Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: nG3QvLN1mTg3GYH4Xknud3XGk0Sm5qL4KZTqJ/pX5K8=
Subject key identifier: CD:AC:6E:57:F4:B5:C8:F5:00:5E:63:64:B3:F6:79:74:36:A4:98:95
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01A13E25B1729FBAFA936690D958ADEC4DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 17AC
Signing time: Thu 15 Oct 2026 06:00:19 +0000
Manifest this update: Thu 15 Oct 2026 06:00:19 +0000
Manifest next update: Fri 16 Oct 2026 06:00:19 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: CJ5ZAbP4dth9sRquJYFt3VpiIO/xGK0FB4aEyVBvoY8=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:b1:72:9f:ba:fa:93:66:90:d9:58:ad:ec:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Oct 15 06:00:19 2026 GMT
Not After : Oct 16 06:00:19 2026 GMT
Subject: CN=cdac6e57f4b5c8f5005e6364b3f6797436a49895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:31:9f:dd:ac:b3:53:f4:e2:60:c5:3c:73:
6e:c4:73:42:47:0a:24:b7:ca:b0:38:f6:35:8b:d5:
ff:3d:04:7d:75:80:af:df:8c:0f:86:aa:1e:78:06:
0e:89:9c:8f:3c:cc:63:b7:ca:6a:2f:af:ae:50:40:
8d:dc:27:c1:5f:83:44:97:ff:12:44:33:5a:e0:49:
6c:04:65:73:35:0a:66:7b:a8:3d:6d:23:9f:ad:71:
66:a9:c4:f4:b9:a1:d1:50:64:f1:a1:e5:b2:51:27:
e7:b3:0b:6b:9b:18:f3:d4:a8:e1:29:fa:21:e9:9b:
79:4c:7a:83:ed:fd:ea:05:10:e9:5e:c8:9d:e4:9c:
dc:a8:1a:82:77:40:42:89:c8:41:e7:93:f1:2d:7a:
69:64:1e:f9:f6:34:75:aa:a0:6b:75:49:23:59:71:
7a:a2:ec:a2:b7:a8:82:39:d4:98:1d:dd:a9:ea:80:
cd:ff:3c:67:db:50:a6:99:16:2a:e3:55:0f:58:9c:
7b:8c:f1:d7:c5:e1:45:99:cb:85:cb:f9:8d:5f:17:
7d:d5:77:62:aa:a9:93:8e:df:13:9c:ae:8a:46:ff:
d6:4b:fa:22:81:28:3d:8a:bf:27:1e:76:1b:9b:4c:
42:8e:ce:19:67:49:e5:6c:86:d3:2a:65:ee:a0:82:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:6E:57:F4:B5:C8:F5:00:5E:63:64:B3:F6:79:74:36:A4:98:95
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:32:2e:ef:50:d2:9d:f3:80:15:73:5d:26:5b:e9:ab:d0:
9a:b9:fb:12:0a:65:13:f5:38:00:4e:32:a1:2e:2e:a5:ac:1a:
78:6c:28:9f:90:8f:e7:57:7b:30:0d:1f:d4:b4:da:50:d7:6f:
9f:39:fa:af:f5:3d:67:ce:1d:ad:18:5f:f3:d4:c3:81:8f:ff:
2c:d4:2f:5b:18:da:5f:af:38:50:bf:10:a1:ea:47:00:63:20:
7d:82:84:2e:59:9c:99:2f:23:12:7a:ec:06:14:77:c0:67:95:
40:dd:7b:3e:dc:e5:14:ff:c6:f7:27:ce:79:4d:b0:88:6a:30:
d5:dc:30:90:20:76:39:c4:2b:3b:0a:4f:46:93:35:f4:0a:9d:
76:34:db:ec:2d:d0:65:03:e7:ea:28:a8:9c:4e:e2:4b:88:1b:
60:fa:08:21:bb:79:5a:6f:0e:64:9a:ca:dc:dc:00:c5:b4:c4:
04:bc:88:26:3e:55:bc:de:bc:a4:3a:37:8f:3d:35:92:4d:3c:
26:19:68:8c:a1:f3:b6:92:43:b1:74:59:7d:67:34:da:56:f5:
df:08:6c:93:51:a0:bd:7b:8e:67:f8:b0:0a:f8:b1:f7:32:c4:
3a:d4:90:81:9a:f4:71:b8:0b:37:e3:6a:45:b4:32:52:ad:bd:
ee:a0:00:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JbFyn7r6k2aQ2Vit7E2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjYxMDE1MDYwMDE5WhcNMjYxMDE2MDYwMDE5WjAzMTEwLwYDVQQD
EyhjZGFjNmU1N2Y0YjVjOGY1MDA1ZTYzNjRiM2Y2Nzk3NDM2YTQ5ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzosxn92ss1P04mDFPHNuxHNCRwok
t8qwOPY1i9X/PQR9dYCv34wPhqoeeAYOiZyPPMxjt8pqL6+uUECN3CfBX4NEl/8S
RDNa4ElsBGVzNQpme6g9bSOfrXFmqcT0uaHRUGTxoeWyUSfnswtrmxjz1KjhKfoh
6Zt5THqD7f3qBRDpXsid5JzcqBqCd0BCichB55PxLXppZB759jR1qqBrdUkjWXF6
ouyit6iCOdSYHd2p6oDN/zxn21CmmRYq41UPWJx7jPHXxeFFmcuFy/mNXxd91Xdi
qqmTjt8TnK6KRv/WS/oigSg9ir8nHnYbm0xCjs4ZZ0nlbIbTKmXuoIJw4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2sblf0tcj1AF5jZLP2eXQ2pJiVMB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+8yLu9Q
0p3zgBVzXSZb6avQmrn7EgplE/U4AE4yoS4upawaeGwon5CP51d7MA0f1LTaUNdv
nzn6r/U9Z84drRhf89TDgY//LNQvWxjaX684UL8QoepHAGMgfYKELlmcmS8jEnrs
BhR3wGeVQN17PtzlFP/G9yfOeU2wiGow1dwwkCB2OcQrOwpPRpM19AqddjTb7C3Q
ZQPn6iionE7iS4gbYPoIIbt5Wm8OZJrK3NwAxbTEBLyIJj5VvN68pDo3jz01kk08
JhlojKHztpJDsXRZfWc02lb13whsk1GgvXuOZ/iwCvix9zLEOtSQgZr0cbgLN+Nq
RbQyUq297qAAWQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:49 2026 by rpki-client