Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: BCb73YxV2qjFi7MobBqVmm2PxUcml8xevPcFG+OVPI8=
Subject key identifier: 98:1C:3A:9F:B4:3E:B5:8A:71:46:73:B0:F4:0E:8B:99:07:AC:5D:54
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 01A0D83B4A13BF7EF4DFEBF878521332E030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 11:02:39 +0000
Manifest this update: Fri 25 Sep 2026 11:02:39 +0000
Manifest next update: Sat 26 Sep 2026 11:02:39 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: +N4HTEzsOQq6OTdijKXL4mszccT4TVD/dWL0ykNn81c=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:4a:13:bf:7e:f4:df:eb:f8:78:52:13:32:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Sep 25 11:02:39 2026 GMT
Not After : Sep 26 11:02:39 2026 GMT
Subject: CN=981c3a9fb43eb58a714673b0f40e8b9907ac5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:1c:94:45:f2:ff:e6:f6:f6:c3:14:4a:03:
88:91:5f:e9:c3:29:a3:62:39:36:61:f6:27:e5:5e:
a9:e6:6b:69:06:01:9d:71:60:54:ad:aa:40:4e:3e:
83:57:15:de:fd:10:7e:0c:7b:fb:80:43:69:79:4e:
9f:f1:79:d4:a7:60:74:8f:f5:1c:1d:82:64:8b:de:
cd:51:bd:15:12:c2:40:b3:1f:00:aa:35:83:00:9c:
32:29:14:20:4a:07:5a:1a:60:be:f5:54:e4:30:49:
e3:3e:ac:77:2c:71:72:30:78:3d:f8:a1:b9:5b:5e:
08:5b:20:6c:7e:a7:63:e4:e7:b4:93:3b:cb:19:65:
63:09:49:0a:fa:07:13:b0:6f:ab:31:db:02:de:9e:
b3:1f:ba:e3:fc:d7:dc:56:62:0f:38:89:d1:2f:61:
22:fd:09:9f:e0:da:bd:73:74:ca:5b:08:58:6b:23:
33:c2:5f:66:d1:26:f4:5b:48:c2:56:dd:d3:61:82:
8d:65:b2:a4:ed:6b:23:f2:3d:84:d9:6c:53:20:bf:
b2:82:53:69:57:1c:41:6e:b3:c7:f6:8d:15:8c:c9:
53:d8:f2:89:bf:9a:a0:c8:95:d8:62:44:d1:f7:56:
95:5b:e9:11:a8:f7:3d:f9:7b:5d:35:f2:84:fa:aa:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:3A:9F:B4:3E:B5:8A:71:46:73:B0:F4:0E:8B:99:07:AC:5D:54
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:45:1c:40:36:25:a6:e7:2a:6c:51:00:17:4a:a4:99:e5:c4:
5b:1b:6f:9d:d2:a1:52:82:e7:37:d1:f6:59:68:89:c9:15:7f:
27:42:9f:fe:dd:3c:16:35:b8:6c:c8:33:b8:11:aa:65:da:a9:
a7:fb:3b:b7:47:55:87:c4:57:6f:b1:06:e9:76:a5:b5:32:a1:
eb:57:cc:c4:a7:26:3f:78:cb:73:a8:ed:90:f2:ea:8b:3e:76:
a1:c7:1e:81:11:b6:63:e9:0c:09:34:e3:62:8a:63:15:e7:51:
33:04:92:80:24:68:af:56:f3:46:1f:c9:c9:5a:96:e0:de:17:
9c:b6:e6:30:e3:15:ee:08:b9:c5:04:0e:68:c7:f7:dd:7a:90:
e3:8c:a9:24:76:7d:e4:47:67:f0:df:e2:46:1f:dc:7b:56:39:
a6:18:e0:32:15:7d:36:01:b1:59:58:af:d0:f9:a8:34:d7:8e:
ed:4a:fc:9e:c7:05:b0:ef:60:1e:aa:a8:55:80:b2:73:90:03:
ed:ad:fd:6a:d8:e2:54:5b:d2:15:bb:41:03:3f:8f:f4:bf:ab:
3a:07:0c:38:89:8c:ab:15:f7:71:f7:48:93:26:0c:29:8f:a4:
6d:2c:9d:8a:5d:62:46:36:ee:15:fd:5b:8d:3c:83:a5:2b:3b:
f1:4e:e1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO0oTv3703+v4eFITMuAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjYwOTI1MTEwMjM5WhcNMjYwOTI2MTEwMjM5WjAzMTEwLwYDVQQD
Eyg5ODFjM2E5ZmI0M2ViNThhNzE0NjczYjBmNDBlOGI5OTA3YWM1ZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyacclEXy/+b29sMUSgOIkV/pwymj
Yjk2YfYn5V6p5mtpBgGdcWBUrapATj6DVxXe/RB+DHv7gENpeU6f8XnUp2B0j/Uc
HYJki97NUb0VEsJAsx8AqjWDAJwyKRQgSgdaGmC+9VTkMEnjPqx3LHFyMHg9+KG5
W14IWyBsfqdj5Oe0kzvLGWVjCUkK+gcTsG+rMdsC3p6zH7rj/NfcVmIPOInRL2Ei
/Qmf4Nq9c3TKWwhYayMzwl9m0Sb0W0jCVt3TYYKNZbKk7Wsj8j2E2WxTIL+yglNp
VxxBbrPH9o0VjMlT2PKJv5qgyJXYYkTR91aVW+kRqPc9+XtdNfKE+qptpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgcOp+0PrWKcUZzsPQOi5kHrF1UMB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEUcQDYl
pucqbFEAF0qkmeXEWxtvndKhUoLnN9H2WWiJyRV/J0Kf/t08FjW4bMgzuBGqZdqp
p/s7t0dVh8RXb7EG6XaltTKh61fMxKcmP3jLc6jtkPLqiz52occegRG2Y+kMCTTj
YopjFedRMwSSgCRor1bzRh/JyVqW4N4XnLbmMOMV7gi5xQQOaMf33XqQ44ypJHZ9
5Edn8N/iRh/ce1Y5phjgMhV9NgGxWViv0PmoNNeO7Ur8nscFsO9gHqqoVYCyc5AD
7a39atjiVFvSFbtBAz+P9L+rOgcMOImMqxX3cfdIkyYMKY+kbSydil1iRjbuFf1b
jTyDpSs78U7hYg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:23:00 2026 by rpki-client