Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: NYNpnddhMppCx+J2y7zPKJ8GxqIIJ/EY/tccRE/dlNA=
Subject key identifier: AA:78:B8:DB:C6:1F:53:06:2D:A0:A3:B3:5A:41:84:6F:32:3B:DF:76
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019F905A90863B11465CFB5A5FC3F0287DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0986
Signing time: Thu 23 Jul 2026 19:01:21 +0000
Manifest this update: Thu 23 Jul 2026 19:01:21 +0000
Manifest next update: Fri 24 Jul 2026 19:01:21 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: F0lCIKq3HmwIuziIUUdI0uXBJ1ez0sM9yEWYe6qxDo4=)
2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:90:86:3b:11:46:5c:fb:5a:5f:c3:f0:28:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Jul 23 19:01:21 2026 GMT
Not After : Jul 24 19:01:21 2026 GMT
Subject: CN=aa78b8dbc61f53062da0a3b35a41846f323bdf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:8c:e3:27:21:6d:ae:ef:5e:bc:0f:99:aa:
3c:e6:ca:90:55:33:e6:01:f5:18:f7:41:0d:a4:66:
d6:1c:13:55:8d:64:f2:47:19:27:ca:e4:c8:da:b2:
f9:0a:3a:73:a0:f4:d7:55:a8:b0:38:a9:39:1e:34:
be:bf:49:1b:c4:81:14:60:7a:0b:6c:6d:bf:1d:5e:
38:b2:be:3a:ed:3d:69:6f:04:bd:db:da:ea:5c:de:
e8:b1:49:b7:3f:5b:15:a6:87:d0:d0:69:31:7f:04:
8c:5f:87:19:c9:49:07:57:54:1e:ca:0f:cb:e3:75:
c9:88:fa:bd:db:90:d2:06:72:e2:cb:88:b6:6b:18:
16:7a:6e:4a:28:23:c6:a7:20:46:32:b4:61:08:24:
54:af:30:e6:d7:a0:59:99:4d:d9:e0:d1:6e:49:4d:
db:ee:e3:ff:f2:fd:d3:54:6a:a5:3a:4e:65:4c:1a:
bd:4b:bc:c9:68:c7:d8:8b:f2:05:49:91:e2:64:d2:
06:1a:bc:e2:b3:fa:4a:91:11:57:fe:4f:aa:b4:71:
3f:38:8f:4e:7d:eb:40:dc:63:97:28:56:83:82:45:
e5:2f:2f:2f:54:ee:88:4c:6f:fa:74:12:c5:ae:35:
16:30:f4:24:03:e8:2d:42:37:7a:e5:d2:89:59:80:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:B8:DB:C6:1F:53:06:2D:A0:A3:B3:5A:41:84:6F:32:3B:DF:76
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:38:6d:d1:9b:65:ce:64:16:50:63:2f:14:d8:75:01:0e:
1b:2a:99:42:26:79:bf:52:9b:aa:b1:f6:eb:72:ff:b5:de:12:
17:88:4e:39:47:04:12:01:69:de:66:cc:e0:44:cf:69:4a:9a:
46:1c:96:d0:9c:9f:05:5b:30:5b:be:56:3d:c8:81:86:a7:0f:
26:97:2c:ea:a7:ed:1b:23:c5:ab:10:c3:86:03:85:63:ec:5e:
c3:13:eb:6b:19:d0:03:da:2c:a6:fb:bf:15:33:34:1f:5c:27:
88:b4:89:9e:17:5b:3f:b7:83:30:41:30:70:6c:6e:dd:96:38:
cf:fb:63:7b:82:4d:e9:7d:31:34:6a:75:15:40:28:fd:bb:3f:
36:10:e0:1c:15:18:52:5b:08:27:48:c5:e3:7b:8c:76:08:f7:
d9:c4:15:61:4f:50:8a:67:09:7e:2e:d5:bf:ae:bb:58:6d:39:
16:38:cb:d3:a0:2d:76:4c:d5:7a:25:8d:0a:6a:d6:e1:23:aa:
8f:43:66:4f:89:be:7d:34:49:1a:37:8d:e2:9f:30:2e:49:98:
b0:da:1d:0e:d9:6b:ae:bf:19:13:aa:fc:02:95:05:44:ba:e3:
98:32:c2:2f:a1:52:df:d5:f1:c8:66:46:30:5e:22:d8:be:99:
f6:30:15:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWpCGOxFGXPtaX8PwKH3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjYwNzIzMTkwMTIxWhcNMjYwNzI0MTkwMTIxWjAzMTEwLwYDVQQD
EyhhYTc4YjhkYmM2MWY1MzA2MmRhMGEzYjM1YTQxODQ2ZjMyM2JkZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0WM4ychba7vXrwPmao85sqQVTPm
AfUY90ENpGbWHBNVjWTyRxknyuTI2rL5CjpzoPTXVaiwOKk5HjS+v0kbxIEUYHoL
bG2/HV44sr467T1pbwS929rqXN7osUm3P1sVpofQ0GkxfwSMX4cZyUkHV1Qeyg/L
43XJiPq925DSBnLiy4i2axgWem5KKCPGpyBGMrRhCCRUrzDm16BZmU3Z4NFuSU3b
7uP/8v3TVGqlOk5lTBq9S7zJaMfYi/IFSZHiZNIGGrzis/pKkRFX/k+qtHE/OI9O
fetA3GOXKFaDgkXlLy8vVO6ITG/6dBLFrjUWMPQkA+gtQjd65dKJWYBt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp4uNvGH1MGLaCjs1pBhG8yO992MB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADg4bdGb
Zc5kFlBjLxTYdQEOGyqZQiZ5v1KbqrH263L/td4SF4hOOUcEEgFp3mbM4ETPaUqa
RhyW0JyfBVswW75WPciBhqcPJpcs6qftGyPFqxDDhgOFY+xewxPraxnQA9ospvu/
FTM0H1wniLSJnhdbP7eDMEEwcGxu3ZY4z/tje4JN6X0xNGp1FUAo/bs/NhDgHBUY
UlsIJ0jF43uMdgj32cQVYU9QimcJfi7Vv667WG05FjjL06AtdkzVeiWNCmrW4SOq
j0NmT4m+fTRJGjeN4p8wLkmYsNodDtlrrr8ZE6r8ApUFRLrjmDLCL6FS39XxyGZG
MF4i2L6Z9jAVFg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:32 2026 by rpki-client