Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: 9k/pMe5kj8V1cXVROq0x6+LkBgtbIRYdPQ7OF5dH+Do=
Subject key identifier: A2:7E:79:57:89:B2:CB:79:F7:56:9F:D4:0F:5D:97:47:A4:44:11:FF
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019FFD244AEE739C53A5F14491E7B48BDDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0750
Signing time: Thu 13 Aug 2026 22:00:41 +0000
Manifest this update: Thu 13 Aug 2026 22:00:41 +0000
Manifest next update: Fri 14 Aug 2026 22:00:41 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: /fsaa8mmvGFYiMOjQRAGo6NnGqRtBgGF4aeenzkOtYQ=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:24:4a:ee:73:9c:53:a5:f1:44:91:e7:b4:8b:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Aug 13 22:00:41 2026 GMT
Not After : Aug 14 22:00:41 2026 GMT
Subject: CN=a27e795789b2cb79f7569fd40f5d9747a44411ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:7a:bc:a5:ed:60:94:15:7e:f8:d2:86:51:
cd:2b:2b:3c:cc:96:f0:ba:48:28:db:77:7a:d8:80:
07:80:1e:68:37:63:d5:92:4c:ae:5c:f2:61:f0:88:
06:67:62:1d:a4:4f:f1:f8:eb:44:c9:6b:43:88:83:
33:cc:af:5a:ef:19:d0:d9:d0:2e:8b:99:fe:51:1d:
36:b5:a6:27:e2:c5:fa:a7:48:51:87:65:8d:a5:a4:
7e:dd:11:98:b4:99:8c:d8:5a:f3:41:a2:fd:76:a0:
ef:c1:1c:a7:8e:3d:04:cc:d3:69:7c:0c:12:04:80:
96:1a:0f:50:a7:03:2e:ab:58:86:c6:44:1c:4f:e7:
95:88:d0:82:c7:14:fe:6b:47:f2:a4:54:8d:64:35:
65:63:cf:1d:81:3b:53:02:2b:b7:48:09:c0:4e:8c:
19:97:ef:f3:9d:25:e0:c4:4b:0b:0f:08:56:08:63:
d2:cb:71:80:03:39:46:cc:b9:5d:dd:d3:98:9c:e9:
ba:e9:be:f1:a4:a8:af:e8:d9:6b:60:57:2a:2c:3d:
c8:d6:11:cb:47:23:40:7f:e9:ac:2b:20:ab:3a:5b:
a4:12:c1:36:1a:48:32:cc:ab:f2:b7:8b:e0:47:d2:
53:33:b1:d2:23:59:a5:b3:8a:ef:27:40:d9:cf:67:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:79:57:89:B2:CB:79:F7:56:9F:D4:0F:5D:97:47:A4:44:11:FF
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5b:9c:64:be:25:b4:6f:ae:fb:a2:31:45:35:03:a5:97:31:
37:6b:69:40:7e:d2:37:ae:b3:e2:a7:f8:e0:89:90:b6:6f:4c:
6f:27:f9:b0:0c:9f:cf:05:86:0c:90:ff:a3:88:ec:0c:67:f7:
21:6c:0f:5b:36:2c:7b:5e:23:09:27:a9:8c:a9:10:74:ec:a0:
ca:0d:14:22:29:07:8d:f6:c7:4d:fe:8e:b8:2a:f5:f6:25:b2:
66:cb:c4:5e:bf:f4:34:3b:1e:bf:8f:02:e1:5e:a5:45:cf:3c:
f0:f0:64:53:a0:eb:ae:be:c8:9c:08:a5:4a:ad:0a:8e:39:03:
9e:de:76:07:f2:17:6a:14:0d:5a:21:11:f1:4e:13:1b:62:4b:
dc:2e:ff:2f:d1:54:db:40:ad:92:e3:d5:c8:22:02:6d:0a:83:
33:7f:3a:5d:3f:f4:09:28:e1:e7:c0:13:56:97:cf:b8:9b:d8:
28:3c:b0:3c:77:7f:f0:82:9e:b9:6b:8e:20:86:42:15:5e:bf:
28:2b:9e:25:e9:87:8e:f3:16:d6:f7:11:78:9e:ae:f6:5c:cb:
ef:71:bb:00:ae:99:c8:0d:57:bc:dd:0b:85:8a:71:39:f4:95:
cb:56:b9:bd:36:45:24:d2:5b:a8:d4:4c:da:29:93:f8:3e:cb:
cd:a7:55:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9JEruc5xTpfFEkee0i93iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0
ZjYwM2MwHhcNMjYwODEzMjIwMDQxWhcNMjYwODE0MjIwMDQxWjAzMTEwLwYDVQQD
EyhhMjdlNzk1Nzg5YjJjYjc5Zjc1NjlmZDQwZjVkOTc0N2E0NDQxMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVJ6vKXtYJQVfvjShlHNKys8zJbw
ukgo23d62IAHgB5oN2PVkkyuXPJh8IgGZ2IdpE/x+OtEyWtDiIMzzK9a7xnQ2dAu
i5n+UR02taYn4sX6p0hRh2WNpaR+3RGYtJmM2FrzQaL9dqDvwRynjj0EzNNpfAwS
BICWGg9QpwMuq1iGxkQcT+eViNCCxxT+a0fypFSNZDVlY88dgTtTAiu3SAnATowZ
l+/znSXgxEsLDwhWCGPSy3GAAzlGzLld3dOYnOm66b7xpKiv6NlrYFcqLD3I1hHL
RyNAf+msKyCrOlukEsE2GkgyzKvyt4vgR9JTM7HSI1mls4rvJ0DZz2e4pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ+eVeJsst591af1A9dl0ekRBH/MB8GA1UdIwQY
MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt
YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl
LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFucZL4l
tG+u+6IxRTUDpZcxN2tpQH7SN66z4qf44ImQtm9Mbyf5sAyfzwWGDJD/o4jsDGf3
IWwPWzYse14jCSepjKkQdOygyg0UIikHjfbHTf6OuCr19iWyZsvEXr/0NDsev48C
4V6lRc888PBkU6Drrr7InAilSq0KjjkDnt52B/IXahQNWiER8U4TG2JL3C7/L9FU
20CtkuPVyCICbQqDM386XT/0CSjh58ATVpfPuJvYKDywPHd/8IKeuWuOIIZCFV6/
KCueJemHjvMW1vcReJ6u9lzL73G7AK6ZyA1XvN0LhYpxOfSVy1a5vTZFJNJbqNRM
2imT+D7LzadVXA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 00:18:41 2026 by rpki-client