Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
File: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft (raw, json)
Hash identifier: N6A/qWGwDbPp/Di8gTX8373ZghTGn/YQ6IG/6crcyrM=
Subject key identifier: D5:EB:C5:EE:27:DB:50:7B:31:B7:17:88:ED:79:26:96:83:C3:B4:90
Authority key identifier: DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
Certificate issuer: /CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Certificate serial: 01A0E2500A36D07DA09F516368E5727C522C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
Manifest number: 0277
Signing time: Sun 27 Sep 2026 10:01:31 +0000
Manifest this update: Sun 27 Sep 2026 10:01:31 +0000
Manifest next update: Mon 28 Sep 2026 10:01:31 +0000
Files and hashes: 1: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl (hash: KZuB3yV+r8aED1HqpBhsuK702td0G2DIWv462FmOifY=)
2: QZpcoFZ-mTdXgaU_KSl2tUqS-WA.roa (hash: kKgOgir5OcWMeFMyd0QfuGiJS19k1i7Dnvnix7dS1ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:0a:36:d0:7d:a0:9f:51:63:68:e5:72:7c:52:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Validity
Not Before: Sep 27 10:01:31 2026 GMT
Not After : Sep 28 10:01:31 2026 GMT
Subject: CN=d5ebc5ee27db507b31b71788ed79269683c3b490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:f4:1c:66:41:c4:d8:19:3b:44:90:59:b1:
1b:d4:99:dc:03:af:a8:e1:bd:a1:ee:f3:7a:22:cd:
be:56:0f:9d:72:b0:03:e7:24:3c:4a:d1:0e:0b:3d:
f3:ae:0c:d9:26:1d:e3:60:b4:70:6e:e8:46:09:2a:
6e:99:fb:cd:29:53:70:2c:50:23:10:a2:82:53:bc:
79:8a:7a:c7:14:3e:cd:81:32:15:e8:59:bf:7d:23:
76:51:3c:e0:5b:54:6b:91:ba:50:13:d6:e3:34:3f:
ed:6d:ac:08:89:8c:a2:39:59:c0:4c:5f:bd:2c:a7:
53:76:cf:e6:7e:5b:d8:ce:1b:e7:84:f4:d0:42:f1:
92:aa:c5:86:6b:91:da:11:d7:20:ec:54:be:47:db:
50:ef:6c:15:90:dc:c0:7d:11:d5:50:e4:e2:61:de:
26:2c:b1:61:9c:28:03:fb:b5:f3:83:fd:4c:4f:74:
8f:f3:c6:b3:2b:81:a2:2a:16:4a:e1:a5:50:11:10:
aa:fe:2d:db:1d:f2:50:6e:95:28:3f:98:16:2f:92:
1c:a1:c6:2a:5e:62:1b:29:c3:60:8c:68:4a:5b:6e:
98:dd:f7:3f:6f:b5:df:10:d5:ef:c7:e6:c4:d1:67:
82:0c:69:7d:14:b7:d4:79:7c:c9:7d:d7:41:44:a5:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:C5:EE:27:DB:50:7B:31:B7:17:88:ED:79:26:96:83:C3:B4:90
X509v3 Authority Key Identifier:
keyid:DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:c3:63:aa:37:65:d9:9e:59:27:d2:20:57:22:6c:3b:01:
17:63:f9:c0:f4:42:70:cf:d5:28:64:99:e5:b9:6e:db:49:2b:
cf:59:c7:01:ab:0c:8b:54:11:7c:33:2c:61:2b:71:3d:30:32:
af:4a:02:41:72:52:ba:32:51:3c:06:8c:31:84:aa:47:f1:79:
c6:da:79:3b:09:46:39:ee:47:57:20:6c:f1:73:bb:00:86:17:
71:d4:4a:02:2b:bc:1a:78:4f:f7:c3:3e:2e:86:f0:74:b0:77:
54:fb:1e:ba:5c:d8:6d:46:d7:c4:37:08:9d:09:3b:02:42:92:
28:40:91:e6:a1:0c:7a:10:5a:75:c9:22:60:2d:17:23:a7:57:
b1:d1:e2:d3:91:a6:17:4d:36:ff:9d:de:2f:c5:78:e4:75:86:
bf:ec:a3:5a:82:20:c2:48:5e:7e:86:d5:e5:a4:a3:c8:39:cb:
69:c2:4a:49:53:96:03:22:0a:3b:50:8b:3b:7c:57:a1:15:66:
64:9e:88:3c:97:22:6c:1a:d2:72:3d:ab:37:3c:6a:cd:e8:08:
01:6b:64:be:b4:ca:05:7c:0c:8f:fa:5d:2d:7b:34:1a:86:1e:
11:eb:fe:5a:fe:c1:d2:5a:cd:ed:04:b2:bd:d1:97:f8:7a:32:
61:6b:57:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiUAo20H2gn1FjaOVyfFIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTQwZTA2OWIzMWYyYjg0YzVkYmQyMTNlZDQ2NzczYjA2
MzNlNTIwHhcNMjYwOTI3MTAwMTMxWhcNMjYwOTI4MTAwMTMxWjAzMTEwLwYDVQQD
EyhkNWViYzVlZTI3ZGI1MDdiMzFiNzE3ODhlZDc5MjY5NjgzYzNiNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQD0HGZBxNgZO0SQWbEb1JncA6+o
4b2h7vN6Is2+Vg+dcrAD5yQ8StEOCz3zrgzZJh3jYLRwbuhGCSpumfvNKVNwLFAj
EKKCU7x5inrHFD7NgTIV6Fm/fSN2UTzgW1RrkbpQE9bjND/tbawIiYyiOVnATF+9
LKdTds/mflvYzhvnhPTQQvGSqsWGa5HaEdcg7FS+R9tQ72wVkNzAfRHVUOTiYd4m
LLFhnCgD+7Xzg/1MT3SP88azK4GiKhZK4aVQERCq/i3bHfJQbpUoP5gWL5IcocYq
XmIbKcNgjGhKW26Y3fc/b7XfENXvx+bE0WeCDGl9FLfUeXzJfddBRKWPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXrxe4n21B7MbcXiO15JpaDw7SQMB8GA1UdIwQY
MBaAFNsUDgabMfK4TF29IT7UZ3OwYz5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEt
MzQ5NmU0OGU1NTE0LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEtMzQ5NmU0OGU1NTE0
LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV7DY6o3
ZdmeWSfSIFcibDsBF2P5wPRCcM/VKGSZ5blu20krz1nHAasMi1QRfDMsYStxPTAy
r0oCQXJSujJRPAaMMYSqR/F5xtp5OwlGOe5HVyBs8XO7AIYXcdRKAiu8GnhP98M+
LobwdLB3VPseulzYbUbXxDcInQk7AkKSKECR5qEMehBadckiYC0XI6dXsdHi05Gm
F002/53eL8V45HWGv+yjWoIgwkhefobV5aSjyDnLacJKSVOWAyIKO1CLO3xXoRVm
ZJ6IPJcibBrScj2rNzxqzegIAWtkvrTKBXwMj/pdLXs0GoYeEev+Wv7B0lrN7QSy
vdGX+HoyYWtXIA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:20:27 2026 by rpki-client