Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: Apc/JQlPR2mCjsKfCNaUpJKw3XgWVNBuIrweQ5Ge9s8=
Subject key identifier: D6:9D:78:44:56:53:9D:CC:A4:9B:65:57:E8:88:BF:22:EE:31:3E:8A
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 01A0E0CF1EA6B2DDE58B53803D3EBF0E4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 03:01:05 +0000
Manifest this update: Sun 27 Sep 2026 03:01:05 +0000
Manifest next update: Mon 28 Sep 2026 03:01:05 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: mJMvQ77nAV2GBimZ4PHekXBHrKmDT7rNN4h6xXnSWA4=)
2: kX0ln8n5R4ckT5blpr2Q8T6dxyw.roa (hash: m+DqRW/7H7lJLeLV4xP2QSBsOS0wlhVWEX4nGDQ/zJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:1e:a6:b2:dd:e5:8b:53:80:3d:3e:bf:0e:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Sep 27 03:01:05 2026 GMT
Not After : Sep 28 03:01:05 2026 GMT
Subject: CN=d69d784456539dcca49b6557e888bf22ee313e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:89:04:22:3f:ad:a4:ae:95:27:19:83:86:
7c:a3:11:de:3e:74:98:75:bf:70:bf:5e:b9:b9:7f:
02:5a:1f:c9:a3:33:1b:0d:f1:a2:32:98:72:53:1a:
0c:fe:75:26:76:f4:1c:6f:d5:2e:30:0c:23:6c:fd:
b8:ee:ac:58:5b:e5:5d:8b:1b:c6:9f:94:cb:97:b4:
d1:da:57:8d:ae:ee:ec:97:0c:09:2e:cb:7d:90:1f:
bf:be:0f:93:83:4c:41:61:d6:11:fe:4b:a1:7d:76:
c2:d4:a1:45:6b:89:aa:4c:9f:cd:e4:4f:8f:30:d0:
3c:14:1d:bf:74:21:6c:a6:dc:f2:d2:96:0b:23:81:
2f:f6:57:ab:29:7c:61:47:20:2e:12:b7:57:68:73:
a9:ee:b4:e4:15:47:6c:84:cd:74:d4:37:19:46:1d:
2f:18:f0:57:f5:80:dc:52:98:b0:a9:4d:a3:27:d3:
5e:ee:8f:4f:f4:d9:e8:0c:1b:35:5b:5d:ea:63:c7:
33:69:6e:0d:b4:0d:bf:f5:9e:52:11:62:53:af:55:
78:b7:3f:81:35:9f:90:8f:0f:49:39:56:64:5e:3b:
dc:e6:06:5e:19:42:c8:63:37:9c:06:cd:e4:9b:33:
ab:fc:d5:90:b8:f7:50:d4:b1:8d:5c:df:d0:36:37:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:78:44:56:53:9D:CC:A4:9B:65:57:E8:88:BF:22:EE:31:3E:8A
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:c6:34:57:aa:54:1a:77:4c:11:5c:6f:86:60:40:7d:2b:
8a:be:46:e7:38:8e:7c:c8:9c:66:d4:32:c1:8b:4a:a0:83:01:
01:61:34:b5:9a:87:10:5c:04:f4:d1:7b:7e:e1:55:51:03:42:
d8:64:ba:9a:da:ea:50:0c:f4:78:7a:5d:f8:ff:6f:6f:eb:08:
46:72:d1:67:f6:55:41:78:1c:41:b3:ad:6d:a9:58:32:dd:7d:
fc:4c:f2:a3:31:47:ec:50:ab:13:0e:e2:fc:6e:76:4d:b3:97:
da:eb:54:b3:9d:3e:fa:e4:b4:a1:0d:b7:2e:83:96:49:36:88:
90:13:d7:4c:92:2a:4c:14:24:cd:e8:e3:17:d1:6c:3b:ef:0c:
a7:f5:f6:a5:cf:14:4a:fe:53:eb:5c:56:61:6b:ea:be:a1:7b:
d8:41:8f:70:a7:ac:b9:f4:44:1d:98:e5:a5:3e:b6:57:13:0e:
73:22:b7:bd:c0:47:88:03:4b:33:03:9b:da:26:14:86:a0:27:
68:69:aa:dc:94:f6:ef:ad:e3:99:40:23:85:03:7b:a6:72:7c:
f9:fc:34:5f:ff:33:bb:0a:bd:f0:c4:5b:34:75:5a:6f:b2:45:
55:a2:57:f3:1b:5a:7a:4a:61:14:46:3c:4e:4f:42:0d:8d:c7:
95:a7:fb:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgzx6mst3li1OAPT6/DkElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZjBhMzljZmFkZjkxMGY2YjEzMmFkMjI4ZTYwNjU2MTg4
N2EwNmMwHhcNMjYwOTI3MDMwMTA1WhcNMjYwOTI4MDMwMTA1WjAzMTEwLwYDVQQD
EyhkNjlkNzg0NDU2NTM5ZGNjYTQ5YjY1NTdlODg4YmYyMmVlMzEzZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyJBCI/raSulScZg4Z8oxHePnSY
db9wv165uX8CWh/JozMbDfGiMphyUxoM/nUmdvQcb9UuMAwjbP247qxYW+VdixvG
n5TLl7TR2leNru7slwwJLst9kB+/vg+Tg0xBYdYR/kuhfXbC1KFFa4mqTJ/N5E+P
MNA8FB2/dCFsptzy0pYLI4Ev9lerKXxhRyAuErdXaHOp7rTkFUdshM101DcZRh0v
GPBX9YDcUpiwqU2jJ9Ne7o9P9NnoDBs1W13qY8czaW4NtA2/9Z5SEWJTr1V4tz+B
NZ+Qjw9JOVZkXjvc5gZeGULIYzecBs3kmzOr/NWQuPdQ1LGNXN/QNjciywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNadeERWU53MpJtlV+iIvyLuMT6KMB8GA1UdIwQY
MBaAFNrwo5z635EPaxMq0ijmBlYYh6BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMt
OTJiMjA3ZjY0MWIxLzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMtOTJiMjA3ZjY0MWIx
LzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILDGNFeq
VBp3TBFcb4ZgQH0rir5G5ziOfMicZtQywYtKoIMBAWE0tZqHEFwE9NF7fuFVUQNC
2GS6mtrqUAz0eHpd+P9vb+sIRnLRZ/ZVQXgcQbOtbalYMt19/EzyozFH7FCrEw7i
/G52TbOX2utUs50++uS0oQ23LoOWSTaIkBPXTJIqTBQkzejjF9FsO+8Mp/X2pc8U
Sv5T61xWYWvqvqF72EGPcKesufREHZjlpT62VxMOcyK3vcBHiANLMwOb2iYUhqAn
aGmq3JT2763jmUAjhQN7pnJ8+fw0X/8zuwq98MRbNHVab7JFVaJX8xtaekphFEY8
Tk9CDY3Hlaf74A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:09:18 2026 by rpki-client