Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: joMFHAd2lYkNEfzmBq6vIXfJ2BF4P7OBW9a3WDE2MoA=
Subject key identifier: 59:34:1B:70:5F:0F:33:57:23:42:4C:4B:68:41:15:41:5B:25:C7:45
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01A0021430D8999455B0F1DA8154B02B48D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:01:12 +0000
Manifest this update: Fri 14 Aug 2026 21:01:12 +0000
Manifest next update: Sat 15 Aug 2026 21:01:12 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: dtbnoNvZWE66sWO6yiBRM2Ia0JaJ/FsBRiBp+tvfY7k=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:30:d8:99:94:55:b0:f1:da:81:54:b0:2b:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Aug 14 21:01:12 2026 GMT
Not After : Aug 15 21:01:12 2026 GMT
Subject: CN=59341b705f0f335723424c4b684115415b25c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:cf:27:c9:d2:10:74:e4:28:4d:63:85:87:
42:23:d5:8b:81:48:54:c4:42:f2:b3:1f:ea:ad:39:
7f:36:5c:91:9e:30:31:26:f0:f6:7b:98:46:8b:d4:
f1:85:e4:68:3c:33:27:eb:4a:e5:d0:9c:dd:24:3e:
1e:02:25:9d:98:fe:b8:7a:69:6b:55:2d:82:9d:1a:
1c:1c:e9:89:0b:e6:ec:c6:17:ab:c4:bc:e2:79:26:
06:ed:8d:77:d0:de:d2:e9:ad:1a:38:d3:52:d6:a5:
f2:f1:9f:03:25:9c:86:31:a1:3d:c5:85:82:84:d2:
da:25:62:86:ea:eb:62:dd:a0:c6:55:eb:aa:77:90:
57:e1:67:1b:26:3e:11:d4:89:80:ab:f3:13:0c:01:
fd:f8:31:eb:ef:56:dc:d5:57:0a:25:df:c3:15:06:
a4:47:fe:cf:91:e4:a0:70:1a:d3:24:0c:6b:7f:3e:
73:c1:f8:c0:c0:be:b3:b9:1a:f4:35:2f:3e:e2:a0:
50:98:ba:ae:de:ce:81:ad:55:a4:c4:fd:c6:1f:39:
03:bb:f7:b9:d3:99:95:a4:0b:3d:58:46:3b:66:a0:
c2:8d:9a:cb:a8:db:44:47:a9:ea:a3:42:74:74:41:
55:ac:96:11:9c:f6:4c:05:44:d7:cb:db:c5:09:15:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:1B:70:5F:0F:33:57:23:42:4C:4B:68:41:15:41:5B:25:C7:45
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:89:b7:0d:d5:41:47:f1:ac:e4:90:eb:6e:67:82:89:3b:
ca:49:8e:a3:da:21:46:6b:2f:61:7b:51:bc:7c:82:21:17:c6:
8f:59:63:34:d2:eb:78:30:58:cd:22:f6:7e:54:f7:71:23:8c:
16:50:ba:42:e3:c0:a4:68:65:86:9e:1e:5d:08:8b:ad:18:e4:
c6:34:fe:d4:af:00:9f:ff:66:73:1a:62:94:4f:3a:e7:10:9f:
7f:b1:06:ea:6a:05:ce:20:a8:ab:28:7f:21:50:d7:ec:b4:ae:
37:80:1e:80:7f:ac:61:ef:d1:32:7c:c1:a2:79:f9:92:a4:41:
af:66:c4:0a:5e:e2:c9:60:42:15:38:dc:99:f3:fa:c7:47:b5:
fd:db:f1:aa:c7:b8:5e:38:18:42:79:ac:c2:d4:96:25:ee:e6:
08:0b:88:3e:c7:8b:ea:96:67:e0:a6:ac:97:fb:8e:f0:e4:12:
d9:69:6e:24:cf:c4:4a:63:98:68:1c:5f:67:fe:55:fb:98:82:
e0:88:5c:94:0e:67:e6:7c:a3:e1:b4:0e:e7:08:4a:14:21:14:
ad:2b:d1:ec:2a:f8:6b:71:c4:36:3b:cc:51:a3:ae:38:a6:69:
11:4d:46:88:eb:ec:13:f1:ac:e2:ff:00:a1:1a:1c:fa:98:f1:
4a:e2:8d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFDDYmZRVsPHagVSwK0jUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjYwODE0MjEwMTEyWhcNMjYwODE1MjEwMTEyWjAzMTEwLwYDVQQD
Eyg1OTM0MWI3MDVmMGYzMzU3MjM0MjRjNGI2ODQxMTU0MTViMjVjNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6PPJ8nSEHTkKE1jhYdCI9WLgUhU
xELysx/qrTl/NlyRnjAxJvD2e5hGi9TxheRoPDMn60rl0JzdJD4eAiWdmP64emlr
VS2CnRocHOmJC+bsxherxLzieSYG7Y130N7S6a0aONNS1qXy8Z8DJZyGMaE9xYWC
hNLaJWKG6uti3aDGVeuqd5BX4WcbJj4R1ImAq/MTDAH9+DHr71bc1VcKJd/DFQak
R/7PkeSgcBrTJAxrfz5zwfjAwL6zuRr0NS8+4qBQmLqu3s6BrVWkxP3GHzkDu/e5
05mVpAs9WEY7ZqDCjZrLqNtER6nqo0J0dEFVrJYRnPZMBUTXy9vFCRWHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk0G3BfDzNXI0JMS2hBFUFbJcdFMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGqJtw3V
QUfxrOSQ625ngok7ykmOo9ohRmsvYXtRvHyCIRfGj1ljNNLreDBYzSL2flT3cSOM
FlC6QuPApGhlhp4eXQiLrRjkxjT+1K8An/9mcxpilE865xCff7EG6moFziCoqyh/
IVDX7LSuN4AegH+sYe/RMnzBonn5kqRBr2bECl7iyWBCFTjcmfP6x0e1/dvxqse4
XjgYQnmswtSWJe7mCAuIPseL6pZn4Kasl/uO8OQS2WluJM/ESmOYaBxfZ/5V+5iC
4IhclA5n5nyj4bQO5whKFCEUrSvR7Cr4a3HENjvMUaOuOKZpEU1GiOvsE/Gs4v8A
oRoc+pjxSuKNWg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:43 2026 by rpki-client