Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
File: 2HGZiqFAq3wf8kDqsMkjWRPJboo.mft (raw, json)
Hash identifier: MwX4Pykxn2h98M9juU7TLa9Q0W/Lafujnb+ovhHNYWg=
Subject key identifier: 09:10:9B:82:44:81:C8:B5:0F:0E:2E:8B:0E:C5:8E:E9:30:56:1F:55
Authority key identifier: D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
Certificate issuer: /CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Certificate serial: 01A0DC1781AA7538CD4CB03D718CEC4E1006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
Manifest number: 177F
Signing time: Sat 26 Sep 2026 05:02:03 +0000
Manifest this update: Sat 26 Sep 2026 05:02:03 +0000
Manifest next update: Sun 27 Sep 2026 05:02:03 +0000
Files and hashes: 1: 2HGZiqFAq3wf8kDqsMkjWRPJboo.crl (hash: ZHbxg83frFs5fIyF9n2WOubKChdamLW9zfPJ/zFJ6rI=)
2: ZVHQNn8NDHrKDlrXSjskIERGk-w.roa (hash: GPFXQQAYnCScqN6Tj+UkAGSIUrlH/xEf/by5WbPkz1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:81:aa:75:38:cd:4c:b0:3d:71:8c:ec:4e:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Validity
Not Before: Sep 26 05:02:03 2026 GMT
Not After : Sep 27 05:02:03 2026 GMT
Subject: CN=09109b824481c8b50f0e2e8b0ec58ee930561f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:4e:0e:b5:96:7e:aa:bf:f8:40:78:d5:50:
70:a9:15:20:46:4b:c7:b8:b8:0d:6b:ba:4d:f5:5b:
21:d2:a5:c6:3d:78:53:4c:e5:d0:14:9a:6d:12:aa:
51:df:54:86:68:9f:67:fd:68:06:1c:a7:87:fc:65:
ba:27:60:b1:d1:78:62:bc:dd:d3:af:ec:be:2c:9a:
40:df:a4:5a:6b:56:4f:77:eb:b0:21:02:93:ba:ce:
4a:f5:1a:a9:aa:98:10:fd:d0:ec:61:90:c5:b0:d8:
ec:b3:51:46:76:71:a1:ff:43:9e:cb:f6:22:bd:9d:
a2:b3:4e:d1:29:0e:e5:c4:0d:a7:43:c7:e2:3c:dc:
95:b0:2f:3d:4f:51:59:2d:1a:da:fe:ad:b6:ae:1c:
dc:49:db:13:2f:f5:99:43:ce:13:07:df:85:17:61:
8f:b9:28:80:13:0e:bb:2b:c1:88:0c:3a:8c:6a:8b:
cf:e6:a8:49:dc:b4:6c:f2:3a:30:ae:4e:80:df:7a:
86:99:f5:20:80:95:fc:2f:e0:9a:68:b9:05:1f:45:
1e:d4:f2:b8:db:45:0c:89:c3:7c:d9:2a:41:36:cb:
99:56:fc:5a:99:13:e5:82:cd:df:0d:1c:93:a3:c7:
ac:b9:1b:56:5e:8c:c3:b1:67:93:c3:3d:38:70:19:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:9B:82:44:81:C8:B5:0F:0E:2E:8B:0E:C5:8E:E9:30:56:1F:55
X509v3 Authority Key Identifier:
keyid:D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:20:34:33:33:4d:28:c3:a5:8f:e2:bb:9d:2f:47:e7:34:a5:
ba:57:3d:74:05:87:e7:35:a2:b5:38:79:7b:04:ee:1c:b3:af:
99:6b:c9:38:7f:f5:86:83:a4:ad:58:95:af:e1:66:d5:af:61:
54:7e:b7:12:71:71:5f:8e:a9:54:13:fc:81:27:82:89:23:b2:
1a:38:e2:56:50:5d:d2:ea:24:c9:53:cc:14:85:ea:f0:de:10:
db:82:85:08:3c:99:b8:5e:c2:35:28:7c:91:1b:dd:9f:eb:e1:
f8:57:dd:d3:27:b9:68:3d:32:17:23:27:73:86:1f:f8:cd:b8:
e2:fb:98:02:00:88:d0:9a:38:bb:08:36:bd:a1:4f:ed:98:35:
e6:c0:5c:a2:17:4b:fd:48:a6:ef:cc:22:b5:4c:3e:ba:ff:19:
05:84:5e:72:62:99:34:fa:53:6b:ab:15:5d:42:2c:32:69:9d:
b9:31:8d:f7:d8:1c:4c:fa:9b:fe:62:50:ae:98:61:d5:50:34:
32:84:ce:cc:2a:31:f7:51:28:6a:c3:11:7a:cf:10:01:6e:94:
5a:20:45:b8:66:c0:17:3e:d7:cb:30:38:0a:22:df:16:fe:fe:
f5:70:a9:5e:32:8d:cc:88:e3:23:c8:01:22:b4:57:99:17:5b:
2d:4a:4e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF4GqdTjNTLA9cYzsThAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzE5OThhYTE0MGFiN2MxZmYyNDBlYWIwYzkyMzU5MTNj
OTZlOGEwHhcNMjYwOTI2MDUwMjAzWhcNMjYwOTI3MDUwMjAzWjAzMTEwLwYDVQQD
EygwOTEwOWI4MjQ0ODFjOGI1MGYwZTJlOGIwZWM1OGVlOTMwNTYxZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31ZODrWWfqq/+EB41VBwqRUgRkvH
uLgNa7pN9Vsh0qXGPXhTTOXQFJptEqpR31SGaJ9n/WgGHKeH/GW6J2Cx0XhivN3T
r+y+LJpA36Raa1ZPd+uwIQKTus5K9RqpqpgQ/dDsYZDFsNjss1FGdnGh/0Oey/Yi
vZ2is07RKQ7lxA2nQ8fiPNyVsC89T1FZLRra/q22rhzcSdsTL/WZQ84TB9+FF2GP
uSiAEw67K8GIDDqMaovP5qhJ3LRs8jowrk6A33qGmfUggJX8L+CaaLkFH0Ue1PK4
20UMicN82SpBNsuZVvxamRPlgs3fDRyTo8esuRtWXozDsWeTwz04cBl+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkQm4JEgci1Dw4uiw7FjukwVh9VMB8GA1UdIwQY
MBaAFNhxmYqhQKt8H/JA6rDJI1kTyW6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhHWmlxRkFxM3dmOGtEcXNNa2pXUlBKYm9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zM2FhMjQtMzVlYS00YWRjLThjMDUt
NWEzNGU1MmIwYjEwLzEvMkhHWmlxRkFxM3dmOGtEcXNNa2pXUlBKYm9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zM2FhMjQtMzVlYS00YWRjLThjMDUtNWEzNGU1MmIwYjEw
LzEvMkhHWmlxRkFxM3dmOGtEcXNNa2pXUlBKYm9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCA0MzNN
KMOlj+K7nS9H5zSlulc9dAWH5zWitTh5ewTuHLOvmWvJOH/1hoOkrViVr+Fm1a9h
VH63EnFxX46pVBP8gSeCiSOyGjjiVlBd0uokyVPMFIXq8N4Q24KFCDyZuF7CNSh8
kRvdn+vh+Ffd0ye5aD0yFyMnc4Yf+M244vuYAgCI0Jo4uwg2vaFP7Zg15sBcohdL
/Uim78witUw+uv8ZBYRecmKZNPpTa6sVXUIsMmmduTGN99gcTPqb/mJQrphh1VA0
MoTOzCox91EoasMRes8QAW6UWiBFuGbAFz7XyzA4CiLfFv7+9XCpXjKNzIjjI8gB
IrRXmRdbLUpOkg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:28:33 2026 by rpki-client