Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
File: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft (raw, json)
Hash identifier: IiX+8rMAAjd3m4POXyY2PmDfPEWpxy9dbbX7j9B8EtE=
Subject key identifier: 33:DE:2B:3D:79:D5:FA:C7:6A:42:11:4C:13:48:B0:45:0A:A7:BC:85
Authority key identifier: DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
Certificate issuer: /CN=dad370668e7283500eb708183744371e429a85e0
Certificate serial: 019F8F7F11B689AD0FF5E91691D3F467DFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:37 +0000
Manifest this update: Thu 23 Jul 2026 15:01:37 +0000
Manifest next update: Fri 24 Jul 2026 15:01:37 +0000
Files and hashes: 1: 2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl (hash: MRMwtfR6RtfHpeUzjcmvb9pxAeCDA4SYRvCBYzbHf/o=)
2: YRs_QI7zgxVrkN0RQbqIXsoAg50.roa (hash: 5qwG/8GveM14Sa66Ok5aIoiuPZ7/iHryFybesAmLnK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:11:b6:89:ad:0f:f5:e9:16:91:d3:f4:67:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad370668e7283500eb708183744371e429a85e0
Validity
Not Before: Jul 23 15:01:37 2026 GMT
Not After : Jul 24 15:01:37 2026 GMT
Subject: CN=33de2b3d79d5fac76a42114c1348b0450aa7bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:4a:ae:f9:5e:8b:22:56:13:04:fe:8f:6e:
25:77:77:98:b1:dd:e7:56:00:03:c0:15:f2:01:10:
a8:04:72:0f:a7:e5:0e:cd:4b:1c:b5:15:16:f3:17:
2c:e4:a0:f3:b3:bd:a6:e4:87:12:58:dd:2d:6d:4a:
56:11:f6:db:db:65:6e:65:12:c2:bc:76:d6:21:3f:
c0:51:b0:52:34:f8:d7:0e:fe:a7:62:ea:00:8f:83:
93:9e:f9:6e:bf:45:b5:79:27:2b:5f:3f:f7:9e:d5:
d5:94:7f:ee:70:35:2c:a4:66:8c:47:f8:11:f3:f5:
d0:7f:61:ed:7b:02:4e:83:14:94:93:e3:a4:e6:60:
e0:4a:73:1b:b0:94:11:7b:42:93:3f:db:76:f1:38:
9d:e4:53:63:91:8f:d3:58:76:51:76:48:b6:90:5a:
05:91:ee:f6:7f:7f:32:85:a4:ac:95:a1:94:63:7f:
c6:bf:ae:b5:bd:f6:50:a9:3a:ba:b5:cd:f8:65:fc:
99:f7:9b:8b:42:52:65:3b:ae:f9:47:4b:6d:d5:ff:
bb:eb:b0:5a:e2:6a:b6:8d:6d:e4:44:ef:64:a8:4d:
bf:cb:8e:45:f4:9c:1f:c2:e1:e0:ca:55:82:61:8e:
b7:44:b7:db:3c:61:ab:3f:21:8d:bf:91:92:34:fa:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:2B:3D:79:D5:FA:C7:6A:42:11:4C:13:48:B0:45:0A:A7:BC:85
X509v3 Authority Key Identifier:
keyid:DA:D3:70:66:8E:72:83:50:0E:B7:08:18:37:44:37:1E:42:9A:85:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tNwZo5yg1AOtwgYN0Q3HkKaheA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/2tNwZo5yg1AOtwgYN0Q3HkKaheA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4b:e1:7d:69:11:7e:b9:aa:9c:bf:bd:13:8d:24:e0:d9:20:
2e:ae:52:9d:73:da:8f:10:54:eb:7a:0b:47:71:6c:99:06:3c:
e1:30:07:67:b5:9c:75:bf:4b:0c:78:eb:d5:d5:6a:fe:e1:73:
9b:62:ab:49:6f:a8:d2:b7:c4:e4:88:43:3a:00:d3:fc:3a:6f:
6e:52:70:99:ce:ca:8f:87:4e:ff:d3:ba:5a:00:b9:c5:e8:05:
dc:56:99:74:f2:65:da:b9:e0:d9:b8:2e:13:91:7d:e5:1d:dd:
d1:94:fa:60:ec:cd:0f:33:8c:32:4d:9f:8a:78:ef:08:fe:d9:
3a:4f:ce:1d:ad:ca:4d:11:73:37:82:24:8b:85:67:9b:b2:e2:
8c:35:f9:52:38:eb:5f:20:e6:96:05:55:5a:99:2e:d6:84:ee:
f5:7a:8f:87:e9:33:a4:0f:db:6e:89:2f:81:fe:fd:75:e1:e1:
cb:67:61:4e:1a:79:79:16:4d:f4:17:d7:43:a9:be:81:a2:6f:
49:29:3c:f9:b3:00:fb:47:e6:7a:fe:ce:70:2c:0c:9e:60:79:
40:da:d3:96:ec:ca:fe:df:8d:d1:d3:e9:e9:1f:8d:c7:ff:a5:
f3:dc:e8:d1:7e:30:3e:0d:38:f2:2a:20:05:e7:37:1c:cc:87:
2f:77:a6:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfxG2ia0P9ekWkdP0Z9/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZDM3MDY2OGU3MjgzNTAwZWI3MDgxODM3NDQzNzFlNDI5
YTg1ZTAwHhcNMjYwNzIzMTUwMTM3WhcNMjYwNzI0MTUwMTM3WjAzMTEwLwYDVQQD
EygzM2RlMmIzZDc5ZDVmYWM3NmE0MjExNGMxMzQ4YjA0NTBhYTdiYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOlKrvleiyJWEwT+j24ld3eYsd3n
VgADwBXyARCoBHIPp+UOzUsctRUW8xcs5KDzs72m5IcSWN0tbUpWEfbb22VuZRLC
vHbWIT/AUbBSNPjXDv6nYuoAj4OTnvluv0W1eScrXz/3ntXVlH/ucDUspGaMR/gR
8/XQf2HtewJOgxSUk+Ok5mDgSnMbsJQRe0KTP9t28Tid5FNjkY/TWHZRdki2kFoF
ke72f38yhaSslaGUY3/Gv661vfZQqTq6tc34ZfyZ95uLQlJlO675R0tt1f+767Ba
4mq2jW3kRO9kqE2/y45F9JwfwuHgylWCYY63RLfbPGGrPyGNv5GSNPp9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPeKz151frHakIRTBNIsEUKp7yFMB8GA1UdIwQY
MBaAFNrTcGaOcoNQDrcIGDdENx5CmoXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80YzllODYtMWFkNy00YThmLWE1NWIt
OTJjZjAxZmE3ZTZjLzEvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80YzllODYtMWFkNy00YThmLWE1NWItOTJjZjAxZmE3ZTZj
LzEvMnROd1pvNXlnMUFPdHdnWU4wUTNIa0thaGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckvhfWkR
frmqnL+9E40k4NkgLq5SnXPajxBU63oLR3FsmQY84TAHZ7Wcdb9LDHjr1dVq/uFz
m2KrSW+o0rfE5IhDOgDT/DpvblJwmc7Kj4dO/9O6WgC5xegF3FaZdPJl2rng2bgu
E5F95R3d0ZT6YOzNDzOMMk2finjvCP7ZOk/OHa3KTRFzN4Iki4Vnm7LijDX5Ujjr
XyDmlgVVWpku1oTu9XqPh+kzpA/bbokvgf79deHhy2dhThp5eRZN9BfXQ6m+gaJv
SSk8+bMA+0fmev7OcCwMnmB5QNrTluzK/t+N0dPp6R+Nx/+l89zo0X4wPg048iog
Bec3HMyHL3em2Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:48 2026 by rpki-client