Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: owmJvGPWtjwOGZwoCGjUlPOBBamYK5UKv7z6ouvHsGM=
Subject key identifier: 1D:F5:72:4B:DE:95:AE:67:E3:8F:68:62:6E:65:9F:73:70:EF:7C:64
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 01A00138420136F39EED6E3209D8149CDEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 1825
Signing time: Fri 14 Aug 2026 17:00:59 +0000
Manifest this update: Fri 14 Aug 2026 17:00:59 +0000
Manifest next update: Sat 15 Aug 2026 17:00:59 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: M/mIprRYQeQxqyPnzJ9b9I1Q2ITp7nmJfYVkr3HD1Ns=)
2: JKIhvk4nR2Yatg3LSMzcvAB5gDY.roa (hash: Wu8o0XpgB80LZ5YT5dratdi0qOmv7LG2bN4vwgSeFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:42:01:36:f3:9e:ed:6e:32:09:d8:14:9c:de:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Aug 14 17:00:59 2026 GMT
Not After : Aug 15 17:00:59 2026 GMT
Subject: CN=1df5724bde95ae67e38f68626e659f7370ef7c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:d8:b1:6c:38:4e:20:20:ed:ba:f7:96:07:
13:fa:cf:81:e2:9e:c7:a9:92:53:51:ac:44:1c:04:
b6:c0:16:fe:f5:3e:cd:67:b6:ac:eb:40:ef:eb:ec:
2a:b5:eb:6c:f5:b6:b4:a2:e3:04:43:6f:5e:14:87:
34:c5:b9:9f:46:8f:ad:ba:a5:f3:3a:a4:c1:74:de:
45:01:29:20:21:b5:92:cb:c9:dc:49:90:98:42:fd:
fa:40:6b:3f:6b:d9:19:29:42:e9:8b:21:96:6f:ea:
28:2f:9d:b1:b1:6d:02:3d:cc:25:31:97:ad:b6:b6:
d5:77:08:e6:95:66:04:01:42:17:8c:88:a8:6f:1d:
dd:fe:ab:80:5a:03:f7:b2:92:2b:96:cf:be:fa:73:
5f:9c:83:91:7c:2c:03:e2:cd:bd:79:b4:bf:79:e9:
5e:32:82:47:13:35:c9:42:82:3b:77:19:06:cc:7d:
32:17:d3:95:5e:28:31:a3:46:9b:b7:39:28:e9:83:
e5:72:00:e8:ff:46:62:4f:4f:ab:b5:91:66:56:72:
e1:c3:ad:50:3a:20:a2:63:19:0c:a6:39:90:1c:7c:
50:59:b2:21:6e:72:60:ac:e1:b4:07:9d:2f:71:91:
3d:03:0c:b4:eb:8c:e3:da:b4:ae:17:6f:ca:47:00:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:72:4B:DE:95:AE:67:E3:8F:68:62:6E:65:9F:73:70:EF:7C:64
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:29:f5:63:57:5f:7f:4b:ca:07:94:74:81:13:5b:d8:3b:
e9:1c:0e:c9:f9:1a:6c:c3:dd:3d:c6:8a:99:86:81:fd:af:4b:
ab:a1:1a:5c:11:4e:f1:0a:44:7d:37:24:bf:cf:a6:db:d3:6c:
25:11:ec:2e:bc:c7:28:e9:1b:dd:22:48:c3:43:48:54:f1:3f:
7c:8d:36:f9:1a:f1:24:74:29:4f:28:ed:91:3c:c9:7a:76:1a:
5f:c3:8f:4c:90:ed:9f:3f:45:70:ea:da:af:07:a9:85:9b:b0:
73:55:8b:9e:25:6b:62:7a:d3:a5:10:d5:47:2b:6b:60:c1:7a:
fa:be:d2:58:82:da:ce:b5:60:be:0d:f8:b5:86:2e:a0:84:f8:
5a:2c:2c:e0:76:67:b1:f6:ee:21:ba:17:b2:c1:cf:9b:07:5e:
df:03:9a:1e:8f:1b:3a:bc:5f:fc:cb:5b:9d:bf:58:0f:ef:29:
11:b6:5a:65:63:0b:70:96:3a:5e:5f:61:93:f7:a2:ce:a0:52:
f5:89:9b:b8:c8:09:97:6f:b5:67:21:9c:fe:71:c9:9c:12:5b:
a6:fd:e7:44:eb:d6:c8:49:85:1e:cb:a2:70:d6:76:7c:59:0b:
d0:d0:98:84:30:eb:00:65:ec:59:30:fd:ea:f9:1f:1c:2c:7e:
3f:6a:4d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOEIBNvOe7W4yCdgUnN6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjYwODE0MTcwMDU5WhcNMjYwODE1MTcwMDU5WjAzMTEwLwYDVQQD
EygxZGY1NzI0YmRlOTVhZTY3ZTM4ZjY4NjI2ZTY1OWY3MzcwZWY3YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65fYsWw4TiAg7br3lgcT+s+B4p7H
qZJTUaxEHAS2wBb+9T7NZ7as60Dv6+wqtets9ba0ouMEQ29eFIc0xbmfRo+tuqXz
OqTBdN5FASkgIbWSy8ncSZCYQv36QGs/a9kZKULpiyGWb+ooL52xsW0CPcwlMZet
trbVdwjmlWYEAUIXjIiobx3d/quAWgP3spIrls+++nNfnIORfCwD4s29ebS/eele
MoJHEzXJQoI7dxkGzH0yF9OVXigxo0abtzko6YPlcgDo/0ZiT0+rtZFmVnLhw61Q
OiCiYxkMpjmQHHxQWbIhbnJgrOG0B50vcZE9Awy064zj2rSuF2/KRwChjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB31ckvela5n449oYm5ln3Nw73xkMB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeYp9WNX
X39LygeUdIETW9g76RwOyfkabMPdPcaKmYaB/a9Lq6EaXBFO8QpEfTckv8+m29Ns
JRHsLrzHKOkb3SJIw0NIVPE/fI02+RrxJHQpTyjtkTzJenYaX8OPTJDtnz9FcOra
rwephZuwc1WLniVrYnrTpRDVRytrYMF6+r7SWILazrVgvg34tYYuoIT4Wiws4HZn
sfbuIboXssHPmwde3wOaHo8bOrxf/Mtbnb9YD+8pEbZaZWMLcJY6Xl9hk/eizqBS
9YmbuMgJl2+1ZyGc/nHJnBJbpv3nROvWyEmFHsuicNZ2fFkL0NCYhDDrAGXsWTD9
6vkfHCx+P2pNGQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:49 2026 by rpki-client