Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
File: 2ddyZTONdKLvZWzYmC0-ee4scws.mft (raw, json)
Hash identifier: y9Z8QLKEF9ijMenIRiUye8mu2LlREkXW96saOslKDqo=
Subject key identifier: 22:89:70:CC:53:64:AA:93:59:C5:78:4D:BB:2B:39:42:C7:91:41:35
Authority key identifier: D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
Certificate issuer: /CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Certificate serial: 01A0D19246DF43FFEB9452F36BF923EF3B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
Manifest number: 2C
Signing time: Thu 24 Sep 2026 04:00:19 +0000
Manifest this update: Thu 24 Sep 2026 04:00:19 +0000
Manifest next update: Fri 25 Sep 2026 04:00:19 +0000
Files and hashes: 1: 2ddyZTONdKLvZWzYmC0-ee4scws.crl (hash: Qy5tbcNjRL/otYGBpDFVZ/TlYW8KZ3nTB35ET3RMgTg=)
2: GyAPdxHlXvRo5tDkDVenq5fjP4k.roa (hash: 0ah8uxz8w/BQqOF2DO2niuzwg5BTV6cRax+iO+7Pk7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:46:df:43:ff:eb:94:52:f3:6b:f9:23:ef:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Validity
Not Before: Sep 24 04:00:19 2026 GMT
Not After : Sep 25 04:00:19 2026 GMT
Subject: CN=228970cc5364aa9359c5784dbb2b3942c7914135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:7c:f6:0d:b7:1e:93:26:56:f0:91:8a:ea:
26:fb:a9:89:8e:d1:b2:ec:52:94:c9:cc:64:4f:86:
39:8d:31:0c:19:d0:9a:1d:14:05:58:69:5f:93:03:
1c:ec:1a:b6:85:08:cd:45:92:c8:b6:b1:04:6d:1d:
f7:4a:85:6f:f4:0b:d4:f6:3b:7b:c7:e6:1f:72:4c:
36:08:d0:1c:08:bf:52:2a:61:59:47:f7:62:20:f1:
ef:b9:45:16:1c:af:34:8b:3d:2f:92:8e:19:8b:4e:
9a:5d:6b:f6:39:c0:1d:72:01:8c:cb:6b:48:1e:52:
62:43:a1:47:34:33:a2:6c:c6:9f:24:57:84:e5:4d:
66:5d:e8:6b:68:9f:db:29:d4:50:56:9e:a4:2a:50:
2c:30:8b:49:e8:40:9d:7a:ab:78:bc:39:83:ac:30:
af:c0:cb:28:c6:be:a9:dd:5a:96:a3:d7:b8:ac:e3:
05:aa:a5:63:00:69:c3:24:32:66:15:05:15:66:3c:
ad:a8:7a:15:ce:42:d4:cc:da:ec:d3:cd:37:28:dd:
ca:81:53:71:e6:72:a6:f7:02:75:bd:16:bc:14:f3:
ba:7d:25:d3:b0:ad:b1:0e:30:15:5a:15:78:0c:f5:
05:68:e9:db:1e:c0:c6:6f:43:dd:5d:0c:8e:39:73:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:70:CC:53:64:AA:93:59:C5:78:4D:BB:2B:39:42:C7:91:41:35
X509v3 Authority Key Identifier:
keyid:D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:65:0f:e5:6b:09:e4:66:99:45:94:f2:08:4f:82:a6:4e:90:
2e:53:07:26:b0:12:50:9f:eb:51:da:ad:de:36:07:d5:ac:85:
71:54:66:2b:fb:0d:34:50:49:5d:8c:91:5c:51:1d:50:55:12:
08:62:b4:27:df:23:03:43:3f:0f:61:77:bf:0f:5c:4c:5a:c1:
fc:d5:8e:42:f6:c1:68:12:6b:5f:e4:86:bb:ba:71:b7:cd:33:
c5:0d:56:97:e3:d8:a6:8a:2e:f6:bf:63:5f:88:c8:8c:37:ea:
8b:dd:d7:b9:e3:c0:fb:63:b9:6f:f3:29:42:12:ab:e9:df:08:
7f:c5:ca:46:bd:aa:92:81:24:a1:f2:66:65:16:27:23:f7:e5:
f6:9e:5c:ae:ac:9b:f1:73:c4:a2:3f:39:0c:26:1f:11:7f:7d:
75:50:62:c1:97:9f:1f:f4:b3:c1:b7:a3:d3:53:06:a9:d0:2d:
c2:31:21:83:b5:e8:db:58:78:40:67:b1:0d:46:0d:f3:15:3f:
57:19:cb:0d:1e:aa:de:77:79:32:c2:23:55:e9:21:57:1f:79:
40:7b:36:bd:41:ad:25:fa:02:96:dd:86:7e:a7:90:63:ce:b6:
4e:a4:98:3f:45:83:c1:39:10:d4:0a:ba:3d:1b:4f:fc:77:aa:
29:3a:dc:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkkbfQ//rlFLza/kj7zs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDc3MjY1MzM4ZDc0YTJlZjY1NmNkODk4MmQzZTc5ZWUy
YzczMGIwHhcNMjYwOTI0MDQwMDE5WhcNMjYwOTI1MDQwMDE5WjAzMTEwLwYDVQQD
EygyMjg5NzBjYzUzNjRhYTkzNTljNTc4NGRiYjJiMzk0MmM3OTE0MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fV89g23HpMmVvCRiuom+6mJjtGy
7FKUycxkT4Y5jTEMGdCaHRQFWGlfkwMc7Bq2hQjNRZLItrEEbR33SoVv9AvU9jt7
x+Yfckw2CNAcCL9SKmFZR/diIPHvuUUWHK80iz0vko4Zi06aXWv2OcAdcgGMy2tI
HlJiQ6FHNDOibMafJFeE5U1mXehraJ/bKdRQVp6kKlAsMItJ6ECdeqt4vDmDrDCv
wMsoxr6p3VqWo9e4rOMFqqVjAGnDJDJmFQUVZjytqHoVzkLUzNrs0803KN3KgVNx
5nKm9wJ1vRa8FPO6fSXTsK2xDjAVWhV4DPUFaOnbHsDGb0PdXQyOOXNoOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKJcMxTZKqTWcV4TbsrOULHkUE1MB8GA1UdIwQY
MBaAFNnXcmUzjXSi72Vs2JgtPnnuLHMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRkeVpUT05kS0x2Wld6WW1DMC1lZTRzY3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xY2EzZDAtNTA1Yi00NGRkLWE3OTUt
ZmE4MTY5OGM5YjM0LzEvMmRkeVpUT05kS0x2Wld6WW1DMC1lZTRzY3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xY2EzZDAtNTA1Yi00NGRkLWE3OTUtZmE4MTY5OGM5YjM0
LzEvMmRkeVpUT05kS0x2Wld6WW1DMC1lZTRzY3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWUP5WsJ
5GaZRZTyCE+Cpk6QLlMHJrASUJ/rUdqt3jYH1ayFcVRmK/sNNFBJXYyRXFEdUFUS
CGK0J98jA0M/D2F3vw9cTFrB/NWOQvbBaBJrX+SGu7pxt80zxQ1Wl+PYpoou9r9j
X4jIjDfqi93XuePA+2O5b/MpQhKr6d8If8XKRr2qkoEkofJmZRYnI/fl9p5crqyb
8XPEoj85DCYfEX99dVBiwZefH/Szwbej01MGqdAtwjEhg7Xo21h4QGexDUYN8xU/
VxnLDR6q3nd5MsIjVekhVx95QHs2vUGtJfoClt2GfqeQY862TqSYP0WDwTkQ1Aq6
PRtP/HeqKTrcZA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:30 2026 by rpki-client