Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: xQvIrVHYwq6cr6rGUrkRE9Ziy9LoFcXPrVmc3sjZw/E=
Subject key identifier: B9:65:6A:F4:CE:76:CD:A0:0D:98:8B:AF:4A:F5:86:6C:66:6F:25:0C
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 01A0DBA8CD1AC2A37E7ADD74A5DF22E797F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 03:01:07 +0000
Manifest this update: Sat 26 Sep 2026 03:01:07 +0000
Manifest next update: Sun 27 Sep 2026 03:01:07 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: PLtN1TNRF6ZM4M/ignkbrwLqwC6na2LPC2ZCaHenQyw=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:cd:1a:c2:a3:7e:7a:dd:74:a5:df:22:e7:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Sep 26 03:01:07 2026 GMT
Not After : Sep 27 03:01:07 2026 GMT
Subject: CN=b9656af4ce76cda00d988baf4af5866c666f250c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:2e:d3:9a:c8:8c:b9:b7:34:ba:d2:e9:61:
58:5b:7f:3d:5e:25:b5:76:84:0c:bb:de:49:4c:d9:
ff:03:aa:90:2c:7c:8d:83:e2:31:98:97:d0:f6:0c:
9d:61:ce:5e:09:fe:33:56:d7:53:fa:2d:a1:a4:17:
99:a6:2e:57:9b:c7:63:f9:18:05:2f:12:cf:5b:26:
91:76:1a:9a:6c:59:83:7e:38:ac:64:d9:32:72:76:
9c:25:44:f4:d5:8a:5f:13:30:96:58:dd:f2:90:a4:
39:16:ab:53:27:51:89:b9:f7:21:ed:17:73:7f:53:
c7:2a:14:00:25:8d:c9:11:7a:2a:74:72:ee:25:b4:
31:3a:1e:41:2b:9c:4a:7c:2c:84:42:3c:a8:15:22:
c0:b4:00:89:ed:44:55:da:05:33:a7:dc:39:97:15:
e1:72:4c:c9:09:fa:b3:45:c6:ca:ba:89:f1:ad:6d:
56:1f:4b:68:58:b8:63:10:97:0a:63:5a:42:f3:69:
d9:b5:5d:f4:44:7d:4e:73:70:81:a8:31:ab:84:31:
2f:b8:0d:13:aa:23:43:5b:cb:d5:89:42:36:b4:cf:
16:16:78:9e:fd:b3:7f:b4:38:6f:54:f7:1e:08:99:
f9:0f:a8:53:44:c7:b7:82:8d:4a:13:7e:d2:f2:68:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:6A:F4:CE:76:CD:A0:0D:98:8B:AF:4A:F5:86:6C:66:6F:25:0C
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:51:ef:eb:4e:41:20:9c:a0:f2:28:7e:9a:f6:72:48:97:
15:d3:0e:78:0a:8d:29:36:5a:ca:c9:fe:ab:af:7f:55:46:e1:
a4:37:8e:62:cb:7f:c5:9b:a9:67:d9:33:24:54:91:66:61:89:
9e:d3:58:a5:0d:19:db:e7:4c:4f:f9:93:75:d0:9d:6a:7f:bf:
c5:94:60:bc:c5:04:64:ad:cf:34:3d:9e:50:09:0d:32:2f:42:
7d:9d:20:0e:dd:32:62:ee:37:12:0e:54:90:99:92:87:de:6b:
69:3e:31:87:cd:01:06:4d:3c:35:fb:46:66:43:a3:f3:dd:8e:
a7:7b:91:25:2d:e2:e6:5c:13:ba:d1:e8:7f:d8:ba:ce:8a:92:
43:01:61:df:9c:65:c3:52:56:82:d5:1b:7b:d6:f4:06:12:4a:
14:8b:44:8f:f5:1b:57:8a:15:0a:55:05:c3:39:bb:9d:5c:4e:
98:7d:0e:d4:7b:99:7e:e0:cc:4f:e0:28:bc:d7:13:08:6e:47:
cd:d0:c9:79:59:8e:7d:52:0f:48:6a:bd:f4:41:84:eb:b1:7d:
ae:3a:a2:32:c6:69:f2:c0:30:24:c3:08:7b:c4:f3:3b:83:84:
7d:4c:a6:3b:19:f6:2c:cb:b6:74:78:c4:dc:0d:6e:76:f5:56:
3a:a6:3a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqM0awqN+et10pd8i55f4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRmMzU3MjFjYTMxYTgzZTJmNmU5MzdlMTc0MDhlNmU3
YjJjNjEwHhcNMjYwOTI2MDMwMTA3WhcNMjYwOTI3MDMwMTA3WjAzMTEwLwYDVQQD
EyhiOTY1NmFmNGNlNzZjZGEwMGQ5ODhiYWY0YWY1ODY2YzY2NmYyNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz0u05rIjLm3NLrS6WFYW389XiW1
doQMu95JTNn/A6qQLHyNg+IxmJfQ9gydYc5eCf4zVtdT+i2hpBeZpi5Xm8dj+RgF
LxLPWyaRdhqabFmDfjisZNkycnacJUT01YpfEzCWWN3ykKQ5FqtTJ1GJufch7Rdz
f1PHKhQAJY3JEXoqdHLuJbQxOh5BK5xKfCyEQjyoFSLAtACJ7URV2gUzp9w5lxXh
ckzJCfqzRcbKuonxrW1WH0toWLhjEJcKY1pC82nZtV30RH1Oc3CBqDGrhDEvuA0T
qiNDW8vViUI2tM8WFnie/bN/tDhvVPceCJn5D6hTRMe3go1KE37S8mgYDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLllavTOds2gDZiLr0r1hmxmbyUMMB8GA1UdIwQY
MBaAFNok81chyjGoPi9uk34XQI5ueyxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lY2VjZjQtZTkzMC00MTkyLTg0ZGQt
ODBmMzFkM2VhMTUyLzEvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lY2VjZjQtZTkzMC00MTkyLTg0ZGQtODBmMzFkM2VhMTUy
LzEvMmlUelZ5SEtNYWctTDI2VGZoZEFqbTU3TEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfetR7+tO
QSCcoPIofpr2ckiXFdMOeAqNKTZaysn+q69/VUbhpDeOYst/xZupZ9kzJFSRZmGJ
ntNYpQ0Z2+dMT/mTddCdan+/xZRgvMUEZK3PND2eUAkNMi9CfZ0gDt0yYu43Eg5U
kJmSh95raT4xh80BBk08NftGZkOj892Op3uRJS3i5lwTutHof9i6zoqSQwFh35xl
w1JWgtUbe9b0BhJKFItEj/UbV4oVClUFwzm7nVxOmH0O1HuZfuDMT+AovNcTCG5H
zdDJeVmOfVIPSGq99EGE67F9rjqiMsZp8sAwJMMIe8TzO4OEfUymOxn2LMu2dHjE
3A1udvVWOqY64A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:16 2026 by rpki-client