Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: DB/qyu1f24SXRHm1uPP+ddyEfyChyV8Mrn3PWf43Rxo=
Subject key identifier: 00:8D:75:BC:51:20:58:52:CF:FE:AE:97:40:F3:B0:36:EB:35:17:EB
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01A111BC6CB197174C012E3C5DB64F727F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1967
Signing time: Tue 06 Oct 2026 15:02:03 +0000
Manifest this update: Tue 06 Oct 2026 15:02:03 +0000
Manifest next update: Wed 07 Oct 2026 15:02:03 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: DkcybyVRQXGaTn6PPMnz8aikWD7823kIeMf8j0Ju+2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:6c:b1:97:17:4c:01:2e:3c:5d:b6:4f:72:7f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Oct 6 15:02:03 2026 GMT
Not After : Oct 7 15:02:03 2026 GMT
Subject: CN=008d75bc51205852cffeae9740f3b036eb3517eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:76:0c:cc:5f:63:d5:4e:37:53:11:27:1d:
f7:8a:de:28:7e:35:0c:aa:dc:46:ad:c2:d9:d2:ce:
be:64:9d:3d:7f:29:0c:89:a5:00:76:40:25:e2:90:
12:7d:99:41:d5:25:6e:7f:c3:1a:9e:19:bd:76:76:
27:34:27:44:db:bc:dd:3f:ff:f4:22:10:2b:e3:9b:
b1:a5:f8:cc:d3:6d:c4:48:08:c9:36:7b:80:b1:af:
da:d5:c5:cd:65:4b:aa:78:64:1f:b9:9c:c0:01:3e:
ba:3d:28:e1:31:bf:f1:22:a4:27:9d:6c:cf:f0:da:
50:90:e3:fe:5a:7f:2e:55:40:32:8b:8e:2f:ce:6a:
b1:97:a6:cc:0c:c8:69:a1:bc:f7:37:ef:14:7c:ed:
8a:e9:19:2d:ba:70:b2:4d:5d:4f:92:d9:11:0f:99:
8d:3d:cf:79:80:ad:dd:21:9a:43:e5:1b:45:1b:19:
72:6c:73:ae:15:9b:3a:63:88:0a:29:ba:99:cc:5e:
33:41:e9:a2:76:8b:79:38:0e:d0:5d:1a:c8:be:b8:
8c:44:10:7f:68:5b:bc:e5:6f:6b:f4:de:13:52:0f:
3a:40:81:47:d0:80:c9:85:03:7a:2b:c2:ab:2c:14:
d7:7f:50:de:2e:28:59:d7:81:2a:3b:83:10:72:99:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:75:BC:51:20:58:52:CF:FE:AE:97:40:F3:B0:36:EB:35:17:EB
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2c:43:b5:45:ba:fe:23:98:38:22:bd:e6:c7:9d:6a:8a:b2:
4f:07:72:db:ac:db:11:27:22:5f:eb:4f:02:ae:ec:5d:0b:ba:
f0:40:ad:42:fe:0a:88:c9:17:f3:82:0c:be:06:b0:e5:9c:a6:
d1:93:52:47:d2:de:b6:34:65:56:a2:5e:71:35:76:8d:70:dc:
92:e7:a4:16:24:b2:13:1c:30:4c:da:a8:5c:02:9e:33:b5:4f:
cf:98:6d:cf:b6:05:62:c4:b6:32:3b:f7:b3:ee:fc:8a:33:13:
e2:b2:14:3f:8e:38:27:22:30:ff:1d:f3:7f:a7:05:ae:98:4c:
c2:af:8e:fe:c5:f5:9d:a4:a0:99:d3:b8:ee:6c:08:7c:1d:1f:
f6:46:96:f5:0e:8e:9f:f0:c2:fb:2e:d8:56:de:c8:b6:ad:4b:
19:13:22:ad:b3:29:c0:64:11:8a:d7:c2:c3:fb:13:68:40:43:
3c:24:59:e6:80:d7:ac:7a:ee:af:6d:4c:88:ae:b0:50:11:9a:
4f:a5:f6:ee:a6:a2:b2:7d:66:aa:84:d0:c1:ea:8d:52:6b:94:
a9:bf:72:d4:ea:b5:10:4e:69:be:be:e9:a2:a1:55:2a:63:19:
91:85:20:14:9b:dd:9f:5d:cd:c6:95:a6:77:b9:f5:55:67:82:
41:ae:30:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERvGyxlxdMAS48XbZPcn+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjYxMDA2MTUwMjAzWhcNMjYxMDA3MTUwMjAzWjAzMTEwLwYDVQQD
EygwMDhkNzViYzUxMjA1ODUyY2ZmZWFlOTc0MGYzYjAzNmViMzUxN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3F2DMxfY9VON1MRJx33it4ofjUM
qtxGrcLZ0s6+ZJ09fykMiaUAdkAl4pASfZlB1SVuf8Manhm9dnYnNCdE27zdP//0
IhAr45uxpfjM023ESAjJNnuAsa/a1cXNZUuqeGQfuZzAAT66PSjhMb/xIqQnnWzP
8NpQkOP+Wn8uVUAyi44vzmqxl6bMDMhpobz3N+8UfO2K6RktunCyTV1PktkRD5mN
Pc95gK3dIZpD5RtFGxlybHOuFZs6Y4gKKbqZzF4zQemidot5OA7QXRrIvriMRBB/
aFu85W9r9N4TUg86QIFH0IDJhQN6K8KrLBTXf1DeLihZ14EqO4MQcpmtgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACNdbxRIFhSz/6ul0DzsDbrNRfrMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSxDtUW6
/iOYOCK95sedaoqyTwdy26zbESciX+tPAq7sXQu68ECtQv4KiMkX84IMvgaw5Zym
0ZNSR9LetjRlVqJecTV2jXDckuekFiSyExwwTNqoXAKeM7VPz5htz7YFYsS2Mjv3
s+78ijMT4rIUP444JyIw/x3zf6cFrphMwq+O/sX1naSgmdO47mwIfB0f9kaW9Q6O
n/DC+y7YVt7Itq1LGRMirbMpwGQRitfCw/sTaEBDPCRZ5oDXrHrur21MiK6wUBGa
T6X27qaisn1mqoTQweqNUmuUqb9y1Oq1EE5pvr7poqFVKmMZkYUgFJvdn13NxpWm
d7n1VWeCQa4wyg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:14:59 2026 by rpki-client