Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: v0rTmiGnriEcJqaro6tpLW69NQ7aWIUtSge/hqKT1jk=
Subject key identifier: 32:45:5C:0C:06:7B:73:01:9B:A9:6C:06:16:C9:C4:1B:FC:DD:A2:43
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01A186086B639009C35BEAFBDD4D8A9661AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1ADF
Signing time: Thu 29 Oct 2026 05:01:01 +0000
Manifest this update: Thu 29 Oct 2026 05:01:01 +0000
Manifest next update: Fri 30 Oct 2026 05:01:01 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: ICBOIEgrIvwqkp8+0A2b2Bu+uhe9B81EzVLlVY1GY3Q=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:6b:63:90:09:c3:5b:ea:fb:dd:4d:8a:96:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Oct 29 05:01:01 2026 GMT
Not After : Oct 30 05:01:01 2026 GMT
Subject: CN=32455c0c067b73019ba96c0616c9c41bfcdda243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:73:e2:5e:02:d9:f5:2c:ea:8d:ea:bd:11:
3f:f3:79:53:ab:c4:b1:3a:4e:5a:e7:37:92:ce:98:
1c:03:42:d2:15:be:40:09:0b:83:d9:ce:17:56:26:
ef:e8:03:0c:b9:3a:78:8b:87:8e:1f:a2:0b:3c:ac:
d6:e3:48:ad:21:3a:a5:0e:89:73:a5:05:ae:e9:cf:
12:c6:1e:75:e1:a7:4c:7a:dd:74:ef:14:3f:a0:63:
c3:b2:fc:21:79:21:13:e7:14:9e:f2:c6:94:29:1f:
14:70:70:90:d9:fe:aa:de:a9:64:d6:eb:50:39:13:
b5:de:12:65:ab:fd:1a:14:09:2d:ea:d0:d7:64:e0:
58:9c:04:b4:d9:32:28:89:a6:f1:6e:8e:7e:9e:44:
f7:16:2f:b7:73:46:3a:13:7c:34:26:04:8e:32:55:
12:be:bb:66:60:d7:6d:83:6a:4d:34:ff:2f:f5:cc:
c2:d4:2b:43:5f:6d:3e:b3:2b:08:0b:6a:0c:a1:3d:
65:77:ca:96:ce:34:ba:57:ac:93:a3:a3:88:dc:6a:
27:ac:b0:d2:48:1a:fc:46:9a:3f:66:9a:bb:94:cb:
51:84:68:10:a4:a3:b8:ee:a0:36:ad:63:3b:25:16:
89:b3:dd:aa:92:26:a5:0e:00:50:5f:b6:12:39:e3:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:5C:0C:06:7B:73:01:9B:A9:6C:06:16:C9:C4:1B:FC:DD:A2:43
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:51:5c:26:70:ff:af:79:3e:97:0c:cc:c1:d9:f6:d0:43:
3a:3b:47:0b:3d:e9:68:19:c8:ee:05:55:03:ec:e7:ac:45:29:
4a:92:f6:1a:7f:04:e0:56:45:be:f8:98:6d:8e:72:bb:0d:05:
a7:44:cb:4c:bf:c0:b5:66:fd:0f:a1:08:85:79:8d:a5:e7:53:
84:93:b7:de:b9:a5:3c:fb:44:2c:4c:f4:87:d9:89:cb:dd:d9:
66:d1:5c:57:ec:9e:6e:41:dd:c8:68:1d:22:6c:05:da:8a:db:
24:8e:5c:fb:e8:2a:ca:32:73:67:91:0f:2b:f8:5b:ff:1d:14:
05:a2:47:09:ef:a2:1a:22:6e:d3:64:96:00:19:98:c1:21:4f:
5e:06:2d:c5:77:c9:6f:2c:ae:e2:8b:4c:09:66:f5:d9:be:7b:
93:f7:b7:9e:a5:a0:d8:0a:7b:df:8f:fb:62:da:96:22:ff:2b:
74:24:f4:e2:2e:4b:63:62:f1:bf:08:f8:24:4a:4c:fc:ec:60:
cb:9d:93:f3:c7:5c:7e:e0:52:81:77:84:d2:8e:a7:b9:c7:be:
1b:4b:f3:3e:4e:23:44:02:71:13:35:dc:a9:42:ba:fa:b4:2d:
7e:be:b8:0d:22:80:a1:a7:a0:9a:e1:37:23:bc:91:4a:84:ae:
81:14:9e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCGtjkAnDW+r73U2KlmGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjYxMDI5MDUwMTAxWhcNMjYxMDMwMDUwMTAxWjAzMTEwLwYDVQQD
EygzMjQ1NWMwYzA2N2I3MzAxOWJhOTZjMDYxNmM5YzQxYmZjZGRhMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtFz4l4C2fUs6o3qvRE/83lTq8Sx
Ok5a5zeSzpgcA0LSFb5ACQuD2c4XVibv6AMMuTp4i4eOH6ILPKzW40itITqlDolz
pQWu6c8Sxh514adMet107xQ/oGPDsvwheSET5xSe8saUKR8UcHCQ2f6q3qlk1utQ
ORO13hJlq/0aFAkt6tDXZOBYnAS02TIoiabxbo5+nkT3Fi+3c0Y6E3w0JgSOMlUS
vrtmYNdtg2pNNP8v9czC1CtDX20+sysIC2oMoT1ld8qWzjS6V6yTo6OI3GonrLDS
SBr8Rpo/Zpq7lMtRhGgQpKO47qA2rWM7JRaJs92qkialDgBQX7YSOeOq/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJFXAwGe3MBm6lsBhbJxBv83aJDMB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaVRXCZw
/695PpcMzMHZ9tBDOjtHCz3paBnI7gVVA+znrEUpSpL2Gn8E4FZFvviYbY5yuw0F
p0TLTL/AtWb9D6EIhXmNpedThJO33rmlPPtELEz0h9mJy93ZZtFcV+yebkHdyGgd
ImwF2orbJI5c++gqyjJzZ5EPK/hb/x0UBaJHCe+iGiJu02SWABmYwSFPXgYtxXfJ
byyu4otMCWb12b57k/e3nqWg2Ap734/7YtqWIv8rdCT04i5LY2Lxvwj4JEpM/Oxg
y52T88dcfuBSgXeE0o6nuce+G0vzPk4jRAJxEzXcqUK6+rQtfr64DSKAoaegmuE3
I7yRSoSugRSe/g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:26 2026 by rpki-client