Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: yTa3SGJmZ+des57+xTC4pS+eb5Aa0ucxS7qm7qnrgr0=
Subject key identifier: 47:1A:B6:A6:B5:08:B1:84:16:7E:35:5F:56:CE:6F:B4:CE:25:D7:7C
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 01A0CB231170B9134E207D57E7F300014D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0A29
Signing time: Tue 22 Sep 2026 22:01:08 +0000
Manifest this update: Tue 22 Sep 2026 22:01:08 +0000
Manifest next update: Wed 23 Sep 2026 22:01:08 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: ag5V92tC6+LTAxkD5ctVgT+Ba2i6zdDX3iA2eWCIyVM=)
2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:11:70:b9:13:4e:20:7d:57:e7:f3:00:01:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Sep 22 22:01:08 2026 GMT
Not After : Sep 23 22:01:08 2026 GMT
Subject: CN=471ab6a6b508b184167e355f56ce6fb4ce25d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:0e:df:30:73:53:fe:b9:af:57:a5:ff:ba:
83:35:07:17:f1:2e:cc:e7:ba:6d:f4:db:49:e2:47:
7d:bd:b3:e3:a2:db:b0:a0:29:a8:5a:e5:81:3a:79:
ff:68:ee:09:fd:53:5c:43:57:7e:92:3b:fe:89:56:
4d:fe:4a:a6:a4:42:0a:18:0b:ab:ce:20:df:d3:89:
35:9b:e5:96:30:57:51:ac:f4:c5:54:d1:aa:f4:a8:
44:9a:8b:2f:9a:a6:4c:52:fc:9a:37:dc:16:c6:9b:
c9:9f:62:1e:08:9f:97:66:c4:7b:ed:38:51:62:bd:
9b:7c:57:8b:4c:cf:e7:48:06:21:68:33:4d:81:84:
30:ae:8d:bb:15:33:b4:36:b1:8a:75:7e:fd:d5:7c:
de:ef:eb:ed:de:17:cd:bf:ba:ac:0b:51:79:de:0d:
ac:1e:dd:41:c3:d2:ac:22:8a:2a:39:ba:ea:88:1b:
ed:9b:e8:6a:5c:6e:6d:05:46:06:0d:76:75:09:99:
49:a2:f9:6a:f2:04:a0:cc:2e:1a:e3:ea:24:35:6c:
7c:b6:48:53:4e:80:01:77:b3:a9:4d:f5:47:92:52:
ad:c9:35:0f:2e:9c:18:9a:0b:78:fe:73:da:d3:bd:
71:ca:5f:11:64:39:48:55:8b:d3:3c:a0:e4:ff:ab:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:B6:A6:B5:08:B1:84:16:7E:35:5F:56:CE:6F:B4:CE:25:D7:7C
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:a3:20:87:b2:2d:be:ec:13:23:fd:ad:0a:28:a8:57:3f:
0d:e1:e4:01:1d:a8:92:40:3c:55:8a:a9:9c:cb:19:6c:3c:d8:
f8:36:7b:e2:da:6e:1d:fa:92:2e:af:90:2c:cb:56:bb:43:70:
0a:37:49:48:17:a6:0f:d6:dd:bb:67:9b:65:f6:04:97:ff:e6:
fe:41:1b:82:01:a6:66:30:1d:cb:f2:28:e1:bf:d1:37:b8:e6:
56:48:5a:e7:c0:2e:bd:93:9f:31:ca:88:0c:12:fe:b5:49:51:
cf:2c:e7:d5:c1:8a:93:82:a2:01:2f:42:bf:36:1a:72:fa:3f:
a5:eb:db:88:4d:48:7d:db:af:dd:30:d2:01:37:bd:50:bf:89:
0f:e7:3f:fa:65:5c:1b:eb:fa:c6:93:54:c0:04:b5:41:2c:ae:
29:cc:1d:fb:b5:94:f1:4a:7a:b5:65:9c:95:a0:43:ee:31:4c:
d5:79:31:0d:a9:7c:b9:05:e6:e2:a4:91:54:11:2f:c0:21:48:
c9:2a:0b:9b:a8:d7:cc:15:3a:6b:ae:8a:9d:da:0c:bc:67:4b:
9e:65:47:53:f4:15:22:83:36:f6:0f:77:30:26:f2:34:41:45:
73:74:4d:c5:c8:ec:83:51:0e:9c:37:df:1d:bf:cf:5c:32:ea:
e7:9b:e7:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIxFwuRNOIH1X5/MAAU0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjYwOTIyMjIwMTA4WhcNMjYwOTIzMjIwMTA4WjAzMTEwLwYDVQQD
Eyg0NzFhYjZhNmI1MDhiMTg0MTY3ZTM1NWY1NmNlNmZiNGNlMjVkNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW0O3zBzU/65r1el/7qDNQcX8S7M
57pt9NtJ4kd9vbPjotuwoCmoWuWBOnn/aO4J/VNcQ1d+kjv+iVZN/kqmpEIKGAur
ziDf04k1m+WWMFdRrPTFVNGq9KhEmosvmqZMUvyaN9wWxpvJn2IeCJ+XZsR77ThR
Yr2bfFeLTM/nSAYhaDNNgYQwro27FTO0NrGKdX791Xze7+vt3hfNv7qsC1F53g2s
Ht1Bw9KsIooqObrqiBvtm+hqXG5tBUYGDXZ1CZlJovlq8gSgzC4a4+okNWx8tkhT
ToABd7OpTfVHklKtyTUPLpwYmgt4/nPa071xyl8RZDlIVYvTPKDk/6tTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcatqa1CLGEFn41X1bOb7TOJdd8MB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATI+jIIey
Lb7sEyP9rQooqFc/DeHkAR2okkA8VYqpnMsZbDzY+DZ74tpuHfqSLq+QLMtWu0Nw
CjdJSBemD9bdu2ebZfYEl//m/kEbggGmZjAdy/Io4b/RN7jmVkha58AuvZOfMcqI
DBL+tUlRzyzn1cGKk4KiAS9CvzYacvo/pevbiE1Ifduv3TDSATe9UL+JD+c/+mVc
G+v6xpNUwAS1QSyuKcwd+7WU8Up6tWWclaBD7jFM1XkxDal8uQXm4qSRVBEvwCFI
ySoLm6jXzBU6a66KndoMvGdLnmVHU/QVIoM29g93MCbyNEFFc3RNxcjsg1EOnDff
Hb/PXDLq55vn3Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:36 2026 by rpki-client