Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: JNEQUfuDstj8sIQK/NGQGZOfClaxoYy9Y1/cRvJcYg4=
Subject key identifier: 5D:29:84:FB:1A:E6:33:8D:96:30:AB:A1:A5:1B:76:10:B2:89:12:BB
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 01A13DB8212FA1CA44D6845FD4E91A58E40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:39 +0000
Manifest this update: Thu 15 Oct 2026 04:00:39 +0000
Manifest next update: Fri 16 Oct 2026 04:00:39 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: OkSyX5rwyRMdZ9zoDXRQrrit7cx7PCjfgiuGtnYabQk=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:21:2f:a1:ca:44:d6:84:5f:d4:e9:1a:58:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Oct 15 04:00:39 2026 GMT
Not After : Oct 16 04:00:39 2026 GMT
Subject: CN=5d2984fb1ae6338d9630aba1a51b7610b28912bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:89:13:f7:52:9b:5a:ca:09:07:13:52:6a:
62:03:2b:ab:db:20:5c:42:c9:50:e1:7c:9f:51:c6:
4a:cd:01:97:15:9b:e5:f4:27:ec:06:8e:fa:00:1f:
d8:ba:cb:a9:90:f3:0e:c6:d9:65:35:f5:be:f4:91:
c2:ad:25:07:83:8f:4e:63:e4:6c:fa:69:22:2d:2d:
bd:a5:f1:c4:cf:07:68:c4:75:38:70:3b:2c:21:34:
ff:df:42:a1:61:27:c6:b7:f7:06:91:81:23:51:1b:
ca:70:bc:c0:f3:3b:02:84:d2:53:d3:9e:cc:88:27:
c6:a0:c4:a6:fc:0e:3d:07:45:fb:85:6e:94:c0:29:
70:3c:8c:14:57:e6:94:49:f3:a1:7c:25:9e:b5:38:
c5:65:44:4f:a8:db:c0:c9:f1:9b:8b:0f:cc:42:5b:
d1:bf:1d:21:94:8d:49:e8:05:f9:95:c2:7d:82:a1:
1e:6a:4a:41:4b:5e:74:f2:8f:a8:f9:69:d3:88:2f:
bd:aa:5e:20:27:e7:91:e9:ef:9a:6b:d9:0a:64:38:
72:88:ed:6c:7f:eb:a0:f0:7f:01:94:4a:41:54:96:
cd:58:d3:ce:f1:8a:b4:51:0c:6e:10:bc:f9:de:c9:
32:27:5c:ea:95:da:58:30:20:0c:02:2b:7e:ae:78:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:84:FB:1A:E6:33:8D:96:30:AB:A1:A5:1B:76:10:B2:89:12:BB
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6e:71:42:6e:86:f8:38:14:f6:a3:f4:6e:b8:fc:6a:7f:b3:
90:9a:a5:73:e6:a2:c8:b7:af:4e:69:6f:72:60:94:1a:df:4b:
f0:df:ba:27:8e:39:d0:47:27:ca:9a:ab:d7:30:f9:d9:f4:a7:
05:48:ac:c9:6d:db:83:aa:f8:58:cc:bd:42:21:df:1c:63:b2:
b5:b4:67:36:cd:c5:5a:18:88:04:39:6a:1b:a7:e3:79:74:06:
18:b6:39:89:ee:37:f9:d5:65:81:63:2c:f9:00:b5:e8:f9:a3:
78:8b:f8:f3:df:ae:61:dc:bf:a4:e5:bc:fa:48:ff:fe:78:fa:
71:08:7f:5f:8e:76:2c:66:79:33:e3:68:b8:b3:92:e3:3d:5c:
35:3a:01:17:72:bb:e8:6a:d9:bc:6d:c5:f3:b6:8a:f6:96:2a:
1e:4d:ea:c9:6c:c2:1f:0a:4d:3c:32:c2:53:9f:4b:2e:e4:e3:
b8:c2:66:2c:cd:96:5a:46:f2:4f:cd:08:3f:f5:c4:db:f9:4d:
27:56:18:e8:c6:a6:c3:d1:5c:bc:b0:b8:f6:62:fd:33:cb:8b:
79:60:27:fa:ce:d5:a7:b9:e1:12:7c:ac:9e:34:ee:18:5b:e4:
de:c9:bf:90:12:0a:e3:3a:08:dc:a1:95:bd:46:fd:fe:bc:23:
08:6b:64:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uCEvocpE1oRf1OkaWOQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx
Zjc5NzcwHhcNMjYxMDE1MDQwMDM5WhcNMjYxMDE2MDQwMDM5WjAzMTEwLwYDVQQD
Eyg1ZDI5ODRmYjFhZTYzMzhkOTYzMGFiYTFhNTFiNzYxMGIyODkxMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowiJE/dSm1rKCQcTUmpiAyur2yBc
QslQ4XyfUcZKzQGXFZvl9CfsBo76AB/YusupkPMOxtllNfW+9JHCrSUHg49OY+Rs
+mkiLS29pfHEzwdoxHU4cDssITT/30KhYSfGt/cGkYEjURvKcLzA8zsChNJT057M
iCfGoMSm/A49B0X7hW6UwClwPIwUV+aUSfOhfCWetTjFZURPqNvAyfGbiw/MQlvR
vx0hlI1J6AX5lcJ9gqEeakpBS1508o+o+WnTiC+9ql4gJ+eR6e+aa9kKZDhyiO1s
f+ug8H8BlEpBVJbNWNPO8Yq0UQxuELz53skyJ1zqldpYMCAMAit+rniOPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0phPsa5jONljCroaUbdhCyiRK7MB8GA1UdIwQY
MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt
NTYwODVjOWU1MjJlLzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl
LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW5xQm6G
+DgU9qP0brj8an+zkJqlc+aiyLevTmlvcmCUGt9L8N+6J4450Ecnypqr1zD52fSn
BUisyW3bg6r4WMy9QiHfHGOytbRnNs3FWhiIBDlqG6fjeXQGGLY5ie43+dVlgWMs
+QC16PmjeIv489+uYdy/pOW8+kj//nj6cQh/X452LGZ5M+NouLOS4z1cNToBF3K7
6GrZvG3F87aK9pYqHk3qyWzCHwpNPDLCU59LLuTjuMJmLM2WWkbyT80IP/XE2/lN
J1YY6Mamw9FcvLC49mL9M8uLeWAn+s7Vp7nhEnysnjTuGFvk3sm/kBIK4zoI3KGV
vUb9/rwjCGtkyA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:09 2026 by rpki-client