Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
File: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft (raw, json)
Hash identifier: 4rTHSTPEM2AzyzrmbJQEzbGUNagtuuehvL2btDHaPEc=
Subject key identifier: 6A:40:4B:DA:C2:58:6A:28:AE:FB:63:84:1E:B2:BB:11:53:C9:C1:96
Authority key identifier: DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
Certificate issuer: /CN=dad370668e7283500eb708183744371e429a85e0
Certificate serial: 01A0D01243203013207E8B5EE344AEB53462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:52 +0000
Manifest this update: Wed 23 Sep 2026 21:00:52 +0000
Manifest next update: Thu 24 Sep 2026 21:00:52 +0000
Files and hashes: 1: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl (hash: ZwBElknJBMeZEnStODNWIf/0XJlkBor9Rq6c2rnV95E=)
2: YRs_QI7zgxVrkN0RQbqIXsoAg50.roa (hash: 5qwG/8GveM14Sa66Ok5aIoiuPZ7/iHryFybesAmLnK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:43:20:30:13:20:7e:8b:5e:e3:44:ae:b5:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad370668e7283500eb708183744371e429a85e0
Validity
Not Before: Sep 23 21:00:52 2026 GMT
Not After : Sep 24 21:00:52 2026 GMT
Subject: CN=6a404bdac2586a28aefb63841eb2bb1153c9c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:8c:d2:48:65:09:f7:db:e2:50:d4:76:0c:
a5:6e:57:e3:1e:59:bc:58:76:a7:9b:81:2f:de:09:
51:23:4b:35:6a:f1:b6:c4:1a:c6:c7:72:f1:f9:73:
2f:fb:ed:99:d9:a0:d8:29:6f:ef:2f:15:cd:d9:41:
6d:cb:cf:2b:79:2f:9b:74:72:fe:b8:fb:ab:e9:fb:
11:f2:40:f9:31:ba:84:10:46:12:bf:b4:df:fc:f8:
22:d3:cb:90:a8:c4:48:63:eb:b5:bf:d3:ba:bd:be:
27:4b:c0:2a:18:59:a3:bb:ca:10:96:4e:34:b0:bb:
42:89:c2:93:c2:78:e4:78:bf:ac:2c:d5:e6:e9:a5:
06:73:db:7a:5b:f7:c6:3e:77:e7:e9:48:ff:1c:d6:
6a:0e:52:c9:6f:0f:4d:53:dc:72:2f:8e:fd:44:f1:
1c:c1:51:1e:db:a7:ae:f3:3a:8c:23:0e:58:91:41:
9a:38:72:a2:96:0d:08:82:02:4b:7d:13:ae:83:b9:
4e:55:8b:62:02:ea:f3:47:23:6e:fb:2c:a1:53:dc:
11:e8:34:e8:d0:40:e2:0b:9c:11:b1:47:73:bb:1c:
80:bd:5a:32:86:50:26:7b:79:75:23:ef:74:c1:f7:
9f:5e:ae:48:b9:f6:90:ee:fe:e8:05:0b:6a:3b:69:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:4B:DA:C2:58:6A:28:AE:FB:63:84:1E:B2:BB:11:53:C9:C1:96
X509v3 Authority Key Identifier:
keyid:DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:7f:72:8b:71:bb:e7:6a:1e:26:e3:5f:4f:ec:c8:bd:fc:
67:3d:17:96:c5:a8:11:28:9d:37:e5:c1:ab:32:b0:01:86:8b:
0a:ad:38:f8:79:c0:e2:69:bc:d9:56:80:2a:fe:8b:97:db:24:
65:97:7f:b3:d6:41:dd:6a:95:01:af:36:be:ec:f6:8a:f5:b6:
d9:ff:4d:d0:5c:e2:a1:c6:25:dc:34:ba:df:53:3e:a6:67:1b:
71:4b:d0:52:e5:89:37:38:bc:e3:c5:6e:8e:38:1e:e8:53:16:
31:66:c4:ce:c2:f2:5b:ca:86:da:31:98:c1:9c:1d:e4:e5:db:
02:6a:0d:3a:8d:4f:3b:11:b6:3e:a4:49:62:67:fb:da:28:4b:
e4:08:86:45:93:52:ce:fd:f4:75:8f:cb:3d:74:bc:7e:55:5e:
19:29:21:30:d9:e4:9a:53:e1:2d:e3:11:31:da:58:9c:1e:68:
7a:7d:d5:e5:12:9a:6c:1f:38:dc:80:54:17:b4:ff:8e:16:3a:
28:05:7a:04:24:d8:fa:10:9a:48:82:e6:b7:6d:e7:d6:92:d6:
64:b9:2d:cf:a2:8f:0a:7a:fd:53:49:85:39:6b:d2:fd:f9:7f:
cf:97:c0:1d:6f:c0:c9:6c:be:01:04:a7:da:a5:d8:61:f8:d0:
25:fc:ff:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEkMgMBMgfote40SutTRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZDM3MDY2OGU3MjgzNTAwZWI3MDgxODM3NDQzNzFlNDI5
YTg1ZTAwHhcNMjYwOTIzMjEwMDUyWhcNMjYwOTI0MjEwMDUyWjAzMTEwLwYDVQQD
Eyg2YTQwNGJkYWMyNTg2YTI4YWVmYjYzODQxZWIyYmIxMTUzYzljMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqiM0khlCffb4lDUdgylblfjHlm8
WHanm4Ev3glRI0s1avG2xBrGx3Lx+XMv++2Z2aDYKW/vLxXN2UFty88reS+bdHL+
uPur6fsR8kD5MbqEEEYSv7Tf/Pgi08uQqMRIY+u1v9O6vb4nS8AqGFmju8oQlk40
sLtCicKTwnjkeL+sLNXm6aUGc9t6W/fGPnfn6Uj/HNZqDlLJbw9NU9xyL479RPEc
wVEe26eu8zqMIw5YkUGaOHKilg0IggJLfROug7lOVYtiAurzRyNu+yyhU9wR6DTo
0EDiC5wRsUdzuxyAvVoyhlAme3l1I+90wfefXq5IufaQ7v7oBQtqO2kN7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpAS9rCWGoorvtjhB6yuxFTycGWMB8GA1UdIwQY
MBaAFNrTcGaOcoNQDrcIGDdENx5CmoXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80YzllODYtMWFkNy00YThmLWE1NWIt
OTJjZjAxZmE3ZTZjLzEvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80YzllODYtMWFkNy00YThmLWE1NWItOTJjZjAxZmE3ZTZj
LzEvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJF/cotx
u+dqHibjX0/syL38Zz0XlsWoESidN+XBqzKwAYaLCq04+HnA4mm82VaAKv6Ll9sk
ZZd/s9ZB3WqVAa82vuz2ivW22f9N0FziocYl3DS631M+pmcbcUvQUuWJNzi848Vu
jjge6FMWMWbEzsLyW8qG2jGYwZwd5OXbAmoNOo1POxG2PqRJYmf72ihL5AiGRZNS
zv30dY/LPXS8flVeGSkhMNnkmlPhLeMRMdpYnB5oen3V5RKabB843IBUF7T/jhY6
KAV6BCTY+hCaSILmt23n1pLWZLktz6KPCnr9U0mFOWvS/fl/z5fAHW/AyWy+AQSn
2qXYYfjQJfz/hA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:13:58 2026 by rpki-client