Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier: 053OgLL2ig67yVBr1UbE1hx2jJPOv+FnlXpqDI5uqlo=
Subject key identifier: 47:84:F2:EC:CB:03:96:5F:B9:AF:49:F1:B9:B9:F2:64:B9:D0:28:38
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 019F909122B95F998C009485782C5930C444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number: 10E8
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: LVJr8j1Kg/M0TL/3PwEBRcXZqVX6aLrDFwWjHoGTzf0=)
2: L2j3YbDrhxKGFha7tz1-c-vN-uQ.roa (hash: iDoMcXtz4bozdB/C54gk9t9e+mReC2IXbtgvzCL2Yp0=)
3: UIBjpglW4YWleiz-oKKmcURIxwc.roa (hash: ErWPaj7tYXmjYMsLMNAAh1j4o0c+Mnbdnzjy6PRwJIk=)
4: UZsKg_QtparPPd-wVk9iuY4cLb8.roa (hash: LXCP+y+LLCN1p4aORJt/oEFqWyCdqeZadpBwWIWxu8s=)
5: i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa (hash: gEKkmfmle5KluLRAtXEyZBHa6B0VwRl775bqLnntmPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:22:b9:5f:99:8c:00:94:85:78:2c:59:30:c4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=4784f2eccb03965fb9af49f1b9b9f264b9d02838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:0a:7e:b2:b5:4f:33:20:97:b3:07:80:5c:
5f:a0:61:ee:25:92:62:1c:46:11:6e:a6:86:6c:a6:
22:11:f8:21:c1:b6:a4:d0:09:bc:93:70:8a:aa:09:
ac:4d:2c:5e:2a:4f:97:97:79:e0:1b:b2:9a:48:7d:
7c:41:9c:b4:03:39:96:e5:3f:2e:e4:db:cc:f9:59:
6e:6d:2c:ad:f7:08:56:19:11:13:10:93:aa:83:df:
cc:48:e5:04:91:3f:17:20:6b:7d:c7:74:68:28:fe:
fa:e9:f5:ff:74:39:e8:f0:1b:fa:2d:fd:0e:75:b7:
d7:79:ae:9b:2a:d7:f1:d0:42:49:fa:0f:eb:c3:5b:
d0:fa:cb:94:66:26:9a:6b:e5:86:8e:b2:ab:55:96:
22:ba:97:e7:a4:7e:5a:2f:be:b1:c6:6f:cd:e5:ec:
0a:35:9b:da:15:9b:27:ca:eb:18:0f:62:1f:21:1d:
a3:29:8f:e6:d0:ed:24:f2:aa:cb:df:78:be:8b:ea:
28:4b:2b:f5:15:5b:89:d6:25:da:fe:59:0e:e1:25:
21:09:39:9a:0d:df:91:3f:08:f4:28:e3:cd:24:f3:
81:cd:c9:8f:2e:5f:7c:29:80:df:3d:e8:b7:8b:03:
c5:09:ad:3c:a7:08:d8:3a:37:f0:86:ba:97:36:69:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:F2:EC:CB:03:96:5F:B9:AF:49:F1:B9:B9:F2:64:B9:D0:28:38
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:16:7a:55:b6:bb:bd:21:09:12:20:b8:54:1c:a7:bb:5d:
77:5f:62:3d:fc:db:97:c0:7b:f1:d5:b1:88:ed:97:39:a4:f7:
f8:99:91:5f:77:c3:2e:46:75:0e:44:13:6d:d5:9d:7c:0f:b0:
e9:d2:0a:0d:83:28:2f:5e:a3:42:5e:39:55:28:7a:97:08:57:
3a:63:f1:58:8b:d4:a4:ed:61:20:f3:34:6c:c6:04:1e:c4:71:
62:fc:cd:98:98:1a:cf:d2:00:9e:13:7b:26:14:17:bd:e3:ca:
24:0b:b2:e6:30:e9:5e:ab:f3:ca:e5:1b:6b:6a:96:79:de:0e:
c5:2d:1d:68:d8:66:95:2d:ef:2c:6d:a4:c7:c6:91:f9:c6:b3:
5c:4e:8d:80:00:ea:3a:75:92:b5:06:81:48:75:36:87:29:a0:
b2:17:e3:00:a9:e5:5c:59:47:07:60:17:e5:e4:fc:bf:b3:45:
e4:81:22:27:78:56:bc:40:ca:eb:42:7b:3a:c8:61:4e:44:d1:
72:62:4e:e4:69:d4:6e:46:86:b7:d4:17:7f:2c:0b:fd:ce:11:
fa:ce:04:a5:fb:2a:15:c8:72:90:41:d3:89:6d:a2:5e:84:06:
4d:4c:dd:71:20:fc:53:e2:36:27:46:2e:b0:93:d9:55:ca:88:
6c:07:db:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSK5X5mMAJSFeCxZMMREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl
YjA4ODgwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD
Eyg0Nzg0ZjJlY2NiMDM5NjVmYjlhZjQ5ZjFiOWI5ZjI2NGI5ZDAyODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXAKfrK1TzMgl7MHgFxfoGHuJZJi
HEYRbqaGbKYiEfghwbak0Am8k3CKqgmsTSxeKk+Xl3ngG7KaSH18QZy0AzmW5T8u
5NvM+VlubSyt9whWGRETEJOqg9/MSOUEkT8XIGt9x3RoKP766fX/dDno8Bv6Lf0O
dbfXea6bKtfx0EJJ+g/rw1vQ+suUZiaaa+WGjrKrVZYiupfnpH5aL76xxm/N5ewK
NZvaFZsnyusYD2IfIR2jKY/m0O0k8qrL33i+i+ooSyv1FVuJ1iXa/lkO4SUhCTma
Dd+RPwj0KOPNJPOBzcmPLl98KYDfPei3iwPFCa08pwjYOjfwhrqXNmnaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeE8uzLA5Zfua9J8bm58mS50Cg4MB8GA1UdIwQY
MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt
YzI2NDczODVlNzI3LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3
LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoukWelW2
u70hCRIguFQcp7tdd19iPfzbl8B78dWxiO2XOaT3+JmRX3fDLkZ1DkQTbdWdfA+w
6dIKDYMoL16jQl45VSh6lwhXOmPxWIvUpO1hIPM0bMYEHsRxYvzNmJgaz9IAnhN7
JhQXvePKJAuy5jDpXqvzyuUba2qWed4OxS0daNhmlS3vLG2kx8aR+cazXE6NgADq
OnWStQaBSHU2hymgshfjAKnlXFlHB2AX5eT8v7NF5IEiJ3hWvEDK60J7OshhTkTR
cmJO5GnUbkaGt9QXfywL/c4R+s4EpfsqFchykEHTiW2iXoQGTUzdcSD8U+I2J0Yu
sJPZVcqIbAfbAw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:37 2026 by rpki-client