Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
File: 2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft (raw, json)
Hash identifier: yBI3NMguTTQ3coGQraD1RFaADc+2bJVB9Q4IJTox/oc=
Subject key identifier: 8B:5F:A8:A2:4B:71:64:17:37:96:A4:31:5E:91:13:42:8E:2B:B7:18
Authority key identifier: D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
Certificate issuer: /CN=d9743b665b878583aa26f80f232fed3a4338b422
Certificate serial: 01A0D012F690BEFF42669C808AF443560C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
Manifest number: 10
Signing time: Wed 23 Sep 2026 21:01:38 +0000
Manifest this update: Wed 23 Sep 2026 21:01:38 +0000
Manifest next update: Thu 24 Sep 2026 21:01:38 +0000
Files and hashes: 1: 2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl (hash: BEy7IpF9/doI8cznWNN3cRR/44upT2XEj7lUkTllZ9s=)
2: h3TopCexEANJtQqh5V_FOZwJdac.roa (hash: yFbiua8AaSUqoPeKbQbN2UgZ2ZXPXf7GTDHVzEOJJPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:f6:90:be:ff:42:66:9c:80:8a:f4:43:56:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9743b665b878583aa26f80f232fed3a4338b422
Validity
Not Before: Sep 23 21:01:38 2026 GMT
Not After : Sep 24 21:01:38 2026 GMT
Subject: CN=8b5fa8a24b7164173796a4315e9113428e2bb718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:8a:b4:36:5a:83:0e:01:d5:6c:10:37:d5:
05:3c:3f:46:ed:a3:45:bc:d6:f5:b0:6a:b0:a1:24:
de:18:aa:53:15:0e:c7:ce:81:a5:74:9c:be:4d:db:
e6:12:19:f4:5c:b0:95:39:4b:31:bc:49:cf:40:a1:
0f:24:86:72:cd:43:86:f6:90:d8:ab:bf:bd:99:f3:
0c:db:2e:c2:c0:13:ec:1e:f0:b1:a6:96:26:e9:6c:
fb:2e:de:5a:20:e4:80:2b:12:0d:62:2b:da:c7:88:
7f:30:63:f2:fd:de:f6:ab:ae:d8:71:18:de:fd:2d:
51:c7:f1:38:8b:81:0b:27:9f:ac:e0:6c:e9:9c:d9:
6f:ba:bc:50:24:a5:68:c4:cf:cc:1d:1a:4c:73:8a:
5e:ae:ea:85:4e:de:60:58:30:67:75:41:1e:b4:1d:
e8:ac:c0:22:90:2b:20:de:d8:63:85:74:d5:c3:96:
3a:0a:18:b0:1f:d1:77:b7:06:12:3a:3e:4e:8a:69:
eb:90:9e:05:51:bb:80:5c:7a:1e:77:67:6e:ee:f6:
41:aa:6f:75:09:b8:65:25:a8:56:a6:47:f5:d3:d2:
bb:ab:10:1e:33:72:fd:1b:8f:b9:f5:5c:0d:b8:c8:
0b:27:54:42:f7:81:ac:fe:b2:78:ec:37:32:17:c8:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:A8:A2:4B:71:64:17:37:96:A4:31:5E:91:13:42:8E:2B:B7:18
X509v3 Authority Key Identifier:
keyid:D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4a:62:ae:2e:2c:02:95:5b:34:50:d6:ec:23:5e:62:08:d1:
73:af:1b:13:22:7e:78:07:5c:69:d7:3f:21:79:70:48:2f:48:
f9:52:b0:d6:ad:f2:56:51:44:41:d2:42:ab:b4:8e:fb:73:eb:
88:bc:e5:de:55:8f:38:3c:3e:43:cc:dc:39:29:6d:20:1b:d1:
1f:25:ba:73:7c:ff:3b:b8:e0:23:40:7a:99:c7:69:5b:23:fb:
a4:18:9a:90:24:f6:2e:98:3e:4d:6b:40:23:63:52:b6:f5:37:
ee:da:ef:28:bd:84:95:23:0a:27:95:e1:ff:e0:52:94:d6:1b:
ce:d1:1c:43:1b:66:8f:70:c8:1a:cc:d7:6f:72:75:8d:3e:4e:
f9:ce:ff:6e:65:92:5c:d1:02:12:e7:48:8b:bb:e4:f1:97:31:
be:7e:c2:aa:f7:f3:f7:31:24:04:25:96:4b:7e:4a:50:d7:8e:
9f:3a:28:98:bd:8c:aa:21:e5:4f:75:a7:51:05:38:e7:c5:df:
1d:4f:a5:f6:3d:f3:dd:f9:3e:6b:98:7c:64:3f:d0:25:30:bd:
2d:70:f5:88:86:37:63:82:39:1c:d8:1c:ca:8d:f0:84:50:48:
dd:0c:30:6f:fd:22:a1:51:2d:8d:4b:2b:5d:93:45:b6:cd:d1:
60:75:f9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEvaQvv9CZpyAivRDVgxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzQzYjY2NWI4Nzg1ODNhYTI2ZjgwZjIzMmZlZDNhNDMz
OGI0MjIwHhcNMjYwOTIzMjEwMTM4WhcNMjYwOTI0MjEwMTM4WjAzMTEwLwYDVQQD
Eyg4YjVmYThhMjRiNzE2NDE3Mzc5NmE0MzE1ZTkxMTM0MjhlMmJiNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oWKtDZagw4B1WwQN9UFPD9G7aNF
vNb1sGqwoSTeGKpTFQ7HzoGldJy+TdvmEhn0XLCVOUsxvEnPQKEPJIZyzUOG9pDY
q7+9mfMM2y7CwBPsHvCxppYm6Wz7Lt5aIOSAKxINYivax4h/MGPy/d72q67YcRje
/S1Rx/E4i4ELJ5+s4GzpnNlvurxQJKVoxM/MHRpMc4peruqFTt5gWDBndUEetB3o
rMAikCsg3thjhXTVw5Y6ChiwH9F3twYSOj5OimnrkJ4FUbuAXHoed2du7vZBqm91
CbhlJahWpkf109K7qxAeM3L9G4+59VwNuMgLJ1RC94Gs/rJ47DcyF8i3TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItfqKJLcWQXN5akMV6RE0KOK7cYMB8GA1UdIwQY
MBaAFNl0O2Zbh4WDqib4DyMv7TpDOLQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhRN1psdUhoWU9xSnZnUEl5X3RPa000dENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMGVkMjctNWFkYi00ZDljLTk0ODYt
NTM3ZTY3YjZlMzc0LzEvMlhRN1psdUhoWU9xSnZnUEl5X3RPa000dENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zMGVkMjctNWFkYi00ZDljLTk0ODYtNTM3ZTY3YjZlMzc0
LzEvMlhRN1psdUhoWU9xSnZnUEl5X3RPa000dENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEpiri4s
ApVbNFDW7CNeYgjRc68bEyJ+eAdcadc/IXlwSC9I+VKw1q3yVlFEQdJCq7SO+3Pr
iLzl3lWPODw+Q8zcOSltIBvRHyW6c3z/O7jgI0B6mcdpWyP7pBiakCT2Lpg+TWtA
I2NStvU37trvKL2ElSMKJ5Xh/+BSlNYbztEcQxtmj3DIGszXb3J1jT5O+c7/bmWS
XNECEudIi7vk8Zcxvn7Cqvfz9zEkBCWWS35KUNeOnzoomL2MqiHlT3WnUQU458Xf
HU+l9j3z3fk+a5h8ZD/QJTC9LXD1iIY3Y4I5HNgcyo3whFBI3Qwwb/0ioVEtjUsr
XZNFts3RYHX5Uw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:37:31 2026 by rpki-client