Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: 6yRCcCV+IjLkCkk/2/ByfMguateZYj2yhvzGdNyUaxI=
Subject key identifier: 40:65:C1:31:59:4B:8B:08:DD:59:02:9C:8B:FF:D0:C3:70:55:0F:B8
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 01A0CA7D5C735F0BD00238E93BC649FA3D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 19:00:08 +0000
Manifest this update: Tue 22 Sep 2026 19:00:08 +0000
Manifest next update: Wed 23 Sep 2026 19:00:08 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: noNeWmvDubi0VmYEwQqdZ9tVUaDuAQQSHyhphkMgkno=)
2: maZq56SMgB7nWqqF5eeF3G-X-7A.roa (hash: xVS8tTvs0Q9QEIgJ9B2IqY6QH4qt+wpz/OCltyOVeVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:5c:73:5f:0b:d0:02:38:e9:3b:c6:49:fa:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Sep 22 19:00:08 2026 GMT
Not After : Sep 23 19:00:08 2026 GMT
Subject: CN=4065c131594b8b08dd59029c8bffd0c370550fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:52:41:6a:4a:76:6a:66:23:e9:32:18:03:
1a:58:0e:ae:ab:25:6f:4c:d7:2c:4c:fd:8c:22:e3:
60:96:f4:24:a5:e8:87:8d:fe:1c:d5:5a:7d:fb:66:
c0:eb:5e:fb:98:67:b0:db:23:33:40:16:66:bc:cf:
c6:c5:23:9c:39:76:e6:d8:06:2e:dd:31:a9:01:89:
47:9a:ab:db:8f:08:90:a6:74:5e:9a:1a:2f:f3:5b:
aa:0a:9e:33:9d:52:db:22:85:57:b4:42:a1:0f:e6:
f6:b4:fc:41:33:16:92:93:1f:6f:e4:93:f6:f8:e0:
f7:53:3f:ad:8f:62:0e:fb:38:78:13:c2:c4:c2:fe:
97:08:cd:18:37:54:bd:3f:0f:81:ea:da:c2:d0:0a:
f7:c5:73:d2:a1:e8:50:76:ce:15:1c:23:58:91:4f:
0c:f4:fa:99:7d:7e:e1:72:84:1c:7e:a4:ef:3d:64:
ef:3e:38:d0:14:6a:60:73:1b:e1:ac:c0:2b:08:2d:
91:4d:5e:e4:27:3a:cc:6b:f6:fc:a3:3e:c9:b4:0b:
82:37:3c:18:e6:28:e4:43:d6:e4:e7:7b:6c:28:e3:
e3:8a:26:20:9b:53:0d:1b:e5:d3:b3:d3:a1:40:32:
3a:c4:e4:77:15:51:29:60:a1:e6:a4:ce:2e:3b:89:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:C1:31:59:4B:8B:08:DD:59:02:9C:8B:FF:D0:C3:70:55:0F:B8
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:1b:e3:83:04:df:d4:52:80:0a:9a:18:af:bf:cf:51:e2:
0b:08:49:00:3a:29:26:48:4d:2f:64:a7:85:5d:08:50:f6:d1:
d2:e4:e5:3c:02:ad:c8:91:fd:8f:60:90:e8:02:79:0c:f7:b3:
6b:19:02:8c:14:6c:77:1d:fe:66:a6:53:50:f8:7c:33:74:64:
1a:8a:49:af:a3:6a:55:13:55:bb:23:77:ee:b8:cc:03:ef:8d:
c0:1a:8d:86:31:bb:50:b4:51:3b:88:7f:66:41:fb:4e:ad:61:
bf:06:01:9d:51:3e:fa:d0:c7:20:2c:85:7d:c3:73:50:c8:a5:
02:37:a8:40:9a:4d:14:93:b2:72:9b:97:4a:ad:bc:c0:4b:e2:
4a:44:a3:ff:94:1c:6f:7a:62:c5:a6:b4:ad:8f:31:b3:ab:7a:
b8:15:9d:8e:1d:47:4c:41:45:a4:0e:c2:71:70:b7:62:54:b6:
0d:7e:71:f3:7d:4f:f0:23:8a:f8:a4:99:e7:68:cc:c8:4c:0e:
55:58:f1:36:b0:91:63:ae:01:38:b5:7e:78:fe:42:d6:22:ab:
71:63:ef:8c:53:1c:e9:51:8a:b0:86:48:e3:4c:bb:b9:ee:79:
1d:67:54:66:4c:0e:e5:f8:48:d6:99:22:13:b9:3a:4f:55:7b:
22:fd:82:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfVxzXwvQAjjpO8ZJ+j0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw
MDc0MjYwHhcNMjYwOTIyMTkwMDA4WhcNMjYwOTIzMTkwMDA4WjAzMTEwLwYDVQQD
Eyg0MDY1YzEzMTU5NGI4YjA4ZGQ1OTAyOWM4YmZmZDBjMzcwNTUwZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod5SQWpKdmpmI+kyGAMaWA6uqyVv
TNcsTP2MIuNglvQkpeiHjf4c1Vp9+2bA6177mGew2yMzQBZmvM/GxSOcOXbm2AYu
3TGpAYlHmqvbjwiQpnRemhov81uqCp4znVLbIoVXtEKhD+b2tPxBMxaSkx9v5JP2
+OD3Uz+tj2IO+zh4E8LEwv6XCM0YN1S9Pw+B6trC0Ar3xXPSoehQds4VHCNYkU8M
9PqZfX7hcoQcfqTvPWTvPjjQFGpgcxvhrMArCC2RTV7kJzrMa/b8oz7JtAuCNzwY
5ijkQ9bk53tsKOPjiiYgm1MNG+XTs9OhQDI6xOR3FVEpYKHmpM4uO4kZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBlwTFZS4sI3VkCnIv/0MNwVQ+4MB8GA1UdIwQY
MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt
YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1
LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeB4b44ME
39RSgAqaGK+/z1HiCwhJADopJkhNL2SnhV0IUPbR0uTlPAKtyJH9j2CQ6AJ5DPez
axkCjBRsdx3+ZqZTUPh8M3RkGopJr6NqVRNVuyN37rjMA++NwBqNhjG7ULRRO4h/
ZkH7Tq1hvwYBnVE++tDHICyFfcNzUMilAjeoQJpNFJOycpuXSq28wEviSkSj/5Qc
b3pixaa0rY8xs6t6uBWdjh1HTEFFpA7CcXC3YlS2DX5x831P8COK+KSZ52jMyEwO
VVjxNrCRY64BOLV+eP5C1iKrcWPvjFMc6VGKsIZI40y7ue55HWdUZkwO5fhI1pki
E7k6T1V7Iv2C9w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:17 2026 by rpki-client