Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
File: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft (raw, json)
Hash identifier: 8zYk64ePjvXdWM0J2WnbgEyAT5pOHZORN92XeJa1HMA=
Subject key identifier: B6:AA:C5:FA:8C:33:96:34:53:F7:22:1C:24:5F:FE:94:4C:5A:F9:BB
Authority key identifier: DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
Certificate issuer: /CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Certificate serial: 01A0CF369534537655CDD38D7FA421564055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
Manifest number: 43
Signing time: Wed 23 Sep 2026 17:00:55 +0000
Manifest this update: Wed 23 Sep 2026 17:00:55 +0000
Manifest next update: Thu 24 Sep 2026 17:00:55 +0000
Files and hashes: 1: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl (hash: FBCYZbLhVxLCVtwhfqaiN0MtSkadYxPWH9Z51oZw5uE=)
2: bco2Vy33uicQjr8fSgLIpcv1tBk.asa (hash: l6F5Y2uxwEyExD8hjQoc5Vlbvn9A0M3aap09ujsphDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:95:34:53:76:55:cd:d3:8d:7f:a4:21:56:40:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Validity
Not Before: Sep 23 17:00:55 2026 GMT
Not After : Sep 24 17:00:55 2026 GMT
Subject: CN=b6aac5fa8c33963453f7221c245ffe944c5af9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:62:01:9c:ea:a1:7b:07:02:53:97:17:e8:
ce:03:61:64:6f:84:d2:c2:80:dc:66:e7:68:5b:45:
cd:d9:dc:c1:14:d3:86:40:37:99:0e:3c:c2:12:65:
11:95:77:fb:5d:46:8d:9d:95:56:9f:9c:98:17:af:
48:bc:b8:0e:47:a5:11:24:bc:c5:2c:71:fa:5a:0f:
fc:f8:5c:f1:b0:ca:05:44:ff:02:d6:2f:c9:cd:43:
23:cf:d3:50:dd:da:93:2f:d4:c4:96:88:f5:96:ee:
4c:11:08:10:a9:36:cb:f9:a4:95:b7:ed:68:c3:9f:
21:0e:c7:21:8b:09:ef:91:1f:d9:d7:85:53:9e:62:
86:30:e3:fe:c7:61:f7:78:b3:6b:a8:61:34:f1:58:
46:0e:a7:17:c8:fd:32:93:05:5a:7c:8f:8a:39:7b:
3a:9f:d3:a0:3b:6b:79:e3:05:2f:a9:8a:f0:8d:81:
36:00:cf:01:f7:40:78:2e:29:d7:c6:34:d3:8a:bf:
5f:7c:07:64:83:7a:c7:fa:f3:46:b3:60:95:61:77:
a0:d9:b1:da:a3:c3:82:be:05:29:e3:f6:b0:4a:79:
ca:e9:34:ac:80:d9:77:2c:12:78:16:f7:4a:6a:a7:
21:bd:34:e2:6a:fc:3f:43:f5:f4:68:93:af:38:5e:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:C5:FA:8C:33:96:34:53:F7:22:1C:24:5F:FE:94:4C:5A:F9:BB
X509v3 Authority Key Identifier:
keyid:DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:20:8d:29:8e:10:38:e4:56:31:c7:24:84:7b:c0:7c:d1:
fd:f5:d5:3d:35:c4:e5:10:c6:7d:b9:47:97:05:15:5b:58:06:
fd:7f:e9:76:4e:ce:00:94:89:7b:53:42:c6:0c:22:b5:9d:17:
12:3a:7f:9c:29:a5:bd:85:3e:88:9b:e7:59:f7:d3:81:95:23:
e5:9d:61:83:40:7f:8d:18:29:01:d9:e3:5e:83:ac:2a:02:ef:
92:67:0d:84:7a:0f:32:67:41:1b:14:4b:4e:6f:36:ea:58:21:
b1:46:c8:e4:69:d4:db:b0:f6:c1:01:92:c0:ae:e0:aa:05:84:
5c:1a:e6:25:c4:55:e1:a8:14:8a:cd:21:76:99:1a:bc:45:31:
51:55:b8:60:6c:c8:78:df:12:f1:07:45:21:e9:f6:7d:11:b7:
3f:52:15:19:c5:8f:fd:8e:dc:84:bd:96:bc:fc:76:4b:73:54:
ab:8f:78:ee:ba:45:52:04:90:0c:93:82:d2:4e:a0:25:92:5a:
39:98:70:5f:bd:2f:d2:09:e6:42:be:f8:c6:65:08:0f:02:60:
e4:9b:04:86:8d:ca:fb:e6:d8:ac:98:d9:46:6e:91:ef:81:e9:
04:fc:d1:b2:22:f7:04:fa:67:49:de:50:e6:e0:18:3e:d5:a3:
d1:d2:e0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNpU0U3ZVzdONf6QhVkBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBkNDlhNTdlOWQwYWFjMDIwMWJlZWRmMWUwOTk5NjU4
YjNlMmUwHhcNMjYwOTIzMTcwMDU1WhcNMjYwOTI0MTcwMDU1WjAzMTEwLwYDVQQD
EyhiNmFhYzVmYThjMzM5NjM0NTNmNzIyMWMyNDVmZmU5NDRjNWFmOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4tiAZzqoXsHAlOXF+jOA2Fkb4TS
woDcZudoW0XN2dzBFNOGQDeZDjzCEmURlXf7XUaNnZVWn5yYF69IvLgOR6URJLzF
LHH6Wg/8+FzxsMoFRP8C1i/JzUMjz9NQ3dqTL9TEloj1lu5MEQgQqTbL+aSVt+1o
w58hDschiwnvkR/Z14VTnmKGMOP+x2H3eLNrqGE08VhGDqcXyP0ykwVafI+KOXs6
n9OgO2t54wUvqYrwjYE2AM8B90B4LinXxjTTir9ffAdkg3rH+vNGs2CVYXeg2bHa
o8OCvgUp4/awSnnK6TSsgNl3LBJ4FvdKaqchvTTiavw/Q/X0aJOvOF7CBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaqxfqMM5Y0U/ciHCRf/pRMWvm7MB8GA1UdIwQY
MBaAFNpg1JpX6dCqwCAb7t8eCZlliz4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EVW1sZnAwS3JBSUJ2dTN4NEptV1dMUGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MTYwMDYtNTNjYy00YjAzLWIxYzQt
ZGI2YWJhZWJhZWFjLzEvMm1EVW1sZnAwS3JBSUJ2dTN4NEptV1dMUGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MTYwMDYtNTNjYy00YjAzLWIxYzQtZGI2YWJhZWJhZWFj
LzEvMm1EVW1sZnAwS3JBSUJ2dTN4NEptV1dMUGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzsgjSmO
EDjkVjHHJIR7wHzR/fXVPTXE5RDGfblHlwUVW1gG/X/pdk7OAJSJe1NCxgwitZ0X
Ejp/nCmlvYU+iJvnWffTgZUj5Z1hg0B/jRgpAdnjXoOsKgLvkmcNhHoPMmdBGxRL
Tm826lghsUbI5GnU27D2wQGSwK7gqgWEXBrmJcRV4agUis0hdpkavEUxUVW4YGzI
eN8S8QdFIen2fRG3P1IVGcWP/Y7chL2WvPx2S3NUq4947rpFUgSQDJOC0k6gJZJa
OZhwX70v0gnmQr74xmUIDwJg5JsEho3K++bYrJjZRm6R74HpBPzRsiL3BPpnSd5Q
5uAYPtWj0dLgnw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:46:20 2026 by rpki-client