Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: N0x2JRfTY0SlhITjIMrVlusU0zlhCa2KV/azaIkdpX4=
Subject key identifier: 86:09:F1:BE:F2:26:A3:E3:1F:BA:A1:32:56:DA:F4:32:B6:C2:86:A0
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01A0C934304CD966A417C9F0BCC0B3049B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 1952
Signing time: Tue 22 Sep 2026 13:00:35 +0000
Manifest this update: Tue 22 Sep 2026 13:00:35 +0000
Manifest next update: Wed 23 Sep 2026 13:00:35 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: uFzx/fT+nkcgQ2qM2LC6cMigkno9gzvEkL7y0C81yK4=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:30:4c:d9:66:a4:17:c9:f0:bc:c0:b3:04:9b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Sep 22 13:00:35 2026 GMT
Not After : Sep 23 13:00:35 2026 GMT
Subject: CN=8609f1bef226a3e31fbaa13256daf432b6c286a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:60:dc:1e:f5:29:2e:30:d4:14:53:73:05:
9e:c9:64:4b:b4:5c:80:f7:24:c4:b5:20:8d:af:ef:
84:94:ac:7a:5d:35:5c:f7:d8:08:3a:44:b5:23:09:
b8:81:65:e1:7f:01:87:75:56:d4:ca:5f:ac:b4:11:
94:fe:b6:6d:a8:90:fa:fc:a5:ab:fa:98:fa:4a:be:
40:b1:67:d8:09:33:78:9a:39:ec:82:9d:48:22:57:
e7:b8:0b:a4:02:d4:63:a4:7e:26:7b:ec:43:7a:31:
d8:85:2d:45:aa:08:8d:55:b2:da:ec:88:aa:7a:1d:
16:c5:5c:0e:cc:a3:dd:7e:ea:4c:75:c5:26:63:72:
5e:6e:d6:92:13:0b:0e:b7:e8:3e:45:67:78:ef:ae:
8c:a2:4e:b3:83:95:94:a4:fb:51:48:8d:49:64:d7:
1b:69:19:3d:56:81:6a:31:30:bf:00:da:82:5b:bf:
b6:c7:45:e8:78:0f:99:75:d3:93:48:e8:e0:2d:51:
f2:e7:d0:00:c9:11:72:cb:4c:11:ef:57:b0:13:3d:
3a:93:8f:51:07:f3:f2:16:ec:ba:1f:cc:e4:88:79:
83:da:85:1b:26:4a:f7:99:86:27:ce:47:bf:11:0a:
3a:96:21:ca:34:5c:04:dd:96:11:f0:a4:75:34:96:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:09:F1:BE:F2:26:A3:E3:1F:BA:A1:32:56:DA:F4:32:B6:C2:86:A0
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fa:2e:ad:81:33:46:e2:32:84:47:b7:84:45:c6:48:c4:29:
42:6f:65:7f:b6:e5:d5:27:4e:f1:df:8f:2d:9d:d3:25:b6:5b:
ae:c4:71:29:ec:b9:ed:48:02:ca:04:1f:9b:04:85:85:2a:71:
05:a8:8f:4c:0c:43:fa:88:e3:b5:91:53:30:01:fd:5f:39:94:
ef:8f:f1:73:a7:5e:7d:20:f6:28:fb:9e:9f:71:2c:bb:6d:15:
20:60:c7:08:19:97:bd:15:45:df:fe:7e:18:d2:65:b1:a1:69:
04:f5:bd:d7:ab:a6:bc:64:28:c4:f0:5d:c2:bd:8b:ea:f5:7a:
57:ff:d3:6f:52:80:f5:0d:bf:2e:03:a2:e1:67:e2:af:35:15:
be:b1:44:c3:cb:0c:13:4e:c4:81:9e:59:a6:7c:5e:7f:ad:e3:
44:de:3a:13:09:80:a0:dc:fc:19:79:74:49:6f:a8:e9:72:8c:
f0:df:e2:d5:fd:20:68:04:8f:cd:e1:a3:34:fd:6c:42:a8:49:
c3:83:5f:54:54:89:d6:ae:df:30:37:35:2a:0f:aa:36:6b:09:
3b:54:e0:00:2f:d3:90:04:43:7a:28:a1:40:11:44:58:85:ea:
26:ac:67:a0:de:26:f2:8e:30:db:98:96:4b:c6:3b:a7:57:89:
2f:88:9d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNDBM2WakF8nwvMCzBJuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjYwOTIyMTMwMDM1WhcNMjYwOTIzMTMwMDM1WjAzMTEwLwYDVQQD
Eyg4NjA5ZjFiZWYyMjZhM2UzMWZiYWExMzI1NmRhZjQzMmI2YzI4NmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEVg3B71KS4w1BRTcwWeyWRLtFyA
9yTEtSCNr++ElKx6XTVc99gIOkS1Iwm4gWXhfwGHdVbUyl+stBGU/rZtqJD6/KWr
+pj6Sr5AsWfYCTN4mjnsgp1IIlfnuAukAtRjpH4me+xDejHYhS1FqgiNVbLa7Iiq
eh0WxVwOzKPdfupMdcUmY3JebtaSEwsOt+g+RWd4766Mok6zg5WUpPtRSI1JZNcb
aRk9VoFqMTC/ANqCW7+2x0XoeA+ZddOTSOjgLVHy59AAyRFyy0wR71ewEz06k49R
B/PyFuy6H8zkiHmD2oUbJkr3mYYnzke/EQo6liHKNFwE3ZYR8KR1NJb6bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYJ8b7yJqPjH7qhMlba9DK2woagMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPourYEz
RuIyhEe3hEXGSMQpQm9lf7bl1SdO8d+PLZ3TJbZbrsRxKey57UgCygQfmwSFhSpx
BaiPTAxD+ojjtZFTMAH9XzmU74/xc6defSD2KPuen3Esu20VIGDHCBmXvRVF3/5+
GNJlsaFpBPW916umvGQoxPBdwr2L6vV6V//Tb1KA9Q2/LgOi4WfirzUVvrFEw8sM
E07EgZ5Zpnxef63jRN46EwmAoNz8GXl0SW+o6XKM8N/i1f0gaASPzeGjNP1sQqhJ
w4NfVFSJ1q7fMDc1Kg+qNmsJO1TgAC/TkARDeiihQBFEWIXqJqxnoN4m8o4w25iW
S8Y7p1eJL4idDQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:32 2026 by rpki-client