Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: Tb/2kVrjZsGsALUacblixbFTnrJvYMAtv6FcpKdgsIY=
Subject key identifier: C0:7B:33:B3:39:52:83:7B:67:5C:B8:AF:DE:89:15:67:95:1B:31:47
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 01A101DAB189D4EAD8EB5B77E8B6D42C4A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 07D7
Signing time: Sat 03 Oct 2026 13:01:11 +0000
Manifest this update: Sat 03 Oct 2026 13:01:11 +0000
Manifest next update: Sun 04 Oct 2026 13:01:11 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: gJ161dy3mHI+Yf69LIW9BYhSW29Ezkgy0YOkkKtqTbU=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:da:b1:89:d4:ea:d8:eb:5b:77:e8:b6:d4:2c:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Oct 3 13:01:11 2026 GMT
Not After : Oct 4 13:01:11 2026 GMT
Subject: CN=c07b33b33952837b675cb8afde891567951b3147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:69:86:83:cd:fc:2d:ad:35:b9:ef:06:37:
af:d9:3e:a4:8e:ac:03:0f:66:26:b8:d9:6b:de:dc:
b8:a3:f6:5a:c0:6a:63:53:59:8d:3d:3b:af:00:d5:
65:16:2e:cd:17:1f:4c:01:e8:1c:56:67:1a:00:1e:
45:8a:f4:d7:93:57:75:6e:46:e3:0c:98:e2:b7:6b:
de:d6:5a:52:8a:4e:27:36:ca:42:4c:d3:4a:f7:46:
94:79:3e:e6:c0:a5:7b:96:0e:42:5c:3c:55:82:fb:
30:69:6a:c7:aa:e2:1f:fd:2c:f7:db:96:d5:af:bd:
e0:0a:ac:cd:a3:27:59:f4:ce:9c:c3:fb:21:19:2a:
b6:01:9b:ad:9f:ac:94:c5:27:5c:df:bb:4c:ba:39:
d1:16:48:68:c9:fe:0d:33:b9:a8:6c:2b:33:96:68:
da:94:f5:6d:2e:49:93:d9:de:0f:60:67:86:9d:9f:
d6:07:e9:44:19:a4:31:9f:23:fe:4e:71:51:7e:de:
84:a2:2e:f0:56:b7:05:37:db:9c:1e:01:14:89:30:
b9:c8:38:a1:6f:25:cb:a2:bb:25:f3:25:2b:2f:0c:
d5:66:77:54:62:8c:94:f1:70:27:dc:f1:33:2a:93:
28:64:10:6b:a0:60:3e:a2:a1:e3:66:fe:c7:8b:82:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:33:B3:39:52:83:7B:67:5C:B8:AF:DE:89:15:67:95:1B:31:47
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1c:b9:5d:6a:53:a7:84:67:a4:2d:d0:e5:2f:2a:6e:9c:8f:
52:21:8e:27:7a:76:a9:97:70:3a:d7:76:a5:ed:83:94:f2:fa:
c8:92:f6:60:1a:0a:ab:52:0d:f1:c6:b4:e4:37:93:54:a3:6e:
a0:be:dd:11:a3:3e:bc:2e:ce:0e:3a:db:aa:03:87:7b:93:81:
7f:e4:25:55:7b:2a:f4:66:cf:44:14:95:d9:5e:17:e3:43:54:
27:ac:20:ca:7a:68:63:27:e6:b3:06:33:e9:c4:97:ad:e8:e3:
6a:49:0e:b7:ce:9a:84:76:99:9c:f9:ff:3b:d1:49:e4:32:be:
bb:4e:9d:81:93:f4:2a:0d:aa:2f:46:49:cd:fe:56:17:ef:0b:
ff:77:7f:8d:4c:cb:03:4f:75:36:28:f8:d0:3c:6c:85:26:d9:
b6:66:08:26:52:08:e7:54:6a:f2:8b:ab:4a:bc:3f:37:7d:1b:
10:4d:1c:d0:16:34:db:1e:b7:b2:0a:10:c7:85:bb:5d:e2:c4:
3a:6a:cf:14:57:6a:e8:64:f9:be:55:69:45:0f:72:53:11:fc:
91:b3:28:af:8c:2d:48:0c:79:fe:d9:06:cd:b4:99:00:06:92:
73:aa:b7:d8:29:76:81:29:96:a9:2b:36:48:0e:77:9c:f1:d9:
ff:ff:3b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEB2rGJ1OrY61t36LbULEoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0
ZjYwM2MwHhcNMjYxMDAzMTMwMTExWhcNMjYxMDA0MTMwMTExWjAzMTEwLwYDVQQD
EyhjMDdiMzNiMzM5NTI4MzdiNjc1Y2I4YWZkZTg5MTU2Nzk1MWIzMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/JphoPN/C2tNbnvBjev2T6kjqwD
D2YmuNlr3ty4o/ZawGpjU1mNPTuvANVlFi7NFx9MAegcVmcaAB5FivTXk1d1bkbj
DJjit2ve1lpSik4nNspCTNNK90aUeT7mwKV7lg5CXDxVgvswaWrHquIf/Sz325bV
r73gCqzNoydZ9M6cw/shGSq2AZutn6yUxSdc37tMujnRFkhoyf4NM7mobCszlmja
lPVtLkmT2d4PYGeGnZ/WB+lEGaQxnyP+TnFRft6Eoi7wVrcFN9ucHgEUiTC5yDih
byXLorsl8yUrLwzVZndUYoyU8XAn3PEzKpMoZBBroGA+oqHjZv7Hi4LDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB7M7M5UoN7Z1y4r96JFWeVGzFHMB8GA1UdIwQY
MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt
YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl
LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBy5XWpT
p4RnpC3Q5S8qbpyPUiGOJ3p2qZdwOtd2pe2DlPL6yJL2YBoKq1IN8ca05DeTVKNu
oL7dEaM+vC7ODjrbqgOHe5OBf+QlVXsq9GbPRBSV2V4X40NUJ6wgynpoYyfmswYz
6cSXrejjakkOt86ahHaZnPn/O9FJ5DK+u06dgZP0Kg2qL0ZJzf5WF+8L/3d/jUzL
A091Nij40DxshSbZtmYIJlII51Rq8ourSrw/N30bEE0c0BY02x63sgoQx4W7XeLE
OmrPFFdq6GT5vlVpRQ9yUxH8kbMor4wtSAx5/tkGzbSZAAaSc6q32Cl2gSmWqSs2
SA53nPHZ//87ag==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:53:50 2026 by rpki-client