Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: dL5YDcwGaMAn1/jW/aMiXLMDA4A+qEi3z4s0BGvxZDk=
Subject key identifier: 1A:ED:5A:BD:DC:98:CB:21:5E:6B:5D:F1:08:A6:4C:EC:36:E4:D5:FC
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 01A040BBDEA7BE41BFE62A6D286290E3E175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 04D5
Signing time: Thu 27 Aug 2026 01:00:48 +0000
Manifest this update: Thu 27 Aug 2026 01:00:48 +0000
Manifest next update: Fri 28 Aug 2026 01:00:48 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: 5Q4B3HH4JUHLGSyfCU+DmjNjYEAOcYgGgzknSTtkHus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:de:a7:be:41:bf:e6:2a:6d:28:62:90:e3:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Aug 27 01:00:48 2026 GMT
Not After : Aug 28 01:00:48 2026 GMT
Subject: CN=1aed5abddc98cb215e6b5df108a64cec36e4d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:26:88:c2:c2:7f:56:e2:3d:83:01:d3:c3:
18:83:bf:d9:62:cb:47:cd:d1:9b:12:d0:03:e9:d7:
ed:fa:04:d8:32:69:4b:11:66:64:c1:9f:a7:bb:84:
5b:0d:d0:60:aa:6b:3d:df:58:42:e5:aa:57:9e:1f:
bf:86:0e:91:36:7c:8a:bf:39:ed:ca:29:6e:0c:82:
04:fd:21:77:e5:d0:21:2f:46:05:f0:e6:00:60:48:
26:98:be:43:85:db:26:bf:ab:9f:b6:ec:8a:f5:05:
09:b4:69:1a:b0:8e:c4:0a:81:09:6b:39:40:34:a0:
ac:35:18:3e:45:d1:ce:4f:f2:46:2c:5d:bb:9a:fd:
d1:01:12:ed:cc:3a:f0:9e:8f:99:2b:8f:98:f4:5b:
bb:11:14:6c:2b:6d:8f:ad:97:0f:bf:8a:3f:5c:61:
fa:42:99:8f:0c:05:af:4e:ee:58:90:d8:c5:8f:b0:
43:38:ab:09:19:4a:8f:73:cb:08:ca:97:c1:d1:ac:
f7:3d:e7:f9:94:71:73:0a:e3:9a:58:09:2f:59:2d:
fc:96:db:32:ef:e3:b0:e2:65:b9:49:c2:38:74:c3:
27:7f:3f:2f:93:ba:df:c3:b5:80:fe:8f:d1:0f:d8:
30:83:27:cb:01:e9:d1:96:73:b8:ce:c4:30:1b:59:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:5A:BD:DC:98:CB:21:5E:6B:5D:F1:08:A6:4C:EC:36:E4:D5:FC
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:f2:f2:9f:47:b7:1d:6e:2b:a8:96:54:93:0c:2c:0f:b0:
f8:1c:63:e1:b1:ea:dd:ad:2a:d3:ec:46:e1:93:40:fc:4b:a1:
aa:0e:c7:6f:4e:56:4a:45:eb:73:41:05:05:bc:2f:22:a1:79:
7e:ad:21:c0:ef:be:09:31:cf:7b:0e:68:86:74:e6:53:37:87:
88:54:81:df:7c:4e:69:56:ec:c8:7a:1a:3c:c2:49:4a:d1:7b:
4e:f7:47:09:66:2a:ed:d5:9e:ef:08:5c:d2:b8:f9:c6:ea:e3:
e4:4a:20:4c:f5:6a:a6:1f:a6:51:30:18:35:70:36:4e:ba:96:
46:b0:c7:ad:4a:88:1f:a5:07:06:61:c1:ac:5b:cf:f2:71:06:
db:c5:9d:12:3a:43:45:b7:c4:55:34:d9:03:92:ca:4a:ab:ce:
5f:9e:9f:2c:01:0c:0f:10:b9:ef:02:7f:ae:c8:a8:f9:b4:02:
ee:3a:03:8a:ff:af:c5:8d:35:9b:6c:45:34:27:57:a7:41:90:
20:29:ec:f8:fd:af:7e:8d:fd:4b:e1:b5:8d:39:62:fa:13:d1:
ed:d0:16:be:91:43:9f:0b:fa:08:89:23:02:11:87:e5:23:17:
e4:4b:d4:1c:a6:aa:28:88:e2:68:e5:c0:13:6e:94:a2:bc:c3:
68:ff:3a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAu96nvkG/5iptKGKQ4+F1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjZiYmYwZDQ1OTYyMzYyNmE5OWJiZTI0MjVlMDIwNzIw
OTBiNGYwHhcNMjYwODI3MDEwMDQ4WhcNMjYwODI4MDEwMDQ4WjAzMTEwLwYDVQQD
EygxYWVkNWFiZGRjOThjYjIxNWU2YjVkZjEwOGE2NGNlYzM2ZTRkNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDMmiMLCf1biPYMB08MYg7/ZYstH
zdGbEtAD6dft+gTYMmlLEWZkwZ+nu4RbDdBgqms931hC5apXnh+/hg6RNnyKvznt
yiluDIIE/SF35dAhL0YF8OYAYEgmmL5Dhdsmv6uftuyK9QUJtGkasI7ECoEJazlA
NKCsNRg+RdHOT/JGLF27mv3RARLtzDrwno+ZK4+Y9Fu7ERRsK22PrZcPv4o/XGH6
QpmPDAWvTu5YkNjFj7BDOKsJGUqPc8sIypfB0az3Pef5lHFzCuOaWAkvWS38ltsy
7+Ow4mW5ScI4dMMnfz8vk7rfw7WA/o/RD9gwgyfLAenRlnO4zsQwG1lLiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrtWr3cmMshXmtd8QimTOw25NX8MB8GA1UdIwQY
MBaAFNpmu/DUWWI2JqmbviQl4CByCQtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1hNzhOUlpZalltcVp1LUpDWGdJSElKQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNTA5YjUtMmEwMS00NTZkLWI0MTAt
NWE0NzFlZGI4MDE4LzEvMm1hNzhOUlpZalltcVp1LUpDWGdJSElKQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNTA5YjUtMmEwMS00NTZkLWI0MTAtNWE0NzFlZGI4MDE4
LzEvMm1hNzhOUlpZalltcVp1LUpDWGdJSElKQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfny8p9H
tx1uK6iWVJMMLA+w+Bxj4bHq3a0q0+xG4ZNA/Euhqg7Hb05WSkXrc0EFBbwvIqF5
fq0hwO++CTHPew5ohnTmUzeHiFSB33xOaVbsyHoaPMJJStF7TvdHCWYq7dWe7whc
0rj5xurj5EogTPVqph+mUTAYNXA2TrqWRrDHrUqIH6UHBmHBrFvP8nEG28WdEjpD
RbfEVTTZA5LKSqvOX56fLAEMDxC57wJ/rsio+bQC7joDiv+vxY01m2xFNCdXp0GQ
ICns+P2vfo39S+G1jTli+hPR7dAWvpFDnwv6CIkjAhGH5SMX5EvUHKaqKIjiaOXA
E26UorzDaP86XQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:57 2026 by rpki-client