Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: 49ZK+Peh/n0BSaTnAv6P8xM3dyu1ZaQpY5HhKogyu/Y=
Subject key identifier: E8:9A:B4:F3:3B:87:41:7B:BA:10:D7:5A:4E:C6:9D:C0:22:B6:B7:77
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019F8EA2C8A2E6F542A47B69C7E7B6111AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 191F
Signing time: Thu 23 Jul 2026 11:01:00 +0000
Manifest this update: Thu 23 Jul 2026 11:01:00 +0000
Manifest next update: Fri 24 Jul 2026 11:01:00 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: c+HLKhjACPQ9ULur2tD0HOZstxts4+NPaVNU8K8nMeQ=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c8:a2:e6:f5:42:a4:7b:69:c7:e7:b6:11:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Jul 23 11:01:00 2026 GMT
Not After : Jul 24 11:01:00 2026 GMT
Subject: CN=e89ab4f33b87417bba10d75a4ec69dc022b6b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:ef:72:57:f4:38:b6:54:ec:83:a2:1e:b0:
52:dc:75:1d:84:54:76:1e:4a:99:16:19:f2:e8:e6:
73:3c:e6:09:da:25:15:cb:2d:ea:6f:6a:52:e8:c2:
eb:42:16:f5:7d:3c:88:eb:16:f7:ec:e8:c1:5a:ba:
a1:4c:85:96:46:42:3a:97:84:23:70:92:58:d8:96:
98:ee:9e:bd:20:32:65:de:45:e5:d0:26:ea:e0:2e:
64:3d:7a:1d:40:8e:47:96:0e:79:07:f9:8e:8e:39:
4d:2f:a7:e1:91:4e:ba:c1:e8:d9:69:ae:78:d6:85:
94:08:59:f1:88:bc:be:65:1d:56:c3:01:bd:3c:17:
28:4a:38:52:5b:73:39:76:56:97:89:3d:a3:d5:8d:
be:f5:28:30:4b:ea:05:fa:03:4a:e8:83:39:45:6a:
d7:74:d4:bb:6d:af:a1:75:a9:23:1b:7b:5e:85:d6:
50:4b:79:00:12:5e:bc:a4:e6:3e:51:9f:db:26:b8:
b3:e4:1a:66:bb:5c:14:3f:ff:6a:39:a2:d2:8e:2b:
ba:a0:e8:9d:5d:29:87:54:dc:17:db:ca:5e:c6:c6:
fa:82:b0:1a:f5:7a:86:c5:ec:70:bc:3a:ff:c6:6e:
28:d7:44:35:54:a0:02:ff:3b:9d:68:da:b5:da:98:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:B4:F3:3B:87:41:7B:BA:10:D7:5A:4E:C6:9D:C0:22:B6:B7:77
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a2:7e:57:90:e3:fa:e7:02:cb:24:29:6a:5d:06:9f:b8:52:
12:42:ff:20:58:38:c4:14:14:7d:6a:d0:8f:00:df:1b:2d:16:
e3:70:48:60:91:6a:99:10:5e:5c:e3:2d:0f:20:01:0d:27:65:
8a:06:c7:7b:0b:75:a7:28:4f:60:1f:c7:d5:67:13:95:ae:b2:
b2:8a:0a:4c:ad:59:b3:ee:3c:01:16:90:d3:89:a0:da:d0:c0:
e7:94:b4:14:67:65:9c:2f:35:50:42:22:55:e5:ef:a4:1d:73:
89:17:95:60:2c:bd:fa:37:55:6d:5f:93:49:b0:71:f4:75:65:
98:b6:89:7a:e6:af:21:88:cf:7a:fb:43:65:ed:05:f6:ab:f5:
2c:d2:7b:97:c3:17:39:67:78:e0:8a:c1:2b:34:a9:99:d3:8f:
1c:c2:90:c1:31:c2:01:9f:85:36:7e:72:3d:20:80:32:55:54:
90:8e:62:d9:b3:ae:1a:c3:d1:fb:6c:bb:9d:1c:96:e8:df:d3:
60:39:db:c9:b1:7a:6d:c6:18:02:d6:57:c8:ff:ae:75:e6:45:
80:5d:23:73:f6:1d:3c:64:32:12:99:c4:9d:eb:34:1c:6a:63:
7e:e0:66:21:94:0d:d3:5a:97:57:e3:f8:fe:a2:cf:f2:91:f3:
3a:bc:e2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oosii5vVCpHtpx+e2ERrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5
MzAyZmQwHhcNMjYwNzIzMTEwMTAwWhcNMjYwNzI0MTEwMTAwWjAzMTEwLwYDVQQD
EyhlODlhYjRmMzNiODc0MTdiYmExMGQ3NWE0ZWM2OWRjMDIyYjZiNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDvclf0OLZU7IOiHrBS3HUdhFR2
HkqZFhny6OZzPOYJ2iUVyy3qb2pS6MLrQhb1fTyI6xb37OjBWrqhTIWWRkI6l4Qj
cJJY2JaY7p69IDJl3kXl0Cbq4C5kPXodQI5Hlg55B/mOjjlNL6fhkU66wejZaa54
1oWUCFnxiLy+ZR1WwwG9PBcoSjhSW3M5dlaXiT2j1Y2+9SgwS+oF+gNK6IM5RWrX
dNS7ba+hdakjG3tehdZQS3kAEl68pOY+UZ/bJriz5Bpmu1wUP/9qOaLSjiu6oOid
XSmHVNwX28pexsb6grAa9XqGxexwvDr/xm4o10Q1VKAC/zudaNq12piwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiatPM7h0F7uhDXWk7GncAitrd3MB8GA1UdIwQY
MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt
Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5
LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqJ+V5Dj
+ucCyyQpal0Gn7hSEkL/IFg4xBQUfWrQjwDfGy0W43BIYJFqmRBeXOMtDyABDSdl
igbHewt1pyhPYB/H1WcTla6ysooKTK1Zs+48ARaQ04mg2tDA55S0FGdlnC81UEIi
VeXvpB1ziReVYCy9+jdVbV+TSbBx9HVlmLaJeuavIYjPevtDZe0F9qv1LNJ7l8MX
OWd44IrBKzSpmdOPHMKQwTHCAZ+FNn5yPSCAMlVUkI5i2bOuGsPR+2y7nRyW6N/T
YDnbybF6bcYYAtZXyP+udeZFgF0jc/YdPGQyEpnEnes0HGpjfuBmIZQN01qXV+P4
/qLP8pHzOrzi1g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:01 2026 by rpki-client