Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier: cZtrKaV+lIfXus0L0jGgUzdGr2x7iaW0LxcUOeXzFzk=
Subject key identifier: 3E:4C:FD:74:37:07:B6:01:6A:4F:26:D4:B6:C8:CD:FB:20:3C:96:4B
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial: 01A0D9836193CBEA94D32354CAEEAE866866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number: 1381
Signing time: Fri 25 Sep 2026 17:01:01 +0000
Manifest this update: Fri 25 Sep 2026 17:01:01 +0000
Manifest next update: Sat 26 Sep 2026 17:01:01 +0000
Files and hashes: 1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: is8lrF1zFqOlenFCLpJyM4ibB/HaA3RMWFtaXtNWhjo=)
2: AoMLPhZExe6a-acTOonY5G6p87o.roa (hash: GlOEB6CrWza06BRV4TlREAMAdwdF9KjOr3x10SdKDlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:61:93:cb:ea:94:d3:23:54:ca:ee:ae:86:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Validity
Not Before: Sep 25 17:01:01 2026 GMT
Not After : Sep 26 17:01:01 2026 GMT
Subject: CN=3e4cfd743707b6016a4f26d4b6c8cdfb203c964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:bc:29:f6:dc:c3:16:fe:e5:da:28:aa:40:
60:8d:4c:88:09:bc:6b:64:05:c5:22:19:02:dd:31:
66:10:1b:c6:9a:0a:33:97:69:51:ea:ce:c6:ab:aa:
9c:41:1f:d8:34:fc:9d:01:7b:9a:e5:3a:5e:52:af:
a5:ff:af:a4:17:38:98:ba:97:de:1f:e1:0c:f9:d2:
f7:a5:2f:a1:d3:23:16:59:72:7f:16:14:18:49:53:
d3:eb:0c:0c:f5:0f:1c:5b:2f:b8:28:ce:b3:7b:c9:
47:db:b7:48:87:a0:46:7e:51:48:34:e2:69:42:68:
44:32:9a:c9:29:82:18:05:c4:3b:11:d6:2c:77:64:
54:68:e9:01:c1:52:61:de:a3:c9:8e:7e:61:82:67:
b1:99:83:da:da:f9:27:28:06:b1:4d:05:f6:68:8d:
0c:67:ad:cc:b9:b3:fc:ed:fa:38:4e:9d:8e:65:a0:
6d:ed:db:89:2a:95:6c:13:4e:e5:b3:fb:f8:ad:38:
21:87:af:72:0e:e1:b3:41:27:ce:08:bf:29:38:29:
53:04:de:5d:7f:e1:07:6d:7d:30:4b:6d:d0:1a:38:
d4:54:a1:fc:0a:50:93:41:49:d5:dd:1e:f9:a8:a3:
a5:04:7b:43:61:04:32:ea:31:ed:6e:cf:84:89:bd:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:FD:74:37:07:B6:01:6A:4F:26:D4:B6:C8:CD:FB:20:3C:96:4B
X509v3 Authority Key Identifier:
keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:b4:5a:a1:b5:fa:fc:cb:98:09:82:6d:b7:d7:89:81:f1:
71:9f:17:49:d6:34:07:50:8b:a9:1c:dd:0b:b0:e5:7c:b1:ea:
a8:bd:a9:b8:a9:ba:69:b0:55:72:f4:db:b2:73:65:06:8c:c0:
a7:af:ce:46:e8:cc:f1:7d:5a:f1:89:c3:31:27:0a:6f:96:c0:
f8:eb:11:38:cb:10:88:fb:13:4c:35:72:ad:c7:49:c1:10:43:
2d:85:8c:37:4a:4c:b3:ab:42:d1:4c:cf:26:b5:07:12:64:80:
57:11:68:39:c3:8f:f8:23:9d:50:dd:54:31:55:ef:f0:b0:02:
28:a0:f7:03:d8:95:44:0d:c2:09:a1:97:b5:94:1c:cf:75:91:
de:93:42:7d:ef:c6:70:3a:13:0b:7c:42:c6:2d:7c:5e:07:e0:
e8:63:4b:7f:f3:f3:3c:cd:b1:88:e7:26:64:bf:dd:4c:61:1f:
ae:b2:7a:c5:20:a1:21:c5:7a:52:89:6f:6e:36:4d:fb:ae:07:
7f:93:47:00:3a:b8:e6:37:70:ec:ac:95:84:e4:c8:a9:cb:d7:
47:2a:0b:59:14:cc:05:69:ec:92:3d:99:40:ea:88:fb:38:b2:
93:5d:bf:9b:f5:e8:d2:6f:d6:2f:93:e0:8f:7e:24:6c:79:ec:
94:0e:3e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg2GTy+qU0yNUyu6uhmhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTBkMDRiZjU3ZmE0ODY4ZTY5OTk3YzgzYjNhZDc3MWZk
NTBhOWQwHhcNMjYwOTI1MTcwMTAxWhcNMjYwOTI2MTcwMTAxWjAzMTEwLwYDVQQD
EygzZTRjZmQ3NDM3MDdiNjAxNmE0ZjI2ZDRiNmM4Y2RmYjIwM2M5NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugC8Kfbcwxb+5dooqkBgjUyICbxr
ZAXFIhkC3TFmEBvGmgozl2lR6s7Gq6qcQR/YNPydAXua5TpeUq+l/6+kFziYupfe
H+EM+dL3pS+h0yMWWXJ/FhQYSVPT6wwM9Q8cWy+4KM6ze8lH27dIh6BGflFINOJp
QmhEMprJKYIYBcQ7EdYsd2RUaOkBwVJh3qPJjn5hgmexmYPa2vknKAaxTQX2aI0M
Z63MubP87fo4Tp2OZaBt7duJKpVsE07ls/v4rTghh69yDuGzQSfOCL8pOClTBN5d
f+EHbX0wS23QGjjUVKH8ClCTQUnV3R75qKOlBHtDYQQy6jHtbs+Eib2A1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5M/XQ3B7YBak8m1LbIzfsgPJZLMB8GA1UdIwQY
MBaAFNqQ0Ev1f6SGjmmZfIOzrXcf1QqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgt
NTFhZDljMzgyYThkLzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgtNTFhZDljMzgyYThk
LzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxK0WqG1
+vzLmAmCbbfXiYHxcZ8XSdY0B1CLqRzdC7DlfLHqqL2puKm6abBVcvTbsnNlBozA
p6/ORujM8X1a8YnDMScKb5bA+OsROMsQiPsTTDVyrcdJwRBDLYWMN0pMs6tC0UzP
JrUHEmSAVxFoOcOP+COdUN1UMVXv8LACKKD3A9iVRA3CCaGXtZQcz3WR3pNCfe/G
cDoTC3xCxi18Xgfg6GNLf/PzPM2xiOcmZL/dTGEfrrJ6xSChIcV6UolvbjZN+64H
f5NHADq45jdw7KyVhOTIqcvXRyoLWRTMBWnskj2ZQOqI+ziyk12/m/Xo0m/WL5Pg
j34kbHnslA4+gQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:27 2026 by rpki-client