Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: UEkULPJKLalXWVyhgpzclgnZsTfXM+RARRaTnOwV0Ck=
Subject key identifier: 7E:CF:CD:77:E1:51:F7:6D:6F:1E:A0:AA:AE:18:E2:B4:4F:DE:E3:83
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 01A0C96B5F03EECC3016A083708A1C8C6BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 14:00:52 +0000
Manifest this update: Tue 22 Sep 2026 14:00:52 +0000
Manifest next update: Wed 23 Sep 2026 14:00:52 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: Bx656yTlDsA9ipksda5gAPBUWK7lGpZELLuhKhizI5c=)
2: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (hash: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:5f:03:ee:cc:30:16:a0:83:70:8a:1c:8c:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Sep 22 14:00:52 2026 GMT
Not After : Sep 23 14:00:52 2026 GMT
Subject: CN=7ecfcd77e151f76d6f1ea0aaae18e2b44fdee383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:10:f2:fc:40:e1:b7:77:11:7f:74:4e:aa:
c4:28:a7:3b:4b:fb:06:e1:b2:35:b9:24:58:df:8a:
da:b5:29:3d:46:5a:ba:56:bf:49:db:4b:1e:a2:bf:
3f:03:7a:35:61:78:de:98:1b:d5:8f:e9:1d:92:f9:
e3:54:1a:06:c9:b2:2e:c8:44:73:68:35:16:35:3f:
75:8e:a5:71:b5:f6:a7:5a:5d:4a:e1:c3:c7:53:dd:
4d:d0:d7:22:1f:9b:53:65:31:e0:c8:e7:86:61:22:
88:b7:bf:0d:8e:ba:82:a3:31:f3:65:93:61:20:00:
3a:ea:b5:72:31:bd:60:d3:c5:4f:ab:15:dc:51:1c:
55:d6:a2:f9:ae:de:26:8c:ea:6e:5f:27:f4:b6:01:
7b:70:84:cf:72:b6:73:07:56:e1:5a:8a:14:17:ce:
f5:80:34:de:5f:11:5b:2b:a5:5b:35:3b:1c:81:32:
e9:b3:93:88:1c:4c:ac:e0:08:77:83:34:99:d5:7d:
72:10:ad:fa:20:3a:ae:ed:3e:8d:ba:9b:93:27:bc:
9c:97:b7:37:e0:1d:4e:ef:f2:ea:84:65:65:47:b4:
6f:5b:4d:34:6a:9e:2e:a1:9e:40:0b:34:34:b0:ee:
2c:12:39:23:67:49:bc:f0:fd:aa:e6:c9:39:47:99:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:CD:77:E1:51:F7:6D:6F:1E:A0:AA:AE:18:E2:B4:4F:DE:E3:83
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:83:2e:11:83:80:43:b1:44:d0:54:9d:53:fd:c6:d1:d6:
aa:d6:f7:89:45:b3:f0:f3:88:e7:eb:46:58:d6:6f:9f:f8:be:
67:49:63:64:f0:45:26:bf:6c:98:6b:9f:5b:58:64:0d:17:d5:
c9:13:aa:4f:9f:4c:d4:4a:98:77:d6:69:44:77:34:0a:bf:d0:
ae:d7:18:98:1c:01:8a:09:a3:55:8c:f6:c2:58:f0:07:0a:68:
5b:85:10:59:c6:43:e3:cb:4e:be:64:2a:3a:b0:5b:93:ee:e9:
d3:81:e7:28:2a:fb:e9:5b:a3:ff:f9:bb:b7:c2:15:41:0c:fb:
1f:77:99:d2:eb:6c:ee:8a:be:86:83:1e:6c:0d:08:6c:56:61:
fd:da:b1:2b:bf:d6:3e:31:4d:d9:1d:b8:ec:d0:75:23:ee:d7:
3f:d2:ae:e7:1d:bc:f9:b1:53:87:02:63:3d:1d:07:83:27:3a:
18:7b:d0:a5:20:d7:03:c3:ca:5a:f3:80:81:1b:71:d2:69:5d:
c7:b6:64:0c:6e:4a:f7:53:48:26:4b:47:64:1d:de:d1:8d:e4:
54:f4:53:e4:e0:73:8c:61:14:02:7f:65:6f:f7:40:e6:84:d8:
0f:4e:51:8e:8f:e7:80:f4:33:16:5a:76:a5:5e:62:d6:56:b4:
57:a0:ed:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa18D7swwFqCDcIocjGv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjYwOTIyMTQwMDUyWhcNMjYwOTIzMTQwMDUyWjAzMTEwLwYDVQQD
Eyg3ZWNmY2Q3N2UxNTFmNzZkNmYxZWEwYWFhZTE4ZTJiNDRmZGVlMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH4Q8vxA4bd3EX90TqrEKKc7S/sG
4bI1uSRY34ratSk9Rlq6Vr9J20seor8/A3o1YXjemBvVj+kdkvnjVBoGybIuyERz
aDUWNT91jqVxtfanWl1K4cPHU91N0NciH5tTZTHgyOeGYSKIt78NjrqCozHzZZNh
IAA66rVyMb1g08VPqxXcURxV1qL5rt4mjOpuXyf0tgF7cITPcrZzB1bhWooUF871
gDTeXxFbK6VbNTscgTLps5OIHEys4Ah3gzSZ1X1yEK36IDqu7T6NupuTJ7ycl7c3
4B1O7/LqhGVlR7RvW000ap4uoZ5ACzQ0sO4sEjkjZ0m88P2q5sk5R5k3QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7PzXfhUfdtbx6gqq4Y4rRP3uODMB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKWDLhGD
gEOxRNBUnVP9xtHWqtb3iUWz8POI5+tGWNZvn/i+Z0ljZPBFJr9smGufW1hkDRfV
yROqT59M1EqYd9ZpRHc0Cr/QrtcYmBwBigmjVYz2wljwBwpoW4UQWcZD48tOvmQq
OrBbk+7p04HnKCr76Vuj//m7t8IVQQz7H3eZ0uts7oq+hoMebA0IbFZh/dqxK7/W
PjFN2R247NB1I+7XP9Ku5x28+bFThwJjPR0Hgyc6GHvQpSDXA8PKWvOAgRtx0mld
x7ZkDG5K91NIJktHZB3e0Y3kVPRT5OBzjGEUAn9lb/dA5oTYD05Rjo/ngPQzFlp2
pV5i1la0V6DtnQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:24:06 2026 by rpki-client