Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: DBES1DScTzJyZWq+U9mbx894EEZgjnj0UHwZIVt8Pxk=
Subject key identifier: FB:FD:CA:5E:B2:A0:09:07:F4:A3:39:93:CB:DC:07:C4:36:19:4A:BD
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01A1599DC37ED0841055C40D974AFC801749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 1222
Signing time: Tue 20 Oct 2026 14:01:13 +0000
Manifest this update: Tue 20 Oct 2026 14:01:13 +0000
Manifest next update: Wed 21 Oct 2026 14:01:13 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: ZbRhJqH5MVLCn/g4ijkyELqOSD2UCYozJq3iFhCOdfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:c3:7e:d0:84:10:55:c4:0d:97:4a:fc:80:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Oct 20 14:01:13 2026 GMT
Not After : Oct 21 14:01:13 2026 GMT
Subject: CN=fbfdca5eb2a00907f4a33993cbdc07c436194abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:ee:b5:14:66:3c:30:38:49:0e:3e:fb:33:
2d:45:7a:3a:67:b3:29:d1:5e:d6:58:6b:42:cb:aa:
e7:04:34:0f:d4:a7:53:62:53:7e:3d:c0:28:95:a9:
9c:1f:c5:49:27:a2:92:93:45:97:d5:dc:75:72:44:
1d:2c:55:87:a6:22:4c:42:cd:96:f5:7e:75:e5:8c:
29:1d:33:ba:55:86:23:6c:48:6e:dd:73:f7:51:87:
cf:8c:e1:89:1f:94:52:11:3a:e9:28:ff:86:8b:5b:
f8:07:55:20:de:37:b7:77:76:d1:b0:60:f6:48:45:
58:a6:35:50:49:72:e9:ab:be:0e:0c:ab:83:a6:8c:
c9:c6:cc:c1:15:84:f5:f2:11:e6:67:6f:c7:c4:49:
3d:e2:0d:2d:3a:88:48:5d:d4:35:cb:a7:e7:3d:06:
c6:8b:96:90:4b:42:f0:d1:0a:8d:08:fa:b7:67:8f:
2b:e9:86:64:0b:d2:0d:f4:e0:7c:6c:72:52:56:a7:
33:b1:d0:61:fa:bf:a3:ad:26:4b:80:18:70:e3:1d:
0e:07:4f:62:9f:ed:28:8d:42:b0:bd:6e:57:80:1d:
db:23:36:20:f3:29:db:bd:18:c1:f4:11:47:3b:5f:
a9:df:47:e7:39:03:79:90:98:2d:83:a7:cb:6d:98:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:CA:5E:B2:A0:09:07:F4:A3:39:93:CB:DC:07:C4:36:19:4A:BD
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:cf:b2:64:a0:a6:45:93:02:9a:0a:ca:47:2e:3b:cd:75:
95:67:3a:88:1c:49:82:2a:99:84:92:fe:68:5f:7d:17:4e:fd:
c2:bb:b6:a4:23:5a:3e:13:5d:c0:8a:90:bd:90:6c:0b:d0:70:
60:24:61:a9:d0:8b:fe:10:cc:ce:60:a2:dd:cb:29:fb:0b:1f:
c9:53:3f:96:1f:89:ca:ce:ec:1d:c1:3b:5a:e2:12:ce:98:c8:
64:d5:54:a7:47:87:38:d6:98:30:8c:45:0d:65:b9:97:42:40:
cb:d8:fd:f1:82:8e:e2:da:6b:76:18:6a:50:71:d9:bf:34:9d:
89:c4:f0:e7:d9:4d:dc:5b:77:a9:89:5b:86:31:7a:26:af:44:
36:b0:40:21:d4:e0:eb:1e:b7:3e:2e:d0:a7:6e:e8:27:a7:06:
65:8e:c0:a8:59:02:17:b1:9f:6f:98:4b:1e:81:d2:22:b5:10:
44:bb:a0:6b:d3:ea:01:a5:92:15:2d:13:81:ca:34:f3:cb:55:
ca:eb:f9:b5:29:d0:8d:aa:75:f8:60:5c:6c:63:7d:f0:e0:64:
12:be:c7:91:ba:b3:69:77:22:67:69:bd:61:6e:20:a9:d7:c2:
cb:27:88:5e:17:ee:4d:81:43:17:dc:6d:0f:67:a6:80:9d:a6:
52:3c:90:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFZncN+0IQQVcQNl0r8gBdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjYxMDIwMTQwMTEzWhcNMjYxMDIxMTQwMTEzWjAzMTEwLwYDVQQD
EyhmYmZkY2E1ZWIyYTAwOTA3ZjRhMzM5OTNjYmRjMDdjNDM2MTk0YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaLutRRmPDA4SQ4++zMtRXo6Z7Mp
0V7WWGtCy6rnBDQP1KdTYlN+PcAolamcH8VJJ6KSk0WX1dx1ckQdLFWHpiJMQs2W
9X515YwpHTO6VYYjbEhu3XP3UYfPjOGJH5RSETrpKP+Gi1v4B1Ug3je3d3bRsGD2
SEVYpjVQSXLpq74ODKuDpozJxszBFYT18hHmZ2/HxEk94g0tOohIXdQ1y6fnPQbG
i5aQS0Lw0QqNCPq3Z48r6YZkC9IN9OB8bHJSVqczsdBh+r+jrSZLgBhw4x0OB09i
n+0ojUKwvW5XgB3bIzYg8ynbvRjB9BFHO1+p30fnOQN5kJgtg6fLbZj+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv9yl6yoAkH9KM5k8vcB8Q2GUq9MB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZXPsmSg
pkWTApoKykcuO811lWc6iBxJgiqZhJL+aF99F079wru2pCNaPhNdwIqQvZBsC9Bw
YCRhqdCL/hDMzmCi3csp+wsfyVM/lh+Jys7sHcE7WuISzpjIZNVUp0eHONaYMIxF
DWW5l0JAy9j98YKO4tprdhhqUHHZvzSdicTw59lN3Ft3qYlbhjF6Jq9ENrBAIdTg
6x63Pi7Qp27oJ6cGZY7AqFkCF7Gfb5hLHoHSIrUQRLuga9PqAaWSFS0Tgco088tV
yuv5tSnQjap1+GBcbGN98OBkEr7HkbqzaXciZ2m9YW4gqdfCyyeIXhfuTYFDF9xt
D2emgJ2mUjyQ4w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:26 2026 by rpki-client