Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: XmhkUE4sYU8vxlg21fK1Hga0K1qP3ydQb75bquNIFaM=
Subject key identifier: E7:C4:36:1D:B8:E4:08:9F:85:24:3E:34:1B:27:D9:DA:C5:3C:89:23
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 01A0D2DE06E0325D92A74A48648D9F71EAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 1202
Signing time: Thu 24 Sep 2026 10:02:41 +0000
Manifest this update: Thu 24 Sep 2026 10:02:41 +0000
Manifest next update: Fri 25 Sep 2026 10:02:41 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: SmTHCqxkkWWAPEqERgBro+8e/DhsnJSzRuQImZ54OV4=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:06:e0:32:5d:92:a7:4a:48:64:8d:9f:71:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Sep 24 10:02:41 2026 GMT
Not After : Sep 25 10:02:41 2026 GMT
Subject: CN=e7c4361db8e4089f85243e341b27d9dac53c8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:73:1b:eb:1b:97:a0:4e:58:50:f9:01:61:
e1:74:34:3c:57:7f:a3:80:e3:77:cf:84:1f:88:6a:
fb:6f:53:0f:7f:ed:85:7c:8a:93:82:29:b6:e2:24:
f1:b8:a7:2e:e5:ae:8a:ad:2f:f3:34:ce:e5:a9:0a:
8e:e3:50:54:b9:3c:b7:6e:14:06:cf:1d:6a:8e:91:
03:93:6d:e7:88:96:a9:af:8c:d8:7a:48:99:b2:1d:
a8:f2:26:de:c8:87:2d:8b:b4:29:1d:e0:9a:e3:19:
e9:9d:fa:1f:7c:09:e2:24:6f:3d:e7:f6:0e:a4:e7:
23:f0:b2:b2:11:56:94:99:31:da:90:ec:8a:ff:79:
91:75:1d:7e:ff:e4:94:bc:10:84:63:79:52:7a:5f:
d3:ef:3a:7f:de:68:dc:96:8f:dd:dd:92:66:62:c7:
79:bd:fa:1c:1e:ae:cb:ba:4e:ef:2c:99:c8:7d:e3:
b0:14:c4:a7:68:35:d9:85:47:ce:94:ec:e3:dd:66:
68:ea:b4:93:d8:0f:f0:ee:58:9f:76:59:e1:e7:a5:
15:6a:05:32:99:4f:a8:31:dc:43:ed:94:fc:d5:55:
c7:10:4a:64:03:eb:54:1f:e0:eb:cd:32:60:0d:7c:
b7:66:bd:76:1c:a6:5c:b7:b2:3f:c1:30:15:f4:5e:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:36:1D:B8:E4:08:9F:85:24:3E:34:1B:27:D9:DA:C5:3C:89:23
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:74:03:48:28:a8:9e:eb:ae:13:12:f8:fd:6d:48:45:c9:e6:
af:c3:8c:08:66:14:ed:33:50:94:63:88:ce:c0:b9:ec:b8:04:
5d:18:3c:27:b9:cd:c4:08:9f:23:b6:4f:67:f4:a6:6e:06:c1:
03:fa:4a:69:5c:5e:9e:cc:b8:c4:b4:55:78:ff:42:b6:ae:d3:
2c:5f:9f:4e:e8:db:ed:00:c0:5d:26:b5:bb:99:72:34:c5:28:
ca:4f:1f:e6:8f:a0:47:c6:4d:dc:70:cc:f6:27:05:82:12:cb:
38:c8:4c:2d:58:bc:c9:cb:e5:e4:e8:03:42:85:3f:f7:05:6e:
ad:6f:68:01:23:0a:16:75:a5:96:c1:c7:f1:b4:29:2e:1c:f2:
22:2b:69:17:46:e0:55:b5:bb:06:3c:11:52:b4:56:35:a5:85:
5a:f9:80:06:90:e4:aa:5a:75:ec:47:d2:e1:91:54:a6:4a:4f:
96:53:01:4a:e7:7d:06:1b:b9:ac:42:a5:9f:39:e5:53:a3:70:
47:9f:5b:92:b9:3d:e5:fa:d7:48:b6:31:b3:22:ec:a2:b4:51:
79:8f:dd:09:5f:43:2a:91:29:2b:09:80:c2:cc:cd:60:14:c0:
0c:6d:68:5a:fe:bf:95:79:4d:2a:1f:f0:d1:f4:7d:f5:45:63:
43:1a:ec:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3gbgMl2Sp0pIZI2fcerxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjYwOTI0MTAwMjQxWhcNMjYwOTI1MTAwMjQxWjAzMTEwLwYDVQQD
EyhlN2M0MzYxZGI4ZTQwODlmODUyNDNlMzQxYjI3ZDlkYWM1M2M4OTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERzG+sbl6BOWFD5AWHhdDQ8V3+j
gON3z4QfiGr7b1MPf+2FfIqTgim24iTxuKcu5a6KrS/zNM7lqQqO41BUuTy3bhQG
zx1qjpEDk23niJapr4zYekiZsh2o8ibeyIcti7QpHeCa4xnpnfoffAniJG895/YO
pOcj8LKyEVaUmTHakOyK/3mRdR1+/+SUvBCEY3lSel/T7zp/3mjclo/d3ZJmYsd5
vfocHq7Luk7vLJnIfeOwFMSnaDXZhUfOlOzj3WZo6rST2A/w7lifdlnh56UVagUy
mU+oMdxD7ZT81VXHEEpkA+tUH+DrzTJgDXy3Zr12HKZct7I/wTAV9F6wvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfENh245AifhSQ+NBsn2drFPIkjMB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2XQDSCio
nuuuExL4/W1IRcnmr8OMCGYU7TNQlGOIzsC57LgEXRg8J7nNxAifI7ZPZ/SmbgbB
A/pKaVxensy4xLRVeP9Ctq7TLF+fTujb7QDAXSa1u5lyNMUoyk8f5o+gR8ZN3HDM
9icFghLLOMhMLVi8ycvl5OgDQoU/9wVurW9oASMKFnWllsHH8bQpLhzyIitpF0bg
VbW7BjwRUrRWNaWFWvmABpDkqlp17EfS4ZFUpkpPllMBSud9Bhu5rEKlnznlU6Nw
R59bkrk95frXSLYxsyLsorRReY/dCV9DKpEpKwmAwszNYBTADG1oWv6/lXlNKh/w
0fR99UVjQxrslw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:57 2026 by rpki-client