Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: ecgpRW2NqIc0pHK23zH3dtL/Cic/u9xdllAK/5BY8vI=
Subject key identifier: C9:87:1B:4C:EF:AC:61:76:95:7E:4D:4F:17:0C:2E:25:54:B0:C2:07
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 01A0D3151E7E362217045C06F9A1BCC40CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 05ED
Signing time: Thu 24 Sep 2026 11:02:51 +0000
Manifest this update: Thu 24 Sep 2026 11:02:51 +0000
Manifest next update: Fri 25 Sep 2026 11:02:51 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: A3GwgT2VHnkmZm5C8zAYbyZQ5757/NyBoksyHcOftCE=)
2: nNN8oPaWzwsAkuqBUkdubOWtVpo.roa (hash: 0qPiY5OdqzEcTjsFlVm1KfW2HObtyaiMymvYvbm7kPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:1e:7e:36:22:17:04:5c:06:f9:a1:bc:c4:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Sep 24 11:02:51 2026 GMT
Not After : Sep 25 11:02:51 2026 GMT
Subject: CN=c9871b4cefac6176957e4d4f170c2e2554b0c207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:56:6c:36:bd:ad:1b:3c:1c:b2:8e:30:71:
6e:bb:db:f5:35:e2:0b:2c:cc:01:2d:da:be:7d:71:
fd:2d:29:32:9c:f8:66:36:91:68:b8:99:b1:37:11:
94:57:13:80:e3:16:ef:4e:cd:ca:4a:87:b3:c4:62:
a0:45:8c:90:d4:00:70:56:b3:60:11:5c:8e:1f:5d:
eb:a4:55:a1:da:75:6f:68:ea:6a:9c:2c:45:9d:55:
55:da:2a:c7:b1:99:03:0b:3a:55:bb:68:26:3d:bc:
ea:59:74:10:df:6c:ae:c7:db:94:70:c2:1c:58:67:
d9:b9:41:92:cb:94:07:7d:5e:ce:e3:b5:2c:21:51:
32:90:59:ed:fc:e3:0a:3b:0f:d3:96:91:9f:49:7e:
dc:ee:b2:c8:b6:9b:00:74:38:44:eb:2d:df:ec:26:
36:0a:08:4a:b2:a2:cf:5c:a9:ee:fb:cd:65:bb:58:
24:fb:a0:26:d3:32:d7:06:1a:1b:37:f5:3f:6a:fd:
75:b6:7d:fd:67:ff:b4:e1:91:e3:58:25:da:10:45:
b3:78:98:87:b5:1f:ce:ff:c1:d3:53:b5:cd:af:93:
1d:35:f9:f9:29:aa:e4:c7:c6:c6:b8:e3:c8:98:eb:
3f:d4:07:09:a7:f4:aa:04:30:e4:9f:8c:a9:36:c0:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:1B:4C:EF:AC:61:76:95:7E:4D:4F:17:0C:2E:25:54:B0:C2:07
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a1:e9:eb:ce:5d:0f:ba:85:af:62:b1:19:5e:99:32:d3:28:
81:f7:be:f5:cc:01:f1:74:6e:a5:66:11:51:ae:32:5d:b0:86:
b5:2a:aa:09:c9:c6:e4:6e:53:46:4c:15:ac:b4:d9:a0:33:61:
82:e4:45:8b:7e:c0:9e:76:a8:09:30:68:78:6b:a0:64:dc:6a:
6e:cc:53:9b:0f:60:a2:86:5a:6b:9d:b2:b3:2e:61:46:64:3d:
3d:76:9b:fb:99:7c:5b:ee:fe:1e:fb:4a:0e:76:01:a7:ae:15:
88:69:2f:f2:10:07:c7:72:86:b6:73:0c:ea:c0:c3:49:06:cb:
69:3b:aa:07:a4:2f:33:57:0c:72:df:69:b1:6d:8f:94:b0:5c:
b1:3b:a9:35:49:dc:ff:04:ca:b9:f3:b0:4e:f4:3f:47:43:2d:
93:d4:43:82:6d:c6:ae:2f:50:26:1b:53:b2:02:49:71:82:f8:
12:2a:ff:53:b1:fe:76:71:9b:5e:5d:14:7f:c4:b4:92:7f:9a:
3a:f7:d8:e0:4f:82:9f:73:36:68:3d:0b:10:c7:17:72:18:ed:
94:f2:80:32:16:96:0f:a1:8d:6e:de:6a:73:37:02:c8:93:af:
27:f8:13:21:7c:84:f8:95:b1:28:7f:9d:93:50:03:1b:c1:74:
69:65:3a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFR5+NiIXBFwG+aG8xAy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4M2VmNzE0Mjk5OGU0ZTY1NjYwNTNlMmM2M2E3MDgwOGM2
ZWEyMzcwHhcNMjYwOTI0MTEwMjUxWhcNMjYwOTI1MTEwMjUxWjAzMTEwLwYDVQQD
EyhjOTg3MWI0Y2VmYWM2MTc2OTU3ZTRkNGYxNzBjMmUyNTU0YjBjMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJWbDa9rRs8HLKOMHFuu9v1NeIL
LMwBLdq+fXH9LSkynPhmNpFouJmxNxGUVxOA4xbvTs3KSoezxGKgRYyQ1ABwVrNg
EVyOH13rpFWh2nVvaOpqnCxFnVVV2irHsZkDCzpVu2gmPbzqWXQQ32yux9uUcMIc
WGfZuUGSy5QHfV7O47UsIVEykFnt/OMKOw/TlpGfSX7c7rLItpsAdDhE6y3f7CY2
CghKsqLPXKnu+81lu1gk+6Am0zLXBhobN/U/av11tn39Z/+04ZHjWCXaEEWzeJiH
tR/O/8HTU7XNr5MdNfn5Karkx8bGuOPImOs/1AcJp/SqBDDkn4ypNsCC+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmHG0zvrGF2lX5NTxcMLiVUsMIHMB8GA1UdIwQY
MBaAFNg+9xQpmOTmVmBT4sY6cICMbqI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjIt
N2Y3NWExYjEwZWMzLzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjItN2Y3NWExYjEwZWMz
LzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Hp685d
D7qFr2KxGV6ZMtMogfe+9cwB8XRupWYRUa4yXbCGtSqqCcnG5G5TRkwVrLTZoDNh
guRFi37AnnaoCTBoeGugZNxqbsxTmw9gooZaa52ysy5hRmQ9PXab+5l8W+7+HvtK
DnYBp64ViGkv8hAHx3KGtnMM6sDDSQbLaTuqB6QvM1cMct9psW2PlLBcsTupNUnc
/wTKufOwTvQ/R0Mtk9RDgm3Gri9QJhtTsgJJcYL4Eir/U7H+dnGbXl0Uf8S0kn+a
OvfY4E+Cn3M2aD0LEMcXchjtlPKAMhaWD6GNbt5qczcCyJOvJ/gTIXyE+JWxKH+d
k1ADG8F0aWU6DA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:20 2026 by rpki-client