
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier: /hvSpkXOUBrtEk1Yfy8WQpDvGlM9QGrDVsN4RKdBLk0=
Subject key identifier: 0B:66:55:CC:13:48:C8:66:8E:37:AB:DB:8D:71:DF:68:EA:BA:00:D8
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial: 01A0D0ED88DDC7169FE38AC4A6A989D6D00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number: 0442
Signing time: Thu 24 Sep 2026 01:00:22 +0000
Manifest this update: Thu 24 Sep 2026 01:00:22 +0000
Manifest next update: Fri 25 Sep 2026 01:00:22 +0000
Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: lmdFatjSyptp/ZznlV8KVOYUhw42V7NvKK/lDL8Xdqo=)
2: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (hash: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:88:dd:c7:16:9f:e3:8a:c4:a6:a9:89:d6:d0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Validity
Not Before: Sep 24 01:00:22 2026 GMT
Not After : Sep 25 01:00:22 2026 GMT
Subject: CN=0b6655cc1348c8668e37abdb8d71df68eaba00d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:24:ce:7f:84:b5:6d:3d:d2:3a:ac:19:a6:
77:e8:1b:b2:64:3c:2a:96:bd:ea:0d:57:12:31:31:
48:0d:03:f6:2e:26:6a:c6:f5:8a:0b:8a:53:43:ee:
6d:bd:e8:99:fd:6b:75:05:94:06:2b:b0:37:d9:5f:
5c:20:ba:8a:45:31:3b:d1:59:73:e0:3f:09:18:6e:
fa:61:b6:f3:94:b9:ef:5b:c5:a3:bb:e0:5e:03:a1:
56:5a:ee:93:57:b7:04:18:e4:bc:ad:d8:f8:52:e9:
66:44:e7:8e:e1:69:aa:85:71:b3:41:37:f5:b7:73:
55:6a:66:52:b7:31:d3:52:c4:28:5e:74:74:ee:dd:
62:07:03:0c:6a:32:61:96:8c:aa:81:44:59:00:1a:
1b:6e:e2:8a:39:48:ed:ce:07:3c:e9:65:da:be:60:
fe:9b:dc:b3:2c:83:cc:24:14:93:80:f5:ec:6b:2a:
da:fc:18:92:86:f5:a5:7c:af:9b:e4:97:25:a3:04:
3e:13:ea:d5:da:15:d4:78:80:06:3e:09:27:1b:40:
32:80:22:7b:67:58:5c:aa:8a:f8:e7:c8:83:0f:28:
26:8a:e2:ec:5a:67:da:c1:31:a9:26:44:a6:36:d3:
ac:8b:4c:c1:31:3e:78:4c:84:96:28:f5:11:21:d7:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:55:CC:13:48:C8:66:8E:37:AB:DB:8D:71:DF:68:EA:BA:00:D8
X509v3 Authority Key Identifier:
keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:05:57:bc:09:e4:29:96:c7:c7:1d:86:cc:2b:10:72:21:e1:
c3:81:1b:8b:e5:3d:51:14:d1:a0:72:e2:1c:10:9e:75:48:c8:
f7:00:ec:42:69:cc:9a:e0:e7:f3:d0:64:dd:30:8a:f8:29:7b:
46:8d:57:9b:e9:3e:e6:2f:62:7d:6b:d9:62:69:fa:f0:6c:5b:
c2:65:ad:40:15:b6:3e:06:82:6f:60:3b:b5:7f:4e:b9:c1:0a:
ec:91:8a:95:4b:64:d1:70:2e:99:a2:af:d2:55:2f:be:66:73:
d0:e4:6f:12:cd:ae:7f:e3:c9:fa:06:d2:0e:cd:94:0c:ea:65:
31:35:45:f5:b5:af:8b:d0:e4:15:84:e9:d9:e7:b4:61:37:4c:
fe:97:5c:02:19:a2:11:0e:4e:19:6f:79:5d:0a:dd:c1:89:dd:
a1:b4:8c:1f:ed:6b:c0:b9:0e:d8:5a:3a:72:de:a4:2d:4e:4a:
7c:2d:52:40:ff:03:9f:b8:0a:99:bf:db:58:69:b5:d4:0f:01:
9d:d6:a8:34:c3:15:49:08:43:3f:cd:3c:23:ed:0c:9f:fa:05:
6f:4f:8f:49:cc:11:96:36:61:a2:d0:77:e8:45:d7:11:14:fd:
d3:6a:74:a4:31:84:44:2b:37:6d:79:9e:74:93:27:5a:75:21:
ad:df:19:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7Yjdxxaf44rEpqmJ1tAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NDQyZjJjMmY4OGQ5ZjZlYjJkOWM1ZGYzNjgwYmUyMWVl
N2M5YjMwHhcNMjYwOTI0MDEwMDIyWhcNMjYwOTI1MDEwMDIyWjAzMTEwLwYDVQQD
EygwYjY2NTVjYzEzNDhjODY2OGUzN2FiZGI4ZDcxZGY2OGVhYmEwMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCkkzn+EtW090jqsGaZ36BuyZDwq
lr3qDVcSMTFIDQP2LiZqxvWKC4pTQ+5tveiZ/Wt1BZQGK7A32V9cILqKRTE70Vlz
4D8JGG76YbbzlLnvW8Wju+BeA6FWWu6TV7cEGOS8rdj4UulmROeO4WmqhXGzQTf1
t3NVamZStzHTUsQoXnR07t1iBwMMajJhloyqgURZABobbuKKOUjtzgc86WXavmD+
m9yzLIPMJBSTgPXsayra/BiShvWlfK+b5JclowQ+E+rV2hXUeIAGPgknG0AygCJ7
Z1hcqor458iDDygmiuLsWmfawTGpJkSmNtOsi0zBMT54TISWKPURIdcPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtmVcwTSMhmjjer241x32jqugDYMB8GA1UdIwQY
MBaAFNhELywviNn26y2cXfNoC+Ie58mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMt
MGY1NDZlMTRlYjFkLzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMtMGY1NDZlMTRlYjFk
LzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwVXvAnk
KZbHxx2GzCsQciHhw4Ebi+U9URTRoHLiHBCedUjI9wDsQmnMmuDn89Bk3TCK+Cl7
Ro1Xm+k+5i9ifWvZYmn68GxbwmWtQBW2PgaCb2A7tX9OucEK7JGKlUtk0XAumaKv
0lUvvmZz0ORvEs2uf+PJ+gbSDs2UDOplMTVF9bWvi9DkFYTp2ee0YTdM/pdcAhmi
EQ5OGW95XQrdwYndobSMH+1rwLkO2Fo6ct6kLU5KfC1SQP8Dn7gKmb/bWGm11A8B
ndaoNMMVSQhDP808I+0Mn/oFb0+PScwRljZhotB36EXXERT902p0pDGERCs3bXme
dJMnWnUhrd8Z4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:01 2026 by rpki-client