Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: YOiloBGSRcooAz2998kvstuO97GL+MMxJ39UoEUIUFA=
Subject key identifier: 22:03:C5:DE:4D:0B:62:6C:66:2A:16:61:C7:AE:C3:C0:AE:BB:04:57
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 01A0DD986BB0495F0B73B834B5794B97DE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 18FF
Signing time: Sat 26 Sep 2026 12:02:28 +0000
Manifest this update: Sat 26 Sep 2026 12:02:28 +0000
Manifest next update: Sun 27 Sep 2026 12:02:28 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: 6Sw4cTCw0zesr7gjxkuBLGtevwXDvBL1DHHTKCqZ9mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:6b:b0:49:5f:0b:73:b8:34:b5:79:4b:97:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Sep 26 12:02:28 2026 GMT
Not After : Sep 27 12:02:28 2026 GMT
Subject: CN=2203c5de4d0b626c662a1661c7aec3c0aebb0457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:7f:6d:0a:9f:58:ac:e4:c8:db:73:10:c1:
65:44:8d:52:ca:fd:3d:e6:c9:bc:3e:28:75:1d:70:
f3:c4:65:96:0f:4a:f8:cc:10:bc:cf:65:05:a5:e1:
78:fb:b1:82:59:01:f8:32:f7:e2:08:1b:a5:85:d7:
41:67:64:56:df:cb:c9:18:00:1b:42:2c:99:91:8d:
3a:74:49:7e:6d:2e:5d:b8:51:e6:68:7e:94:08:a1:
b4:51:35:e8:1b:cd:10:f6:d4:e6:4f:62:50:f7:1c:
4d:6f:8a:21:91:2b:75:31:d7:77:f0:f0:7f:66:24:
20:da:21:df:fd:3c:1e:04:79:d7:d0:df:b5:b3:46:
7c:61:40:f6:6a:2c:e3:ec:10:92:04:ad:c9:be:f7:
f7:5a:11:fd:ab:81:ae:f7:20:63:38:dd:89:07:0d:
3a:c5:b9:2c:97:e8:c3:55:a5:08:01:41:7d:f0:00:
8e:ee:21:55:2d:ae:96:6e:a0:b7:1b:f2:c4:85:4c:
2c:16:64:98:0e:17:ca:f5:71:f5:44:e6:11:d0:71:
20:48:27:b4:04:8a:ec:62:f2:3c:14:22:ef:e3:57:
66:d6:e8:fc:42:0c:80:01:da:6c:c3:f4:8c:63:71:
78:10:c4:98:69:f6:16:74:bb:fc:83:3f:5e:6a:a4:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:C5:DE:4D:0B:62:6C:66:2A:16:61:C7:AE:C3:C0:AE:BB:04:57
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:f5:72:00:6b:df:69:8f:43:26:24:6d:6f:48:0d:b3:2b:
1b:48:3f:10:cf:df:06:6a:d1:b0:e7:8d:f8:4e:4b:9b:9f:2d:
0e:c8:c8:c5:f3:06:6b:6a:ed:19:d5:ca:de:06:e2:d2:17:b4:
a8:b3:4a:28:52:5e:dd:75:20:71:3b:84:1d:5b:5f:c6:e2:aa:
ad:ec:cc:c5:56:cf:04:91:48:0c:9c:88:ae:bd:ed:18:53:58:
71:c9:07:b3:b7:0f:fd:c0:87:23:3f:a4:7d:e6:9a:15:73:48:
9a:77:ab:45:ad:82:95:a2:d7:7c:cf:14:31:f9:6b:b5:d6:47:
5c:1f:1c:aa:7c:22:0f:dd:e8:f5:63:4b:43:30:74:69:56:92:
9d:fb:51:3f:84:b7:7f:82:40:fb:46:59:eb:a1:55:a8:18:c5:
77:2a:0d:a1:d2:65:a7:6a:c0:a8:6f:23:5e:5b:a8:ca:ba:86:
de:68:99:e5:7c:54:f6:fe:f4:8a:2e:d1:8a:3a:2a:04:0e:05:
9b:f2:22:b0:6e:0f:17:69:42:be:69:f4:fd:6d:38:a8:10:d5:
00:97:3f:26:e7:85:b2:ae:40:ab:a0:1c:e2:51:7e:24:dc:bb:
55:6d:37:9a:25:78:a2:45:4b:dc:79:6f:b2:16:06:c3:da:f2:
3a:f8:a2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdmGuwSV8Lc7g0tXlLl94CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGRhNzQ0MDBjNzU1NWFiYTI3YzEyODlmYmZiOTBiMzNi
NzlhMjIwHhcNMjYwOTI2MTIwMjI4WhcNMjYwOTI3MTIwMjI4WjAzMTEwLwYDVQQD
EygyMjAzYzVkZTRkMGI2MjZjNjYyYTE2NjFjN2FlYzNjMGFlYmIwNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0V/bQqfWKzkyNtzEMFlRI1Syv09
5sm8Pih1HXDzxGWWD0r4zBC8z2UFpeF4+7GCWQH4MvfiCBulhddBZ2RW38vJGAAb
QiyZkY06dEl+bS5duFHmaH6UCKG0UTXoG80Q9tTmT2JQ9xxNb4ohkSt1Mdd38PB/
ZiQg2iHf/TweBHnX0N+1s0Z8YUD2aizj7BCSBK3Jvvf3WhH9q4Gu9yBjON2JBw06
xbksl+jDVaUIAUF98ACO7iFVLa6WbqC3G/LEhUwsFmSYDhfK9XH1ROYR0HEgSCe0
BIrsYvI8FCLv41dm1uj8QgyAAdpsw/SMY3F4EMSYafYWdLv8gz9eaqSVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIDxd5NC2JsZioWYceuw8CuuwRXMB8GA1UdIwQY
MBaAFNqNp0QAx1VauifBKJ+/uQszt5oiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83NTlhYjQtZWI0MC00MThjLThmMTEt
MjVhNjgyNGUzMTU3LzEvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83NTlhYjQtZWI0MC00MThjLThmMTEtMjVhNjgyNGUzMTU3
LzEvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB31cgBr
32mPQyYkbW9IDbMrG0g/EM/fBmrRsOeN+E5Lm58tDsjIxfMGa2rtGdXK3gbi0he0
qLNKKFJe3XUgcTuEHVtfxuKqrezMxVbPBJFIDJyIrr3tGFNYcckHs7cP/cCHIz+k
feaaFXNImnerRa2ClaLXfM8UMflrtdZHXB8cqnwiD93o9WNLQzB0aVaSnftRP4S3
f4JA+0ZZ66FVqBjFdyoNodJlp2rAqG8jXluoyrqG3miZ5XxU9v70ii7RijoqBA4F
m/IisG4PF2lCvmn0/W04qBDVAJc/JueFsq5Aq6Ac4lF+JNy7VW03miV4okVL3Hlv
shYGw9ryOvii1A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:25:30 2026 by rpki-client