Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: W46HRatp+HhSa6JK50ASo1PRRwlFkMvFdMZioo3jxOo=
Subject key identifier: 4B:05:B2:EC:54:0C:52:A3:18:0D:B1:F5:BE:F3:71:A2:E0:F7:CC:86
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 01A0CBC7AB80C4B78C87F7573EB5DCE4A0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 0281
Signing time: Wed 23 Sep 2026 01:00:55 +0000
Manifest this update: Wed 23 Sep 2026 01:00:55 +0000
Manifest next update: Thu 24 Sep 2026 01:00:55 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: AOiZvDbtHa18i+VvaAr3Uw/3GShIL+wMGS4j6t2qVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:ab:80:c4:b7:8c:87:f7:57:3e:b5:dc:e4:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Sep 23 01:00:55 2026 GMT
Not After : Sep 24 01:00:55 2026 GMT
Subject: CN=4b05b2ec540c52a3180db1f5bef371a2e0f7cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:ca:79:bd:88:f3:6f:e2:a1:91:98:a0:b3:
16:53:ff:31:17:47:5e:a5:9d:1a:1c:9b:c8:b7:ba:
de:a8:41:0d:b8:36:60:ca:45:60:a2:01:a0:f5:5d:
2d:76:41:3f:d6:f6:d5:20:28:aa:96:5c:f7:e8:09:
ad:b0:58:a3:c3:9a:13:52:1f:b4:7a:66:73:2d:88:
87:ef:98:da:be:e0:57:ba:f2:9a:d3:d6:70:51:a8:
a3:ac:c4:e0:42:95:c9:7e:d3:74:2e:98:1a:dd:96:
ac:ac:1d:4e:b7:ad:df:72:de:17:75:4b:bd:0e:a9:
e2:12:c9:09:96:36:6e:93:37:92:b8:2d:01:20:ff:
6b:f4:3c:67:3b:e8:92:d3:29:41:84:01:0a:77:d2:
03:6d:ce:f7:81:8d:91:45:91:cc:e5:ed:f3:60:2b:
cc:80:73:8d:93:ab:df:dc:43:f1:4f:a5:c6:af:70:
1c:e5:66:e8:67:a6:7a:6f:d7:cc:c0:fe:10:67:8c:
84:38:27:47:7e:80:af:24:b7:40:da:47:dc:10:0c:
59:1c:ff:e4:54:55:4b:80:6a:30:4f:99:3a:7b:ac:
6e:21:58:4f:9c:4f:6a:02:0f:21:1f:9f:9a:bd:ef:
7f:65:19:fb:5c:e9:30:80:52:94:25:d7:ff:9b:e0:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:B2:EC:54:0C:52:A3:18:0D:B1:F5:BE:F3:71:A2:E0:F7:CC:86
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:08:7d:5a:e9:09:b0:70:5d:e0:46:1a:67:7f:76:f6:2c:ee:
e2:19:e9:37:a3:00:f1:10:c6:21:45:e1:f9:15:44:d0:8b:89:
ef:88:d8:96:64:df:e5:de:f0:c0:b8:ae:6d:24:30:f7:6c:c3:
3e:b3:bb:84:a6:ab:ff:b4:2d:00:fe:8f:5e:89:fd:7b:64:1f:
ce:86:85:df:77:f2:b4:8d:a2:cf:1a:12:cd:8e:47:84:69:4e:
b8:d1:1e:0c:fa:7b:96:51:f3:37:72:4c:94:35:5f:a0:d7:b1:
8a:32:8a:a5:04:07:86:83:08:37:b4:4d:05:df:0b:c4:c6:05:
dc:23:bf:29:30:7b:64:d5:60:62:39:d1:13:7d:62:6b:4f:33:
60:4b:9c:75:41:f0:2d:2a:74:f7:e0:70:8d:ca:bc:65:03:d7:
59:6a:81:cc:de:e0:33:43:d1:20:be:09:4d:35:55:6e:a3:55:
08:c6:21:6f:64:0d:30:9d:bf:00:6d:63:e5:c9:84:ab:d9:93:
05:22:ad:69:49:66:36:50:1c:33:97:ee:4a:86:7a:b3:01:88:
e2:01:e5:34:b9:e8:1b:a5:b0:1f:42:21:c3:85:71:0f:74:93:
8e:a0:a7:15:b9:87:9a:70:c4:88:4c:c4:e5:4c:07:19:fe:35:
36:ef:b2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx6uAxLeMh/dXPrXc5KDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NmE1OGRmOWFhNDdjY2QyMTAyMWViMmM2YmYwNmIzYjQ1
OTBjMDgwHhcNMjYwOTIzMDEwMDU1WhcNMjYwOTI0MDEwMDU1WjAzMTEwLwYDVQQD
Eyg0YjA1YjJlYzU0MGM1MmEzMTgwZGIxZjViZWYzNzFhMmUwZjdjYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTjKeb2I82/ioZGYoLMWU/8xF0de
pZ0aHJvIt7reqEENuDZgykVgogGg9V0tdkE/1vbVICiqllz36AmtsFijw5oTUh+0
emZzLYiH75javuBXuvKa09ZwUaijrMTgQpXJftN0Lpga3ZasrB1Ot63fct4XdUu9
DqniEskJljZukzeSuC0BIP9r9DxnO+iS0ylBhAEKd9IDbc73gY2RRZHM5e3zYCvM
gHONk6vf3EPxT6XGr3Ac5WboZ6Z6b9fMwP4QZ4yEOCdHfoCvJLdA2kfcEAxZHP/k
VFVLgGowT5k6e6xuIVhPnE9qAg8hH5+ave9/ZRn7XOkwgFKUJdf/m+BXXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsFsuxUDFKjGA2x9b7zcaLg98yGMB8GA1UdIwQY
MBaAFNlqWN+apHzNIQIessa/BrO0WQwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMt
MmQ0OWM5YmM5ODJkLzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMtMmQ0OWM5YmM5ODJk
LzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQh9WukJ
sHBd4EYaZ3929izu4hnpN6MA8RDGIUXh+RVE0IuJ74jYlmTf5d7wwLiubSQw92zD
PrO7hKar/7QtAP6PXon9e2QfzoaF33fytI2izxoSzY5HhGlOuNEeDPp7llHzN3JM
lDVfoNexijKKpQQHhoMIN7RNBd8LxMYF3CO/KTB7ZNVgYjnRE31ia08zYEucdUHw
LSp09+Bwjcq8ZQPXWWqBzN7gM0PRIL4JTTVVbqNVCMYhb2QNMJ2/AG1j5cmEq9mT
BSKtaUlmNlAcM5fuSoZ6swGI4gHlNLnoG6WwH0Ihw4VxD3STjqCnFbmHmnDEiEzE
5UwHGf41Nu+yGQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:51 2026 by rpki-client