509v3 Authority Key Identifier:
keyid:DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:d7:1a:c7:56:a9:e8:2b:e5:84:f6:3d:4b:34:cc:d1:7d:
09:57:7c:9a:8e:6f:cf:83:ac:8d:0e:ba:b0:8b:79:3e:c9:48:
f4:d8:64:fc:0a:0c:d8:a0:bb:c7:c6:a0:53:be:8d:cd:e4:63:
32:77:94:28:b6:f1:a3:54:e2:1c:1e:5d:9f:23:bf:f7:12:68:
29:c6:38:f4:13:4d:e6:c5:1b:a2:e4:44:20:50:ec:01:96:79:
09:14:ca:9e:14:fd:da:47:3a:4e:28:26:83:c2:b5:6d:49:47:
aa:09:14:bd:73:5d:3f:76:6a:bd:ae:2b:f2:17:43:40:92:b3:
1b:81:e7:2c:4a:17:c7:68:40:64:03:8a:86:c8:39:84:20:7f:
8b:de:b9:c0:66:1c:2b:20:7f:3d:4a:2b:81:63:9a:0f:7b:e4:
a1:ed:8c:af:6e:02:a9:20:f4:90:e6:22:5f:0a:c6:88:89:62:
26:7c:2c:0e:9f:42:f5:cc:46:da:8d:16:9e:73:2f:6d:ff:80:
c9:b6:37:56:f9:ec:80:af:2a:e9:3b:69:81:bc:93:e0:55:af:
52:89:7d:09:65:bf:c2:c1:41:22:9d:05:3c:76:28:d4:62:54:
8b:ae:9f:1c:56:f7:6b:fb:44:82:6e:29:f1:64:4b:26:f4:61:
0d:2e:55:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuzZn0fJk8s2HsbyiHiPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTlkZjQ1NzZlNWM2NTRmZjU1N2Q5ZjliZWEzMWYyYjY3
Nzg2MDgwHhcNMjYwOTI1MTgwMTU5WhcNMjYwOTI2MTgwMTU5WjAzMTEwLwYDVQQD
EyhiZGI4N2EyMmYxM2U3Y2JhMjJmYTYxZmVkMzE3OTJiMmQ3OGMxNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZrF4QbE5PHD/LpkNJCBVR5OCy+e
chU9YnpV9eKMJAVCRT6bqKVIh1NNu4iJ2ujHbyGWpHRKJ0NS6/u3YvL5mMWoldE1
G6f4ahYLmLZHx+gAUDqHCoqdSHriPfO6kwboXIoxEg1aPGzKdijq4HyCVVlNHe/p
NgULuXZIuKFn09gGsbSINyE5bCyOcvLgoSS6N4pLL9B/34A/GhLnHEwPalKyUyUy
utNFMV4RDra1DPbf/ewR8ETy2ZBGqOgACNWWd1B2VpGMSLpd37f9zv2PMtk0F3ro
bhtpOuLVYemaGgzBFlNwMiBWbcaSQ2d0M/MoKWJXELVJMOMOxV6HqMdmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL24eiLxPny6Ivph/tMXkrLXjBZVMB8GA1UdIwQY
MBaAFNrp30V25cZU/1V9n5vqMfK2d4YIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVuZlJYYmx4bFRfVlgyZm0tb3g4clozaGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMDI4ZTctZmUwNC00YWQ3LTllYmUt
YjdmNzI4MTVkZjdjLzEvMnVuZlJYYmx4bFRfVlgyZm0tb3g4clozaGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xMDI4ZTctZmUwNC00YWQ3LTllYmUtYjdmNzI4MTVkZjdj
LzEvMnVuZlJYYmx4bFRfVlgyZm0tb3g4clozaGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6/XGsdW
qegr5YT2PUs0zNF9CVd8mo5vz4OsjQ66sIt5PslI9Nhk/AoM2KC7x8agU76NzeRj
MneUKLbxo1TiHB5dnyO/9xJoKcY49BNN5sUbouREIFDsAZZ5CRTKnhT92kc6Tigm
g8K1bUlHqgkUvXNdP3Zqva4r8hdDQJKzG4HnLEoXx2hAZAOKhsg5hCB/i965wGYc
KyB/PUorgWOaD3vkoe2Mr24CqSD0kOYiXwrGiIliJnwsDp9C9cxG2o0WnnMvbf+A
ybY3VvnsgK8q6TtpgbyT4FWvUol9CWW/wsFBIp0FPHYo1GJUi66fHFb3a/tEgm4p
8WRLJvRhDS5VIg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:15 2026 by rpki-client