Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: RkcqbbxyJfIlZWakXyaG/RWG+j2VZbQ7u1qkSJxH1kE=
Subject key identifier: 6F:DC:C3:F4:94:F8:31:8C:5E:CE:FC:15:43:84:C3:BA:A1:D6:36:C3
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01A0E5F5DFD70EE4B928695C86B35CD5D8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 03:01:31 +0000
Manifest this update: Mon 28 Sep 2026 03:01:31 +0000
Manifest next update: Tue 29 Sep 2026 03:01:31 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: 2jvzmZhXukaXlhaWvxsi6qXhKPSjb6eoMCPQLPJfpNs=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:df:d7:0e:e4:b9:28:69:5c:86:b3:5c:d5:d8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Sep 28 03:01:31 2026 GMT
Not After : Sep 29 03:01:31 2026 GMT
Subject: CN=6fdcc3f494f8318c5ecefc154384c3baa1d636c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:99:ed:7e:51:37:07:d2:50:8b:65:f6:32:
95:c0:73:90:f8:47:81:dd:bc:4d:1c:26:47:33:e6:
a1:8c:54:16:31:67:2f:c8:da:cf:b0:30:74:08:13:
36:7c:0f:00:7a:ce:88:dd:e0:e3:0b:9e:57:5d:06:
38:c8:8c:8d:49:af:a1:a3:9f:df:50:56:6e:32:aa:
5c:8e:cc:ed:33:6e:27:f7:69:5f:57:51:d5:1f:b1:
e9:13:3c:08:70:7f:23:5a:42:b8:db:e7:ce:6f:8e:
1e:50:f7:2e:7a:18:bb:12:50:c5:a9:ea:ce:e4:49:
da:c2:5d:ab:4e:c2:a5:49:2b:f0:90:60:4a:05:7b:
52:91:49:e2:4d:5b:08:e2:e7:de:f2:ea:2c:9c:30:
9a:89:ee:b2:94:b3:d3:83:a6:8c:df:2f:72:0c:d2:
b8:0c:5c:44:35:de:02:84:60:de:30:55:f7:53:88:
22:e2:fe:c5:1f:8a:d3:86:69:af:f6:a8:cb:2a:29:
b9:8b:2d:84:67:d1:e5:3a:f2:d6:2a:91:4a:c4:2f:
f8:41:4a:d9:d2:57:e9:6b:d7:18:89:cb:6f:30:c9:
44:51:2b:da:10:08:44:0d:c2:3c:10:40:66:f7:fa:
2a:12:ec:93:44:54:94:cf:58:a9:12:1d:5e:ad:6c:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:C3:F4:94:F8:31:8C:5E:CE:FC:15:43:84:C3:BA:A1:D6:36:C3
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f2:3c:95:d9:74:a3:9c:31:0c:bd:5f:b7:d7:09:23:cb:36:
c9:7f:37:8d:f1:6e:27:70:b0:a6:e8:d7:b8:3d:d2:fc:e3:0e:
88:06:33:88:3f:cb:d9:51:f5:6d:23:af:b7:7c:44:f8:03:41:
6e:1b:e2:10:cb:96:4d:94:7a:23:8d:f5:e5:e9:f0:c5:5c:87:
78:43:34:bf:c2:cb:bc:29:57:cd:c9:cc:cb:c6:d8:a9:4c:7d:
ea:19:c9:1a:e7:2d:90:e8:a3:4f:28:00:7b:9c:71:e2:a8:ed:
c8:ac:f6:7c:b7:fb:8f:f9:f2:ce:95:d7:53:72:42:c1:50:2e:
cd:5b:a6:0d:de:45:c2:86:86:0d:51:b4:a9:0a:49:2f:cb:f2:
0d:09:b0:66:a5:17:3c:c3:bd:c6:14:98:ce:5a:29:15:52:da:
7d:21:d8:ad:6d:92:44:84:4c:15:2c:54:09:42:d3:ae:cc:e8:
fc:ae:44:0b:9c:d4:05:3d:75:7b:f6:6c:ac:a0:96:ea:99:68:
16:26:b9:90:b8:41:af:a3:01:8b:b8:4a:df:19:ab:e3:52:3d:
f1:df:e8:fc:d1:cc:99:5e:0b:fd:63:7a:81:7b:77:35:76:f4:
fd:e7:2d:2e:28:0a:f2:2b:8d:bd:df:9d:b3:3e:88:f0:00:d4:
e3:b1:20:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDl9d/XDuS5KGlchrNc1djRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1
YjVkN2IwHhcNMjYwOTI4MDMwMTMxWhcNMjYwOTI5MDMwMTMxWjAzMTEwLwYDVQQD
Eyg2ZmRjYzNmNDk0ZjgzMThjNWVjZWZjMTU0Mzg0YzNiYWExZDYzNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzSZ7X5RNwfSUItl9jKVwHOQ+EeB
3bxNHCZHM+ahjFQWMWcvyNrPsDB0CBM2fA8Aes6I3eDjC55XXQY4yIyNSa+ho5/f
UFZuMqpcjsztM24n92lfV1HVH7HpEzwIcH8jWkK42+fOb44eUPcuehi7ElDFqerO
5Enawl2rTsKlSSvwkGBKBXtSkUniTVsI4ufe8uosnDCaie6ylLPTg6aM3y9yDNK4
DFxENd4ChGDeMFX3U4gi4v7FH4rThmmv9qjLKim5iy2EZ9HlOvLWKpFKxC/4QUrZ
0lfpa9cYictvMMlEUSvaEAhEDcI8EEBm9/oqEuyTRFSUz1ipEh1erWy1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/cw/SU+DGMXs78FUOEw7qh1jbDMB8GA1UdIwQY
MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct
NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy
LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/I8ldl0
o5wxDL1ft9cJI8s2yX83jfFuJ3CwpujXuD3S/OMOiAYziD/L2VH1bSOvt3xE+ANB
bhviEMuWTZR6I4315enwxVyHeEM0v8LLvClXzcnMy8bYqUx96hnJGuctkOijTygA
e5xx4qjtyKz2fLf7j/nyzpXXU3JCwVAuzVumDd5FwoaGDVG0qQpJL8vyDQmwZqUX
PMO9xhSYzlopFVLafSHYrW2SRIRMFSxUCULTrszo/K5EC5zUBT11e/ZsrKCW6plo
Fia5kLhBr6MBi7hK3xmr41I98d/o/NHMmV4L/WN6gXt3NXb0/ectLigK8iuNvd+d
sz6I8ADU47Egjw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:07:36 2026 by rpki-client