Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: drMLEkLUOOF71fFRkeqz2+ksr6xfNCV1E1WCS3jJDGM=
Subject key identifier: C6:C9:39:B7:DC:6A:48:7B:81:08:73:09:0E:B9:EE:0A:D3:6F:12:8A
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 01A13DB7DDE1246610AC28043ACC4489C174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:22 +0000
Manifest this update: Thu 15 Oct 2026 04:00:22 +0000
Manifest next update: Fri 16 Oct 2026 04:00:22 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: hCepvyc0CR82hPhviqX2ONz8lt9dlJcyOLdyGguqBjU=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:dd:e1:24:66:10:ac:28:04:3a:cc:44:89:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Oct 15 04:00:22 2026 GMT
Not After : Oct 16 04:00:22 2026 GMT
Subject: CN=c6c939b7dc6a487b810873090eb9ee0ad36f128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:7d:30:e7:22:ad:77:64:85:cf:42:51:4a:
13:04:77:05:9f:fa:b1:2b:87:e6:44:f7:ea:6c:88:
d8:cd:c3:33:3f:0d:3e:42:76:ef:70:0f:b0:e5:b3:
2f:75:54:61:a0:f8:e2:67:38:97:50:45:30:49:8a:
3b:7b:ea:aa:80:13:c5:31:1d:bc:b5:8b:a1:00:c0:
13:7d:97:67:8d:53:04:23:01:6f:9d:6c:57:bb:f8:
83:e2:24:0f:df:34:69:01:0e:7a:a9:4e:5b:30:32:
9e:6a:2b:0e:aa:60:8c:0b:91:00:d2:1a:9b:22:36:
26:3f:a0:48:69:b1:65:86:4f:3a:0a:99:ef:81:d8:
24:41:43:ee:c4:21:d8:26:6c:8f:36:9a:57:d6:ed:
da:8c:fd:01:9c:7a:f0:e7:5b:ca:c7:cc:c7:f8:3b:
24:48:38:d5:1c:6e:08:96:0b:cc:9a:c2:48:c7:72:
4d:ae:3e:9a:a8:d1:e0:6e:9f:30:a8:09:9f:09:d9:
15:84:d1:16:57:32:43:85:6c:b6:08:08:c4:bd:5b:
e0:a2:66:56:eb:99:c8:f2:a2:a3:52:93:02:e6:e3:
30:7e:93:ad:6c:aa:cb:b8:a4:54:80:9c:14:3c:55:
ee:aa:31:b1:43:0a:cb:65:59:d5:24:4a:84:ce:a7:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:39:B7:DC:6A:48:7B:81:08:73:09:0E:B9:EE:0A:D3:6F:12:8A
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:92:78:d4:51:0d:b6:d8:da:09:ab:bc:26:b3:e4:58:74:17:
84:d7:07:33:77:c8:84:1c:1a:e6:cb:3e:5d:1d:c1:22:f4:30:
c8:70:03:ca:49:6f:a3:09:a8:37:bb:8f:79:45:2e:df:a2:3a:
ad:a2:35:f5:27:66:86:ba:36:02:b9:8b:a3:81:f5:d6:23:95:
95:75:e6:86:c6:d9:44:56:4c:d7:13:24:06:f5:14:dd:d8:25:
b6:f5:ec:87:10:79:90:01:04:c0:bb:3c:55:23:88:1d:19:e5:
15:bd:51:d5:53:79:b9:89:57:4d:a8:04:28:b9:bf:7a:86:27:
da:13:bf:10:ea:3c:fa:39:78:f5:e6:ed:d8:1d:2a:d9:52:91:
c6:d0:67:83:4c:bc:9f:35:2c:b8:45:07:33:21:f9:a8:35:bb:
27:a8:81:eb:20:eb:e9:3e:d4:64:50:32:b5:d2:db:f0:f9:1a:
51:f4:14:88:c8:89:7f:ec:cf:fe:c4:fc:c2:21:b5:c4:04:55:
bc:d4:d1:43:30:f9:f0:b1:f8:bd:f1:82:e0:a2:d4:91:2d:d0:
f3:9f:fd:df:15:fc:ee:de:84:1d:45:78:d8:2b:f4:89:99:9b:
53:37:95:c3:4c:00:7d:91:ac:f4:10:d2:1d:39:a5:10:86:6d:
c9:4f:6a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t93hJGYQrCgEOsxEicF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjVhNjZjZmQyMWE1Y2FkN2EyOWI4ZWI1Y2Q5MmFhNDYw
MzIwYzMwHhcNMjYxMDE1MDQwMDIyWhcNMjYxMDE2MDQwMDIyWjAzMTEwLwYDVQQD
EyhjNmM5MzliN2RjNmE0ODdiODEwODczMDkwZWI5ZWUwYWQzNmYxMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslN9MOcirXdkhc9CUUoTBHcFn/qx
K4fmRPfqbIjYzcMzPw0+QnbvcA+w5bMvdVRhoPjiZziXUEUwSYo7e+qqgBPFMR28
tYuhAMATfZdnjVMEIwFvnWxXu/iD4iQP3zRpAQ56qU5bMDKeaisOqmCMC5EA0hqb
IjYmP6BIabFlhk86CpnvgdgkQUPuxCHYJmyPNppX1u3ajP0BnHrw51vKx8zH+Dsk
SDjVHG4IlgvMmsJIx3JNrj6aqNHgbp8wqAmfCdkVhNEWVzJDhWy2CAjEvVvgomZW
65nI8qKjUpMC5uMwfpOtbKrLuKRUgJwUPFXuqjGxQwrLZVnVJEqEzqfy5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbJObfcakh7gQhzCQ657grTbxKKMB8GA1UdIwQY
MBaAFNj1pmz9IaXK16KbjrXNkqpGAyDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTct
ODIxMGRiNzA0OWIxLzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTctODIxMGRiNzA0OWIx
LzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJJ41FEN
ttjaCau8JrPkWHQXhNcHM3fIhBwa5ss+XR3BIvQwyHADyklvowmoN7uPeUUu36I6
raI19Sdmhro2ArmLo4H11iOVlXXmhsbZRFZM1xMkBvUU3dgltvXshxB5kAEEwLs8
VSOIHRnlFb1R1VN5uYlXTagEKLm/eoYn2hO/EOo8+jl49ebt2B0q2VKRxtBng0y8
nzUsuEUHMyH5qDW7J6iB6yDr6T7UZFAytdLb8PkaUfQUiMiJf+zP/sT8wiG1xARV
vNTRQzD58LH4vfGC4KLUkS3Q85/93xX87t6EHUV42Cv0iZmbUzeVw0wAfZGs9BDS
HTmlEIZtyU9qww==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:00 2026 by rpki-client