Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: 0yDv755Q8L2ki8bRnV+Y3j8lBSCIdDJ3Ef8+ndBeVNU=
Subject key identifier: E9:87:6A:0E:7A:4D:46:7C:7D:B3:F5:3A:3B:6E:D8:E6:8F:BF:B4:56
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019F9022C65406BC82F82DA56189B9532D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0433
Signing time: Thu 23 Jul 2026 18:00:25 +0000
Manifest this update: Thu 23 Jul 2026 18:00:25 +0000
Manifest next update: Fri 24 Jul 2026 18:00:25 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: KXbxjAvS1wKHKHUDP2JJXMautfq0uCZs9jzt6VI7PvA=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c6:54:06:bc:82:f8:2d:a5:61:89:b9:53:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Jul 23 18:00:25 2026 GMT
Not After : Jul 24 18:00:25 2026 GMT
Subject: CN=e9876a0e7a4d467c7db3f53a3b6ed8e68fbfb456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:42:a2:d7:e1:7c:f3:76:11:9a:89:a5:57:
59:f5:7e:d9:87:31:ba:97:c2:1a:e4:58:a7:63:5d:
bd:06:5c:be:27:2a:96:19:8a:f0:52:4a:96:93:c9:
84:d4:84:55:41:8e:65:32:c3:7b:09:31:db:c3:b0:
92:81:93:73:e0:94:2f:d0:ec:67:e1:29:57:c5:0c:
97:ed:1b:51:30:59:25:d5:9e:10:d1:cb:48:0f:9d:
80:28:20:b8:fe:be:af:9a:ae:aa:38:09:a5:bd:3a:
6c:98:34:e9:20:87:98:55:52:c5:a5:41:83:0d:e9:
94:c4:0e:b5:27:81:5a:c5:22:ce:14:44:e5:29:7d:
ba:a1:d2:a0:c5:db:48:58:a4:5c:87:4f:61:40:3e:
6d:3c:e6:0b:7e:5b:7f:5d:83:13:f0:84:06:2d:f5:
9a:42:45:88:7e:ab:f1:63:65:8d:37:03:2f:48:c6:
33:c1:98:e4:96:20:0a:12:52:35:f8:04:dc:81:e3:
19:44:99:f1:87:17:9f:d5:26:a0:75:40:8c:92:5c:
06:24:12:c2:62:a7:67:88:8f:ee:24:b3:1f:69:18:
14:34:bc:c1:b4:ff:b7:9a:ab:59:a1:f9:a1:ae:f0:
47:59:ab:53:a5:d0:53:d3:3e:a0:08:f4:8f:a8:d7:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:6A:0E:7A:4D:46:7C:7D:B3:F5:3A:3B:6E:D8:E6:8F:BF:B4:56
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:94:01:de:61:33:9d:a1:08:c5:dd:40:58:4e:44:46:96:
93:48:c1:65:7c:a9:16:ce:12:88:d2:96:2c:f1:5e:02:73:ba:
a4:37:83:db:86:c8:ab:22:ad:68:5a:a4:29:bb:b4:a5:0f:f1:
71:42:53:e0:24:b2:91:34:98:c5:43:21:52:df:16:eb:32:6a:
08:19:2c:f5:a2:38:5e:7d:e1:1d:6c:56:c8:44:bf:28:b9:13:
f0:30:03:4e:db:c4:2e:0f:8f:29:ff:2f:b9:d9:5b:a4:59:e5:
ec:cc:6c:b5:68:6a:87:ba:95:d7:2f:67:35:f4:8c:62:f5:25:
a1:7a:9f:51:06:e4:cd:bc:5c:d7:55:14:83:2a:11:8b:40:21:
c8:79:e4:38:92:df:93:e6:4e:d1:ec:59:c0:a5:50:58:83:74:
fd:c4:77:5d:0e:ee:81:51:8d:b9:e2:02:4a:10:46:17:53:9a:
c5:85:aa:ea:a1:ad:e5:b5:e7:7b:8c:a8:11:87:f8:2c:8f:28:
5d:db:03:60:26:57:da:6d:cd:56:28:14:71:3c:bb:f7:0f:1c:
ec:1c:a5:5d:b2:42:cb:fe:57:21:2f:80:95:89:34:3b:50:c4:
5d:3f:7a:cd:1c:9a:39:b4:44:12:b2:a8:8d:72:31:8c:0a:9b:
04:7d:4e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIsZUBryC+C2lYYm5Uy0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl
ZTc4MTgwHhcNMjYwNzIzMTgwMDI1WhcNMjYwNzI0MTgwMDI1WjAzMTEwLwYDVQQD
EyhlOTg3NmEwZTdhNGQ0NjdjN2RiM2Y1M2EzYjZlZDhlNjhmYmZiNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA625CotfhfPN2EZqJpVdZ9X7ZhzG6
l8Ia5FinY129Bly+JyqWGYrwUkqWk8mE1IRVQY5lMsN7CTHbw7CSgZNz4JQv0Oxn
4SlXxQyX7RtRMFkl1Z4Q0ctID52AKCC4/r6vmq6qOAmlvTpsmDTpIIeYVVLFpUGD
DemUxA61J4FaxSLOFETlKX26odKgxdtIWKRch09hQD5tPOYLflt/XYMT8IQGLfWa
QkWIfqvxY2WNNwMvSMYzwZjkliAKElI1+ATcgeMZRJnxhxef1SagdUCMklwGJBLC
YqdniI/uJLMfaRgUNLzBtP+3mqtZofmhrvBHWatTpdBT0z6gCPSPqNepcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmHag56TUZ8fbP1Ojtu2OaPv7RWMB8GA1UdIwQY
MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct
NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl
LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWKUAd5h
M52hCMXdQFhOREaWk0jBZXypFs4SiNKWLPFeAnO6pDeD24bIqyKtaFqkKbu0pQ/x
cUJT4CSykTSYxUMhUt8W6zJqCBks9aI4Xn3hHWxWyES/KLkT8DADTtvELg+PKf8v
udlbpFnl7MxstWhqh7qV1y9nNfSMYvUloXqfUQbkzbxc11UUgyoRi0AhyHnkOJLf
k+ZO0exZwKVQWIN0/cR3XQ7ugVGNueICShBGF1OaxYWq6qGt5bXne4yoEYf4LI8o
XdsDYCZX2m3NVigUcTy79w8c7BylXbJCy/5XIS+AlYk0O1DEXT96zRyaObREErKo
jXIxjAqbBH1OCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:14 2026 by rpki-client