Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: pqRCZX4tiab6aJUVGeazqX2/4Gk/j2290+qyyJsdSaU=
Subject key identifier: 00:2E:33:C7:9B:70:FE:53:10:6E:8F:6C:09:9E:C9:95:E1:93:8D:EB
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 01A0CB9096A0E3CE010832D078448073D350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 00:00:45 +0000
Manifest this update: Wed 23 Sep 2026 00:00:45 +0000
Manifest next update: Thu 24 Sep 2026 00:00:45 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: twP05Z4RQbxg7xwTqkkEkFjr3I0TiFiuicH2Cl7kJ7k=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:96:a0:e3:ce:01:08:32:d0:78:44:80:73:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Sep 23 00:00:45 2026 GMT
Not After : Sep 24 00:00:45 2026 GMT
Subject: CN=002e33c79b70fe53106e8f6c099ec995e1938deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:64:2b:28:52:f7:b7:9e:ce:2f:b8:f4:72:
10:a7:b3:1d:9c:3e:2c:fb:99:e4:20:3b:b1:e3:92:
a6:08:d9:63:1b:dc:cd:51:29:cc:b7:65:ea:60:b4:
3a:4f:66:97:45:e9:88:ec:24:05:91:b7:1a:f4:a3:
8c:27:d9:72:26:aa:19:28:a4:47:f2:51:ce:eb:3e:
29:fd:9c:9b:55:19:73:b7:5a:ab:b4:19:6d:54:0e:
17:f9:bf:f8:a9:a2:54:cc:a2:21:1b:98:d1:3b:09:
08:aa:1c:aa:e5:f5:89:fd:19:0d:74:73:6c:a5:67:
09:fd:75:39:e7:ce:b9:bc:75:ab:84:49:f4:0e:b0:
a3:2f:11:9f:59:01:d8:f8:25:84:20:58:24:7a:8a:
a5:3a:6e:d4:6c:45:4e:0d:b3:de:30:9b:19:98:bb:
22:6a:b0:7f:2d:ed:68:49:5f:cb:91:f4:97:99:ac:
fd:4f:0e:2f:13:40:55:b7:bb:76:23:b7:1a:b3:c4:
43:13:14:de:cc:ef:b0:89:50:21:70:c3:c4:38:c0:
82:79:50:e2:a8:53:ef:79:00:b4:40:3e:d7:b5:01:
1e:c0:6f:fa:da:4c:20:da:03:60:7c:ce:82:06:24:
45:6d:66:ca:53:d2:ea:50:49:8e:fb:3f:28:b6:b2:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:33:C7:9B:70:FE:53:10:6E:8F:6C:09:9E:C9:95:E1:93:8D:EB
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:dc:a1:84:52:28:7e:f7:3b:bb:d2:20:e1:d5:8d:8b:f5:
04:df:4c:8b:bf:02:e5:a2:f1:c1:4b:6b:90:76:35:02:36:81:
66:3c:e4:af:44:f4:0d:ce:1f:2b:40:f5:74:2f:f6:bb:1d:7c:
31:d3:2b:88:40:74:f5:34:a6:41:b8:84:6a:e2:13:ec:ac:b9:
68:92:99:55:45:cb:f8:88:90:0b:4c:c2:d8:74:a2:c4:9d:28:
58:00:73:d7:75:7e:de:65:ae:67:89:10:9a:df:a4:19:7b:65:
2f:55:c2:4c:71:0c:68:ed:6e:ea:0d:2c:ac:31:e1:b9:7b:0f:
61:8d:1c:ae:92:d7:23:ac:74:d4:81:b2:7f:37:3f:98:23:67:
74:56:f4:80:6d:2b:96:4f:e7:62:8a:50:70:cf:b7:ae:9a:3d:
cb:72:e5:af:cf:a4:32:4c:a2:03:89:4a:91:05:50:82:0a:03:
43:c0:55:62:0a:93:bd:6b:cc:68:27:ec:ba:7c:3f:85:49:cd:
6d:0a:92:54:ae:5a:f0:0c:ac:6b:46:5c:e0:dc:6e:bc:50:13:
1d:9d:fe:fa:5e:a9:c0:3c:84:86:86:c6:e2:da:6f:e2:ce:be:
86:c6:4c:5b:bf:cd:7c:51:2d:b8:ba:f8:96:bd:15:63:88:5f:
1f:ad:0a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkJag484BCDLQeESAc9NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2
YWViZGIwHhcNMjYwOTIzMDAwMDQ1WhcNMjYwOTI0MDAwMDQ1WjAzMTEwLwYDVQQD
EygwMDJlMzNjNzliNzBmZTUzMTA2ZThmNmMwOTllYzk5NWUxOTM4ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZkKyhS97eezi+49HIQp7MdnD4s
+5nkIDux45KmCNljG9zNUSnMt2XqYLQ6T2aXRemI7CQFkbca9KOMJ9lyJqoZKKRH
8lHO6z4p/ZybVRlzt1qrtBltVA4X+b/4qaJUzKIhG5jROwkIqhyq5fWJ/RkNdHNs
pWcJ/XU55865vHWrhEn0DrCjLxGfWQHY+CWEIFgkeoqlOm7UbEVODbPeMJsZmLsi
arB/Le1oSV/LkfSXmaz9Tw4vE0BVt7t2I7cas8RDExTezO+wiVAhcMPEOMCCeVDi
qFPveQC0QD7XtQEewG/62kwg2gNgfM6CBiRFbWbKU9LqUEmO+z8otrIktwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAuM8ebcP5TEG6PbAmeyZXhk43rMB8GA1UdIwQY
MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt
M2EwNDJmNzdiNzM4LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4
LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3ncoYRS
KH73O7vSIOHVjYv1BN9Mi78C5aLxwUtrkHY1AjaBZjzkr0T0Dc4fK0D1dC/2ux18
MdMriEB09TSmQbiEauIT7Ky5aJKZVUXL+IiQC0zC2HSixJ0oWABz13V+3mWuZ4kQ
mt+kGXtlL1XCTHEMaO1u6g0srDHhuXsPYY0crpLXI6x01IGyfzc/mCNndFb0gG0r
lk/nYopQcM+3rpo9y3Llr8+kMkyiA4lKkQVQggoDQ8BVYgqTvWvMaCfsunw/hUnN
bQqSVK5a8Aysa0Zc4NxuvFATHZ3++l6pwDyEhobG4tpv4s6+hsZMW7/NfFEtuLr4
lr0VY4hfH60KmA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:35:40 2026 by rpki-client