Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: /QZzrj+jh4RBGf/rC1XhL1iOxXu+QwoM50J6se7Dz5g=
Subject key identifier: 9E:C2:65:6E:9E:D3:43:A6:E6:C1:25:64:8A:CB:5C:FB:A3:91:48:72
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019E1CB4D3973F28DCC23F859A7F9FBA5ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0CCF
Signing time: Tue 12 May 2026 15:01:13 +0000
Manifest this update: Tue 12 May 2026 15:01:13 +0000
Manifest next update: Wed 13 May 2026 15:01:13 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: tIzLZT4slsdwoDwkMJekBu4Jw7WOtxvA/jydnY54Ahs=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:d3:97:3f:28:dc:c2:3f:85:9a:7f:9f:ba:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: May 12 15:01:13 2026 GMT
Not After : May 13 15:01:13 2026 GMT
Subject: CN=9ec2656e9ed343a6e6c125648acb5cfba3914872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:ad:88:61:78:1e:89:29:e6:f2:58:ce:b4:
4f:03:4d:78:14:b9:f1:7e:65:a5:47:d0:27:52:bc:
e0:a2:6c:fd:e0:26:54:ff:05:76:e4:2a:ed:79:bc:
1d:05:e2:60:64:eb:c2:7a:bf:8d:18:6f:b6:df:6d:
3f:bf:00:51:30:0b:c3:78:2d:60:c9:3b:a6:5a:ae:
46:ba:a9:d1:c4:a9:d0:48:95:52:a3:c8:af:f1:da:
23:9d:83:81:29:bd:52:44:f0:8c:61:86:7f:39:0a:
72:07:a7:05:27:0e:f2:03:26:4a:a8:c7:47:95:53:
65:dc:bc:1e:35:9d:b9:43:6d:d3:cc:19:0d:bd:c7:
9f:03:1d:b2:94:8d:10:6c:8f:d8:a4:b4:3c:ad:73:
f6:9d:0c:45:46:99:00:d9:b7:97:64:14:97:21:2b:
fd:f3:9b:37:11:b4:d8:cd:a7:e7:38:f4:41:e7:f7:
12:c6:4e:41:1f:4f:da:c9:ef:92:b7:46:44:cd:6a:
ce:1d:c8:21:a3:a8:d6:c0:fe:76:b8:63:61:66:75:
a9:65:97:1a:08:a7:c2:fe:0e:e0:ba:d0:0d:c2:66:
cb:8c:59:80:ba:fd:4e:29:b1:31:f0:e3:36:60:cb:
2a:d0:b9:ea:4e:14:bd:6e:7a:f7:73:b8:5e:74:75:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:65:6E:9E:D3:43:A6:E6:C1:25:64:8A:CB:5C:FB:A3:91:48:72
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:39:67:47:ff:a0:49:f9:68:cd:b1:73:b3:13:02:b5:3f:23:
a9:10:2e:11:53:82:6c:b1:34:71:0c:8d:23:18:03:6b:1d:e6:
2a:2e:b4:03:cc:1e:dd:06:da:08:80:11:98:d9:53:fb:bf:7d:
f3:32:3b:fa:1f:30:d7:19:2e:9c:ec:2e:86:60:45:70:7c:e0:
3d:f1:b5:79:2b:f5:b4:51:c9:fd:51:77:d9:b6:b4:e6:fc:13:
42:e4:ca:f7:84:1b:45:90:18:b1:c8:43:7d:a9:b8:96:fc:c4:
34:ff:dd:88:78:de:24:c4:9e:9a:f2:89:a5:10:82:c5:20:da:
68:45:aa:70:01:a0:3e:ef:26:f2:e0:cd:a7:4a:f3:65:d5:69:
f2:f7:4d:d7:b5:ae:78:e6:8e:4b:60:2a:70:14:5e:d8:de:32:
24:ec:6b:37:2d:34:da:88:6f:78:65:6c:88:5f:fa:c5:15:6f:
67:2a:c1:15:5e:41:1b:2a:80:61:61:ad:45:2b:10:9e:81:b3:
31:39:d9:2a:6e:f5:4f:68:93:46:53:03:71:78:9a:7c:50:1c:
3f:94:23:99:41:01:5b:48:19:13:19:dc:c8:9c:c7:58:70:df:
f7:47:26:4f:2f:c7:3b:e4:99:f2:f9:e6:69:1c:17:4f:c0:59:
64:e8:3f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctNOXPyjcwj+Fmn+ful7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz
YWU4ZWUwHhcNMjYwNTEyMTUwMTEzWhcNMjYwNTEzMTUwMTEzWjAzMTEwLwYDVQQD
Eyg5ZWMyNjU2ZTllZDM0M2E2ZTZjMTI1NjQ4YWNiNWNmYmEzOTE0ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bStiGF4Hokp5vJYzrRPA014FLnx
fmWlR9AnUrzgomz94CZU/wV25CrtebwdBeJgZOvCer+NGG+2320/vwBRMAvDeC1g
yTumWq5GuqnRxKnQSJVSo8iv8dojnYOBKb1SRPCMYYZ/OQpyB6cFJw7yAyZKqMdH
lVNl3LweNZ25Q23TzBkNvcefAx2ylI0QbI/YpLQ8rXP2nQxFRpkA2beXZBSXISv9
85s3EbTYzafnOPRB5/cSxk5BH0/aye+St0ZEzWrOHcgho6jWwP52uGNhZnWpZZca
CKfC/g7gutANwmbLjFmAuv1OKbEx8OM2YMsq0LnqThS9bnr3c7hedHXpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7CZW6e00Om5sElZIrLXPujkUhyMB8GA1UdIwQY
MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt
YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4
LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzlnR/+g
SflozbFzsxMCtT8jqRAuEVOCbLE0cQyNIxgDax3mKi60A8we3QbaCIARmNlT+799
8zI7+h8w1xkunOwuhmBFcHzgPfG1eSv1tFHJ/VF32ba05vwTQuTK94QbRZAYschD
fam4lvzENP/diHjeJMSemvKJpRCCxSDaaEWqcAGgPu8m8uDNp0rzZdVp8vdN17Wu
eOaOS2AqcBRe2N4yJOxrNy002ohveGVsiF/6xRVvZyrBFV5BGyqAYWGtRSsQnoGz
MTnZKm71T2iTRlMDcXiafFAcP5QjmUEBW0gZExncyJzHWHDf90cmTy/HO+SZ8vnm
aRwXT8BZZOg/dg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:02 2026 by rpki-client