Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: KGsrMh4hNidCF7Eke24eVFSIhKfCy4zsFBA2DE0qagk=
Subject key identifier: 41:E8:44:61:04:A5:B8:E4:20:7E:4A:9F:1B:25:02:2E:D2:B2:28:5E
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 01A0DBA9238203FDC76727A3FA29AD70EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 171F
Signing time: Sat 26 Sep 2026 03:01:29 +0000
Manifest this update: Sat 26 Sep 2026 03:01:29 +0000
Manifest next update: Sun 27 Sep 2026 03:01:29 +0000
Files and hashes: 1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: Nir1FmPfJHmZtpJL80faRR+g6SZh2T+jIuRjFjRiQSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:23:82:03:fd:c7:67:27:a3:fa:29:ad:70:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Sep 26 03:01:29 2026 GMT
Not After : Sep 27 03:01:29 2026 GMT
Subject: CN=41e8446104a5b8e4207e4a9f1b25022ed2b2285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:30:b6:54:88:88:37:1a:cf:04:56:53:42:
24:92:c6:18:4e:d4:e9:8e:36:ec:ec:8b:08:67:50:
24:77:df:7e:4b:f8:98:67:af:c6:85:9b:1a:4e:7f:
f4:9d:4d:a7:25:0a:b7:bf:c0:a1:f6:2a:bf:34:77:
ac:de:82:e1:ce:26:a7:b6:8b:58:26:f7:eb:18:5a:
6d:12:42:73:19:d5:b6:7a:4e:c9:e1:28:c3:23:4a:
05:5d:fa:85:c9:bf:89:f7:a5:4c:93:99:45:0b:1f:
45:88:87:4a:89:04:5c:df:0e:03:d1:fe:59:4b:76:
05:2c:dc:f6:1c:9a:78:90:5a:33:50:b5:18:74:77:
e9:ca:5b:ac:47:b3:80:2e:53:9e:f1:9f:39:25:ea:
f2:9c:00:5f:52:87:4d:ad:64:d0:fb:58:09:c2:be:
5f:84:e3:83:4b:0b:b7:69:cb:4c:d5:00:e2:c4:1a:
35:ae:c7:e1:9e:58:01:5c:2e:31:b0:4f:ce:f4:4c:
e5:c2:41:45:d0:00:03:e5:ab:cb:04:ca:c0:33:ec:
b3:cf:59:d2:be:e4:79:58:d6:5e:28:69:2e:3f:62:
a7:ba:48:77:c4:c2:3c:77:4e:77:75:55:35:93:76:
90:a4:64:bc:e8:f1:5d:f5:b5:4b:02:6a:21:16:98:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:44:61:04:A5:B8:E4:20:7E:4A:9F:1B:25:02:2E:D2:B2:28:5E
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:32:51:34:25:a9:ef:10:52:53:de:7a:23:95:ce:7d:8b:
c4:cf:9d:22:b1:4d:65:16:82:11:71:f9:cc:2c:a4:23:b6:a3:
4d:4d:f5:c9:49:c1:70:b5:02:b9:79:02:c5:69:5d:97:32:43:
f9:2b:9c:81:1c:62:15:85:ca:8e:8a:e2:c5:41:82:03:e7:75:
ec:0a:59:df:dc:25:41:01:2c:e7:72:44:08:2e:76:51:8d:22:
e1:2a:ba:bb:f5:d5:95:38:6d:cd:14:5a:af:63:79:52:7d:3b:
ca:9a:3c:7a:dc:39:9d:0f:b1:1b:bc:ab:25:de:f3:26:e7:93:
12:12:ee:f4:02:4e:fa:e4:cc:7d:4a:1e:ff:69:81:bd:52:f2:
6a:cd:98:8f:11:c8:87:ee:b1:ec:8f:db:de:0c:7f:4c:fe:1c:
cc:4d:9d:62:ce:bb:9a:57:d8:18:b0:7d:29:75:99:4c:d6:7b:
2e:98:57:23:c7:2f:23:d9:8b:70:b4:af:56:bd:52:63:ec:36:
83:05:af:3e:82:5d:6e:fc:a3:21:4b:fe:b7:2b:54:14:43:fd:
37:72:36:07:72:ea:fe:b0:a2:3b:6f:58:53:d5:aa:53:4e:76:
ad:4f:a0:62:cb:b4:e3:47:a8:e9:85:0c:f0:fd:37:1d:ae:7c:
07:3c:29:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqSOCA/3HZyej+imtcOpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjYwOTI2MDMwMTI5WhcNMjYwOTI3MDMwMTI5WjAzMTEwLwYDVQQD
Eyg0MWU4NDQ2MTA0YTViOGU0MjA3ZTRhOWYxYjI1MDIyZWQyYjIyODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOswtlSIiDcazwRWU0IkksYYTtTp
jjbs7IsIZ1Akd99+S/iYZ6/GhZsaTn/0nU2nJQq3v8Ch9iq/NHes3oLhziantotY
JvfrGFptEkJzGdW2ek7J4SjDI0oFXfqFyb+J96VMk5lFCx9FiIdKiQRc3w4D0f5Z
S3YFLNz2HJp4kFozULUYdHfpylusR7OALlOe8Z85JerynABfUodNrWTQ+1gJwr5f
hOODSwu3actM1QDixBo1rsfhnlgBXC4xsE/O9EzlwkFF0AAD5avLBMrAM+yzz1nS
vuR5WNZeKGkuP2Knukh3xMI8d053dVU1k3aQpGS86PFd9bVLAmohFpjejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHoRGEEpbjkIH5KnxslAi7SsiheMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9oyUTQl
qe8QUlPeeiOVzn2LxM+dIrFNZRaCEXH5zCykI7ajTU31yUnBcLUCuXkCxWldlzJD
+SucgRxiFYXKjorixUGCA+d17ApZ39wlQQEs53JECC52UY0i4Sq6u/XVlThtzRRa
r2N5Un07ypo8etw5nQ+xG7yrJd7zJueTEhLu9AJO+uTMfUoe/2mBvVLyas2YjxHI
h+6x7I/b3gx/TP4czE2dYs67mlfYGLB9KXWZTNZ7LphXI8cvI9mLcLSvVr1SY+w2
gwWvPoJdbvyjIUv+tytUFEP9N3I2B3Lq/rCiO29YU9WqU052rU+gYsu040eo6YUM
8P03Ha58Bzwpng==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:51:01 2026 by rpki-client