Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: xhh9kuNshPzCgSUDzdh7aKwfMuscR4+NlNZMqbtbWE0=
Subject key identifier: 1B:AC:8C:95:99:84:2C:24:60:CF:CB:5D:CD:41:ED:14:3B:63:33:37
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01A0CA7D91AC8AE98007AEF9D095CD1280EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 19:00:21 +0000
Manifest this update: Tue 22 Sep 2026 19:00:21 +0000
Manifest next update: Wed 23 Sep 2026 19:00:21 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: lwEMD3Nf7ZxaG53VEK6hHBNq657LqINnP686qp2x2os=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:91:ac:8a:e9:80:07:ae:f9:d0:95:cd:12:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Sep 22 19:00:21 2026 GMT
Not After : Sep 23 19:00:21 2026 GMT
Subject: CN=1bac8c9599842c2460cfcb5dcd41ed143b633337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:4c:71:42:31:0d:23:0d:6c:a9:51:d8:a6:
cc:4b:7b:f2:89:a0:6b:49:c2:df:a8:d3:f1:fe:77:
2c:d9:44:77:39:c3:ca:e4:3a:c8:ba:fd:20:0a:6a:
b0:55:fc:cb:a4:78:fd:d5:75:b6:29:29:4a:80:c8:
6e:74:bd:26:cd:ae:da:77:aa:b7:ca:e0:7c:ca:9d:
4a:e2:5b:c0:17:f3:1d:89:59:55:55:0d:b5:42:f5:
f7:17:73:2c:e0:ad:9e:60:58:9a:bf:f8:a6:48:34:
d1:6b:8d:74:db:99:84:e5:59:07:ee:17:ea:d9:d6:
bc:e0:6c:a7:db:d4:18:28:08:fa:9b:81:06:70:1f:
16:53:50:be:62:39:ad:73:b5:3d:2d:52:a1:ab:9f:
21:68:e6:4c:3d:f8:41:f4:f3:fa:c3:b6:c9:ce:05:
47:28:0f:4d:a0:46:84:cf:19:59:f8:7b:7a:7f:c4:
5d:0b:c2:4a:7f:ff:79:83:8c:eb:83:21:00:fd:17:
85:da:8d:cf:46:63:23:dd:6d:d9:d7:32:6a:7b:6e:
88:91:b0:09:3f:1e:de:65:c3:16:75:45:ce:01:3f:
79:7e:62:56:03:f2:b7:2a:5b:aa:dd:82:91:d7:71:
9e:f5:37:f9:35:94:2a:c2:f1:b9:34:35:b1:4a:2d:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:8C:95:99:84:2C:24:60:CF:CB:5D:CD:41:ED:14:3B:63:33:37
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a7:45:32:72:fd:07:cf:8e:6b:70:80:74:bc:6d:7c:da:7a:
a3:6c:ea:7b:8d:8c:ca:5a:5c:45:49:3c:df:ce:a5:2e:68:83:
aa:50:89:bf:b8:fe:06:8a:b5:f1:e7:89:aa:d7:55:44:9b:c7:
7b:e5:e1:6a:a3:6e:d4:d9:ce:6a:6e:5f:f9:c6:85:68:fc:01:
3a:bd:28:23:5b:9f:5e:3b:15:e4:2d:16:40:83:7c:63:21:96:
f7:8b:4d:98:a6:e6:fc:bd:0c:82:4b:4a:1f:5c:3e:65:b8:29:
94:90:a4:d4:bf:5b:96:b3:af:89:7f:b9:c6:13:1e:25:c7:4c:
49:ae:b2:e6:b7:14:9b:e3:f2:c0:b4:f0:cf:36:ae:02:fd:00:
c2:94:1b:9e:ed:04:f1:45:3e:c3:47:60:d4:ca:db:1a:15:44:
ab:70:89:69:8d:33:78:05:05:21:4c:27:c0:12:ea:32:da:45:
da:ba:28:47:bf:33:41:a0:76:c6:bc:66:e2:82:c2:ad:eb:02:
49:96:51:70:e4:c4:19:d9:b1:6b:ec:c6:3f:cf:5d:65:dd:ce:
e4:c7:0e:95:6a:47:e7:b0:82:55:13:5c:09:a2:55:6f:bb:1e:
c5:fc:eb:f2:4e:f8:0e:e4:1c:1b:6f:fa:fd:c1:08:48:57:47:
19:0f:da:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfZGsiumAB6750JXNEoDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1
ZDg3NzEwHhcNMjYwOTIyMTkwMDIxWhcNMjYwOTIzMTkwMDIxWjAzMTEwLwYDVQQD
EygxYmFjOGM5NTk5ODQyYzI0NjBjZmNiNWRjZDQxZWQxNDNiNjMzMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVJMcUIxDSMNbKlR2KbMS3vyiaBr
ScLfqNPx/ncs2UR3OcPK5DrIuv0gCmqwVfzLpHj91XW2KSlKgMhudL0mza7ad6q3
yuB8yp1K4lvAF/MdiVlVVQ21QvX3F3Ms4K2eYFiav/imSDTRa41025mE5VkH7hfq
2da84Gyn29QYKAj6m4EGcB8WU1C+Yjmtc7U9LVKhq58haOZMPfhB9PP6w7bJzgVH
KA9NoEaEzxlZ+Ht6f8RdC8JKf/95g4zrgyEA/ReF2o3PRmMj3W3Z1zJqe26IkbAJ
Px7eZcMWdUXOAT95fmJWA/K3Kluq3YKR13Ge9Tf5NZQqwvG5NDWxSi01JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBusjJWZhCwkYM/LXc1B7RQ7YzM3MB8GA1UdIwQY
MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt
YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz
LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKdFMnL9
B8+Oa3CAdLxtfNp6o2zqe42MylpcRUk8386lLmiDqlCJv7j+Boq18eeJqtdVRJvH
e+XhaqNu1NnOam5f+caFaPwBOr0oI1ufXjsV5C0WQIN8YyGW94tNmKbm/L0MgktK
H1w+ZbgplJCk1L9blrOviX+5xhMeJcdMSa6y5rcUm+PywLTwzzauAv0AwpQbnu0E
8UU+w0dg1MrbGhVEq3CJaY0zeAUFIUwnwBLqMtpF2rooR78zQaB2xrxm4oLCresC
SZZRcOTEGdmxa+zGP89dZd3O5McOlWpH57CCVRNcCaJVb7sexfzr8k74DuQcG2/6
/cEISFdHGQ/atQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:24 2026 by rpki-client