Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: 8qol3bmGNjOLUksj56hLi/ORYnDKVk5/Ao4kUeXPfwY=
Subject key identifier: 83:88:69:F7:C6:AF:4A:51:59:FA:EE:0B:65:4A:AF:E2:9B:30:2B:45
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 01A13F02F71C28FFDBFC096D74782FC39AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 10:02:01 +0000
Manifest this update: Thu 15 Oct 2026 10:02:01 +0000
Manifest next update: Fri 16 Oct 2026 10:02:01 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: qPLpm8zE7KKHIQM3bm65a8CE5uJsyVdfuGMrztUod18=)
2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:f7:1c:28:ff:db:fc:09:6d:74:78:2f:c3:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Oct 15 10:02:01 2026 GMT
Not After : Oct 16 10:02:01 2026 GMT
Subject: CN=838869f7c6af4a5159faee0b654aafe29b302b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:42:22:44:f7:d0:1a:ab:f6:01:c8:5c:1f:
97:fb:8f:ba:bf:89:4b:24:d5:a6:25:b2:c5:e6:30:
e1:e7:59:01:a1:be:34:dc:84:5a:64:d8:d5:aa:f9:
77:8c:d4:78:a0:1f:79:1b:5a:9f:f6:30:03:1a:35:
0a:51:f5:61:e2:9b:bb:ff:5d:79:fa:0e:44:0e:09:
d5:38:97:10:c7:c7:4d:57:57:1b:0b:8b:82:23:81:
78:bc:8d:9a:fe:59:74:19:c5:ba:67:02:3a:49:1b:
24:11:4d:44:ca:43:a7:4a:7c:a8:22:8c:0b:63:f3:
bc:d5:b5:8c:61:e3:10:8d:44:24:0b:25:23:5f:d3:
c3:0e:c2:12:e3:40:51:b5:11:1f:43:88:12:62:3c:
60:01:62:a0:65:5d:fd:5b:7e:b3:95:ef:b6:8c:55:
77:9f:4e:1b:27:65:30:0c:71:74:3d:72:64:d1:cf:
e6:24:0b:0d:d1:cb:c8:22:e1:57:98:66:27:ff:bc:
84:5b:43:17:a9:83:39:41:16:5b:89:19:bf:4f:18:
99:3d:91:d8:72:1c:ed:eb:29:79:11:c3:10:1b:cb:
44:b0:8e:b9:d5:9d:5b:17:0b:ff:03:24:5e:91:77:
06:91:28:90:33:c9:e4:81:df:9f:69:c1:f9:69:fa:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:69:F7:C6:AF:4A:51:59:FA:EE:0B:65:4A:AF:E2:9B:30:2B:45
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8a:0b:9e:ef:2c:87:a5:e3:53:97:ae:40:90:d0:a6:01:fb:
ef:37:c4:da:a8:af:44:2b:9d:a0:41:e2:b0:d2:0b:69:7b:29:
43:91:5f:29:9c:2b:e4:92:e3:6e:55:92:2d:77:d3:ec:1a:21:
29:07:b0:60:91:46:35:c8:1e:73:83:2b:6d:3d:d6:d4:ea:35:
a5:31:95:1f:7b:a3:59:0b:8f:21:b3:3d:d8:47:ce:23:6c:72:
ed:fb:49:a2:92:84:78:c5:bd:e8:7f:1b:e0:29:cf:48:ac:eb:
c3:c6:78:2c:4f:06:b6:97:c8:89:33:24:62:cf:c8:80:fb:c4:
59:36:01:27:ef:0d:3c:8b:74:cd:64:ec:68:ff:4f:f8:91:9e:
8b:8a:50:8a:f7:54:41:0e:d5:7b:ba:91:ba:5b:71:23:45:7f:
11:2d:e9:25:ef:7b:58:e4:e5:17:c7:3f:7d:f4:47:fe:96:99:
c9:ae:7a:db:f5:2d:9d:cd:f5:58:eb:84:43:a2:ca:38:54:c9:
60:05:49:4c:9f:8d:c7:5a:cc:7f:29:7a:b4:69:1e:52:40:d2:
21:4e:cf:1a:64:a2:4e:4b:2d:2f:ce:64:fd:cd:07:b9:69:8c:
21:90:00:65:ed:64:31:b6:32:9b:89:02:21:a0:d8:58:d6:93:
24:18:47:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AvccKP/b/AltdHgvw5r+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjYxMDE1MTAwMjAxWhcNMjYxMDE2MTAwMjAxWjAzMTEwLwYDVQQD
Eyg4Mzg4NjlmN2M2YWY0YTUxNTlmYWVlMGI2NTRhYWZlMjliMzAyYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U9CIkT30Bqr9gHIXB+X+4+6v4lL
JNWmJbLF5jDh51kBob403IRaZNjVqvl3jNR4oB95G1qf9jADGjUKUfVh4pu7/115
+g5EDgnVOJcQx8dNV1cbC4uCI4F4vI2a/ll0GcW6ZwI6SRskEU1EykOnSnyoIowL
Y/O81bWMYeMQjUQkCyUjX9PDDsIS40BRtREfQ4gSYjxgAWKgZV39W36zle+2jFV3
n04bJ2UwDHF0PXJk0c/mJAsN0cvIIuFXmGYn/7yEW0MXqYM5QRZbiRm/TxiZPZHY
chzt6yl5EcMQG8tEsI651Z1bFwv/AyRekXcGkSiQM8nkgd+facH5afpXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOIaffGr0pRWfruC2VKr+KbMCtFMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyIoLnu8s
h6XjU5euQJDQpgH77zfE2qivRCudoEHisNILaXspQ5FfKZwr5JLjblWSLXfT7Boh
KQewYJFGNcgec4MrbT3W1Oo1pTGVH3ujWQuPIbM92EfOI2xy7ftJopKEeMW96H8b
4CnPSKzrw8Z4LE8GtpfIiTMkYs/IgPvEWTYBJ+8NPIt0zWTsaP9P+JGei4pQivdU
QQ7Ve7qRultxI0V/ES3pJe97WOTlF8c/ffRH/paZya562/Utnc31WOuEQ6LKOFTJ
YAVJTJ+Nx1rMfyl6tGkeUkDSIU7PGmSiTkstL85k/c0HuWmMIZAAZe1kMbYym4kC
IaDYWNaTJBhHzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:33 2026 by rpki-client