Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: 5ajdemyMIjhkSU9m4cHRQbYnc030+qbcruvgir2YxvA=
Subject key identifier: C2:69:6F:8C:E5:58:FE:A6:2A:2F:03:92:F6:3C:47:CA:E8:23:87:4A
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01A1721356102824D8988CB1C9EA3864E3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 08:00:32 +0000
Manifest this update: Sun 25 Oct 2026 08:00:32 +0000
Manifest next update: Mon 26 Oct 2026 08:00:32 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: P+3LG5eXYLQBCstck91F2OK7VbU6smGR4WlOeC/bykk=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:56:10:28:24:d8:98:8c:b1:c9:ea:38:64:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Oct 25 08:00:32 2026 GMT
Not After : Oct 26 08:00:32 2026 GMT
Subject: CN=c2696f8ce558fea62a2f0392f63c47cae823874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:23:a0:7f:b9:24:c1:c2:f2:41:20:a3:36:
ca:c6:2d:fb:17:2b:50:63:d9:2f:8d:00:bb:3a:c9:
4c:6a:27:f2:c6:c1:70:78:81:27:f4:43:0d:b7:08:
e7:3a:35:7b:c9:79:a1:f0:32:bd:c1:bf:fa:f1:11:
44:22:68:df:e1:48:83:c6:12:4f:9c:9c:d4:17:b9:
06:f3:dc:a3:31:c5:da:61:ba:83:83:2e:0b:9e:47:
e8:20:be:4f:c9:15:c9:81:37:3e:9a:0a:0b:73:99:
2c:2d:65:e5:ee:9b:5e:41:4c:c8:c1:40:25:5c:85:
01:3b:7e:7b:da:89:37:f8:5f:91:52:b6:f6:8f:dc:
a2:b4:db:07:d8:68:ea:c9:39:c5:1b:4f:3f:6c:e3:
64:4c:68:20:00:0b:51:ac:60:ec:dc:7c:d6:c1:b3:
1c:36:7d:41:a6:bc:20:79:d7:12:a9:bb:68:28:76:
c5:f8:b4:bb:ca:9b:24:43:0b:79:7c:40:04:37:d1:
fe:4a:27:31:91:0f:de:ee:8f:a8:95:ed:ef:e9:4f:
ad:74:ae:55:47:44:08:cf:b0:c0:0f:20:08:43:89:
95:28:6e:8f:d6:80:a8:e5:cd:a9:cb:2d:b2:af:0e:
9c:bb:94:04:93:b6:99:08:0d:a3:21:7f:ab:93:68:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:6F:8C:E5:58:FE:A6:2A:2F:03:92:F6:3C:47:CA:E8:23:87:4A
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:0c:8f:43:40:11:ad:7a:e4:db:e5:2b:ae:32:eb:c5:a9:
5f:3f:9d:c5:25:ce:a3:8c:5f:b0:21:41:65:99:21:6e:fa:1c:
6c:4e:25:05:f8:09:3a:38:6f:4e:33:76:64:22:27:e5:39:17:
da:fe:57:3c:a4:e4:16:f8:7f:c5:57:21:01:27:ea:fc:81:70:
11:5f:f7:a0:98:56:83:47:34:49:1b:70:bf:48:76:47:06:94:
f6:ec:29:49:45:54:43:ff:db:1f:90:20:6a:12:25:5f:0e:35:
5c:f5:35:06:28:a5:71:38:14:20:65:d0:a1:99:da:cc:b7:be:
5e:48:f0:4e:b2:4a:d2:26:ae:be:6e:78:1e:b0:f6:64:34:55:
6e:18:18:af:e4:ce:07:dd:a6:a9:3d:81:52:85:76:41:ed:27:
bb:9d:dc:ac:9f:ea:b6:3f:3b:45:58:53:e6:e5:4a:fd:20:75:
cb:65:45:32:a3:06:e4:cf:c5:9d:8a:8b:33:ac:a7:13:b6:42:
83:ac:7e:e2:4c:05:58:3f:a6:0c:ab:1c:c3:47:21:19:a9:48:
d0:37:18:a9:c2:e9:e6:9f:e4:de:98:c3:e0:03:b3:c0:d0:64:
9b:c8:6c:3b:21:db:0d:d1:cf:55:9b:0b:ea:1c:d7:db:36:cc:
6d:28:1a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFyE1YQKCTYmIyxyeo4ZOPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm
ZTM3M2MwHhcNMjYxMDI1MDgwMDMyWhcNMjYxMDI2MDgwMDMyWjAzMTEwLwYDVQQD
EyhjMjY5NmY4Y2U1NThmZWE2MmEyZjAzOTJmNjNjNDdjYWU4MjM4NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMjoH+5JMHC8kEgozbKxi37FytQ
Y9kvjQC7OslMaifyxsFweIEn9EMNtwjnOjV7yXmh8DK9wb/68RFEImjf4UiDxhJP
nJzUF7kG89yjMcXaYbqDgy4LnkfoIL5PyRXJgTc+mgoLc5ksLWXl7pteQUzIwUAl
XIUBO3572ok3+F+RUrb2j9yitNsH2GjqyTnFG08/bONkTGggAAtRrGDs3HzWwbMc
Nn1BprwgedcSqbtoKHbF+LS7ypskQwt5fEAEN9H+SicxkQ/e7o+ole3v6U+tdK5V
R0QIz7DADyAIQ4mVKG6P1oCo5c2pyy2yrw6cu5QEk7aZCA2jIX+rk2gsSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJpb4zlWP6mKi8DkvY8R8roI4dKMB8GA1UdIwQY
MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt
NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk
LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+EMj0NA
Ea165NvlK64y68WpXz+dxSXOo4xfsCFBZZkhbvocbE4lBfgJOjhvTjN2ZCIn5TkX
2v5XPKTkFvh/xVchASfq/IFwEV/3oJhWg0c0SRtwv0h2RwaU9uwpSUVUQ//bH5Ag
ahIlXw41XPU1BiilcTgUIGXQoZnazLe+XkjwTrJK0iauvm54HrD2ZDRVbhgYr+TO
B92mqT2BUoV2Qe0nu53crJ/qtj87RVhT5uVK/SB1y2VFMqMG5M/FnYqLM6ynE7ZC
g6x+4kwFWD+mDKscw0chGalI0DcYqcLp5p/k3pjD4AOzwNBkm8hsOyHbDdHPVZsL
6hzX2zbMbSga8A==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:01:19 2026 by rpki-client