Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: mQueTcqCqBu8nWHwz/a7uhY1CWCFmkS6famyt6vMSQs=
Subject key identifier: D1:DC:C3:2E:F3:7E:F7:DC:BF:44:8D:CB:13:E2:E6:67:AF:AE:08:29
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 01A0F945AA9AE06D86757CC4C92947983A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 0AA9
Signing time: Thu 01 Oct 2026 21:01:27 +0000
Manifest this update: Thu 01 Oct 2026 21:01:27 +0000
Manifest next update: Fri 02 Oct 2026 21:01:27 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: I4GiJzKZVXwc7E1VIkrOUKvEp1Dm7kbxDPKfOeqHevQ=)
2: E-yRnzG7ZI-qWGUM5EP-InpQDNU.asa (hash: pzdSZPp7JHmHwqTyi0CsWbcwsAVLCV+NGK2ZhfJeNWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:aa:9a:e0:6d:86:75:7c:c4:c9:29:47:98:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Oct 1 21:01:27 2026 GMT
Not After : Oct 2 21:01:27 2026 GMT
Subject: CN=d1dcc32ef37ef7dcbf448dcb13e2e667afae0829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:b5:45:2f:17:07:8e:83:ff:cc:d5:be:d3:
a1:53:40:6d:f5:40:58:ca:0b:27:79:b7:af:a8:6e:
b7:3b:e4:8d:c8:9b:68:34:5e:17:9c:a1:1a:85:2c:
71:c1:97:03:ae:84:bf:93:9b:d5:79:08:f5:3e:12:
05:6f:80:e4:94:a9:f3:d8:16:b9:23:02:b3:42:fc:
d6:6e:e0:2d:de:d8:e9:c5:27:06:b4:a4:c6:80:d1:
dd:05:45:48:6e:c0:7b:f7:68:1d:e4:f6:c1:6b:c2:
45:41:1c:5a:5d:1c:bd:15:19:e4:1b:a9:aa:55:6a:
c8:13:46:6a:0d:5e:88:5a:b2:9d:3b:60:83:14:33:
f4:2a:be:35:de:60:01:45:97:b0:d5:a7:40:ab:8c:
8a:44:51:01:ba:27:7a:f3:9e:92:5c:2e:36:ba:e9:
2d:f1:69:05:f4:fa:cf:5e:b8:26:77:24:8e:41:43:
91:6d:7c:9e:23:8f:40:e2:9b:26:c9:9e:52:f0:90:
8c:7e:90:10:62:d2:7f:a0:dd:f8:bd:2d:98:fb:ce:
30:ce:ca:85:3c:6f:15:0a:c7:3d:aa:08:d2:61:fc:
c2:df:41:17:dc:39:cb:0b:04:46:2f:90:85:8b:33:
5d:e2:bf:87:f4:6b:ed:2c:5e:50:83:81:e8:c3:e4:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:C3:2E:F3:7E:F7:DC:BF:44:8D:CB:13:E2:E6:67:AF:AE:08:29
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:a6:0d:f5:ba:6c:23:ab:64:f4:73:2a:b9:67:18:43:53:
f0:af:54:ea:ed:7a:b5:79:40:1f:fb:22:26:6d:01:a1:bc:11:
76:39:a9:a5:cf:d9:85:1c:14:89:9f:26:c6:a0:4c:3e:8e:e2:
7e:51:87:0a:74:74:b1:63:ff:47:80:bc:76:28:1f:05:b0:f5:
b0:c0:b3:ae:2b:10:06:cf:07:c2:00:b9:8c:bd:c1:ca:a0:ef:
76:fb:a6:2d:e1:05:0a:fb:6b:4d:c9:1e:84:38:f0:ce:0b:10:
53:af:f6:a6:87:90:79:4d:99:6c:bf:a1:5e:fb:7b:fb:6d:71:
df:cd:a3:e4:8f:17:f4:bf:fd:eb:bb:69:f9:0a:77:68:ae:82:
0b:f6:7f:82:a6:de:ac:a5:bb:92:9b:c4:5a:03:f8:36:bc:a4:
11:6a:30:26:5a:90:1b:df:fc:b3:4c:d2:ab:12:c4:3f:34:bc:
81:1b:bf:81:a1:f3:5d:fd:c0:e4:b2:b4:88:88:b8:1b:2d:01:
d3:2e:b6:78:9b:75:05:2d:64:a4:5e:af:a4:14:e6:06:51:9d:
fd:c3:3c:eb:90:a6:74:98:2a:d5:a7:4e:aa:70:81:66:b3:aa:
fd:9d:a0:a2:79:9a:4e:b1:8a:1f:78:7d:a3:cb:c4:51:67:bb:
b8:b6:9b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5Raqa4G2GdXzEySlHmDqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjYxMDAxMjEwMTI3WhcNMjYxMDAyMjEwMTI3WjAzMTEwLwYDVQQD
EyhkMWRjYzMyZWYzN2VmN2RjYmY0NDhkY2IxM2UyZTY2N2FmYWUwODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pe1RS8XB46D/8zVvtOhU0Bt9UBY
ygsnebevqG63O+SNyJtoNF4XnKEahSxxwZcDroS/k5vVeQj1PhIFb4DklKnz2Ba5
IwKzQvzWbuAt3tjpxScGtKTGgNHdBUVIbsB792gd5PbBa8JFQRxaXRy9FRnkG6mq
VWrIE0ZqDV6IWrKdO2CDFDP0Kr413mABRZew1adAq4yKRFEBuid6856SXC42uukt
8WkF9PrPXrgmdySOQUORbXyeI49A4psmyZ5S8JCMfpAQYtJ/oN34vS2Y+84wzsqF
PG8VCsc9qgjSYfzC30EX3DnLCwRGL5CFizNd4r+H9GvtLF5Qg4How+TWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHcwy7zfvfcv0SNyxPi5mevrggpMB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVimDfW6
bCOrZPRzKrlnGENT8K9U6u16tXlAH/siJm0BobwRdjmppc/ZhRwUiZ8mxqBMPo7i
flGHCnR0sWP/R4C8digfBbD1sMCzrisQBs8HwgC5jL3ByqDvdvumLeEFCvtrTcke
hDjwzgsQU6/2poeQeU2ZbL+hXvt7+21x382j5I8X9L/967tp+Qp3aK6CC/Z/gqbe
rKW7kpvEWgP4NrykEWowJlqQG9/8s0zSqxLEPzS8gRu/gaHzXf3A5LK0iIi4Gy0B
0y62eJt1BS1kpF6vpBTmBlGd/cM865CmdJgq1adOqnCBZrOq/Z2gonmaTrGKH3h9
o8vEUWe7uLabyg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:20:50 2026 by rpki-client