Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: 0ZIUl+XJoVB+rXGdxHy3ElvguGfEsqNE15ectPuoFcw=
Subject key identifier: 88:D4:94:8B:DE:FE:5D:FD:12:5A:48:4B:14:89:DB:97:3D:14:2E:36
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 01A0D0EE154A58BE095849BD92DA1C9BD845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 082F
Signing time: Thu 24 Sep 2026 01:00:58 +0000
Manifest this update: Thu 24 Sep 2026 01:00:58 +0000
Manifest next update: Fri 25 Sep 2026 01:00:58 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: ez2Jiy17fbbQfhC6FCtSSGk1SVpOnGwVRJfk5vGmIMA=)
2: KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa (hash: BSUmQnkTle9HViYYJkRZjSse8w3JaRvHWOR9HNyaels=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:15:4a:58:be:09:58:49:bd:92:da:1c:9b:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Sep 24 01:00:58 2026 GMT
Not After : Sep 25 01:00:58 2026 GMT
Subject: CN=88d4948bdefe5dfd125a484b1489db973d142e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:5f:3f:6e:ce:1c:05:35:7d:7c:4a:df:a9:
66:48:0b:94:3e:43:3b:42:20:85:ec:13:7d:c8:40:
66:f8:a9:40:02:89:21:91:9b:64:d1:80:a3:b4:9e:
c3:34:86:3d:b2:65:5f:4e:9e:ab:19:5d:f8:ec:76:
e9:54:7c:27:06:69:66:d6:80:d3:89:fe:f1:da:85:
08:11:a4:aa:19:0a:86:db:76:78:d1:92:5d:b8:f9:
41:d4:f2:61:fb:c4:8a:c6:8b:f1:15:80:bf:24:bd:
c9:ba:3c:ac:ff:79:d3:28:33:34:d6:61:c1:e3:d1:
e4:fa:c3:62:f1:44:a2:96:17:b6:f2:82:13:9f:85:
58:a6:a7:f1:65:b8:b4:3e:1a:27:98:04:55:1b:24:
b7:d3:53:b5:a2:4e:2e:10:80:db:47:e5:f9:59:ae:
89:39:43:e2:74:d6:1b:cc:c2:aa:ae:60:80:98:c4:
bd:14:90:78:b8:51:66:9e:f8:e1:20:a7:91:c6:c2:
9c:ea:5b:63:64:67:d4:b0:2f:96:e5:1e:0a:a9:25:
a0:3c:30:d3:19:12:b5:01:54:62:b7:9d:6d:c7:34:
89:bf:8b:6c:01:6d:08:a4:51:06:36:e3:28:a7:6d:
dc:f2:8c:e0:28:75:b2:5a:24:ed:ed:9c:cc:fd:ca:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:94:8B:DE:FE:5D:FD:12:5A:48:4B:14:89:DB:97:3D:14:2E:36
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:c2:be:e7:40:38:a7:3d:f7:45:47:6e:ed:f1:13:5c:45:
bf:97:38:e0:c0:2f:37:38:c1:bd:a7:9c:ad:7d:19:b5:ff:54:
a5:f0:49:ce:7e:10:4f:cb:3b:24:f9:24:f7:be:6d:f7:a8:63:
f5:9b:dc:c1:93:58:0d:05:f3:ca:eb:d6:6e:9f:9e:a9:40:c8:
92:5c:d1:59:0d:b3:8b:51:fa:61:31:8e:51:18:3b:8e:00:67:
2e:ff:de:25:40:3b:43:15:2f:ff:c8:c9:a4:da:e6:e7:88:e9:
a3:d3:b3:d9:fd:a9:16:e8:66:e5:2d:03:ba:37:d2:5f:50:07:
5f:6c:1c:ff:6e:d8:21:4a:76:f1:04:ca:03:1a:b0:8f:92:17:
94:e2:dc:61:a7:75:25:c8:c4:80:47:9b:eb:8d:c2:95:ac:6b:
e5:df:2c:2e:34:40:32:28:20:ef:e5:e7:99:53:ec:55:33:4b:
99:e6:fe:c7:a2:50:44:c0:65:8b:82:4b:51:ec:e5:aa:a1:12:
3b:a0:1e:4b:0f:4a:b3:c4:7c:70:5c:b6:07:6a:ae:03:d6:b2:
cb:c5:72:ac:3f:64:ad:16:96:dc:f5:60:a5:05:ce:b6:1b:1e:
6c:92:56:41:ab:ea:52:ed:d3:be:b4:0e:30:fc:d5:79:5e:17:
b7:c2:dc:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7hVKWL4JWEm9ktocm9hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTc4ZTg2NmU5MjA0ZDAxYTZmNTJkMzlmZDg0ZmYwOTAw
YjIxZDQwHhcNMjYwOTI0MDEwMDU4WhcNMjYwOTI1MDEwMDU4WjAzMTEwLwYDVQQD
Eyg4OGQ0OTQ4YmRlZmU1ZGZkMTI1YTQ4NGIxNDg5ZGI5NzNkMTQyZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ftfP27OHAU1fXxK36lmSAuUPkM7
QiCF7BN9yEBm+KlAAokhkZtk0YCjtJ7DNIY9smVfTp6rGV347HbpVHwnBmlm1oDT
if7x2oUIEaSqGQqG23Z40ZJduPlB1PJh+8SKxovxFYC/JL3Jujys/3nTKDM01mHB
49Hk+sNi8USilhe28oITn4VYpqfxZbi0PhonmARVGyS301O1ok4uEIDbR+X5Wa6J
OUPidNYbzMKqrmCAmMS9FJB4uFFmnvjhIKeRxsKc6ltjZGfUsC+W5R4KqSWgPDDT
GRK1AVRit51txzSJv4tsAW0IpFEGNuMop23c8ozgKHWyWiTt7ZzM/cqppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjUlIve/l39ElpISxSJ25c9FC42MB8GA1UdIwQY
MBaAFNnnjoZukgTQGm9S05/YT/CQCyHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEt
ZDc2ZDY2MjdmYjJlLzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEtZDc2ZDY2MjdmYjJl
LzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8HCvudA
OKc990VHbu3xE1xFv5c44MAvNzjBvaecrX0Ztf9UpfBJzn4QT8s7JPkk975t96hj
9ZvcwZNYDQXzyuvWbp+eqUDIklzRWQ2zi1H6YTGOURg7jgBnLv/eJUA7QxUv/8jJ
pNrm54jpo9Oz2f2pFuhm5S0DujfSX1AHX2wc/27YIUp28QTKAxqwj5IXlOLcYad1
JcjEgEeb643Claxr5d8sLjRAMigg7+XnmVPsVTNLmeb+x6JQRMBli4JLUezlqqES
O6AeSw9Ks8R8cFy2B2quA9ayy8VyrD9krRaW3PVgpQXOthsebJJWQavqUu3TvrQO
MPzVeV4Xt8LcZA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:51 2026 by rpki-client