Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
File: 2kwgul9abQ5TyOwNWhveygb6cKM.mft (raw, json)
Hash identifier: FIGHJf1RJdFaikOJqQb67ddrxU+j76WDQc8K61trqX4=
Subject key identifier: 17:C2:22:94:D2:65:D2:CC:B9:E2:DE:C1:E9:50:0F:6E:2E:16:13:2B
Authority key identifier: DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
Certificate issuer: /CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Certificate serial: 01A0EC9CD0B1F5D2035870165E1264FE873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
Manifest number: B8
Signing time: Tue 29 Sep 2026 10:01:34 +0000
Manifest this update: Tue 29 Sep 2026 10:01:34 +0000
Manifest next update: Wed 30 Sep 2026 10:01:34 +0000
Files and hashes: 1: 2kwgul9abQ5TyOwNWhveygb6cKM.crl (hash: 40Ur7952Oq9XUepfmf5s7SZGxKU+FDDr23qwApI5vI0=)
2: UzXtxDxgkbhFDH_EVPuNo0M10SA.roa (hash: FpOUcZwTu/CVw3/85q0MMvR2nT0K2SD9ZyPfseDyCxs=)
3: WT3vaOwOOseS7yID9cVyq57zIoI.asa (hash: vqCOF7NopSR2Vc1g5HAdbSGBQcXK00JYgksWrl2ekCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:d0:b1:f5:d2:03:58:70:16:5e:12:64:fe:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Validity
Not Before: Sep 29 10:01:34 2026 GMT
Not After : Sep 30 10:01:34 2026 GMT
Subject: CN=17c22294d265d2ccb9e2dec1e9500f6e2e16132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:0d:12:ed:9f:b5:33:da:87:e1:0a:b8:e6:
d2:c6:58:29:87:aa:fd:c1:7a:17:fb:39:a2:98:79:
01:bc:d3:8b:ab:8d:d4:54:b7:ca:94:e8:2c:6c:59:
bf:26:1c:f8:94:92:65:4a:a9:b7:2b:ba:f7:89:3d:
45:a4:57:f4:e2:11:db:03:47:91:af:12:37:d2:da:
5b:f0:83:79:bd:48:0f:cc:fb:cf:79:fb:e2:2f:41:
a9:19:28:fd:d8:37:19:c2:0f:33:69:aa:7f:d6:86:
27:4d:aa:b8:c8:8f:cc:c6:57:89:47:8d:b8:f0:4d:
a0:50:ee:9c:91:ac:d1:a2:3d:39:35:f8:64:2d:71:
b9:17:9c:21:05:f5:f7:17:6b:1c:90:b5:d6:ea:97:
1c:4d:79:ab:6c:a3:ec:da:cd:73:1f:e7:44:f8:5e:
c3:31:05:20:52:e6:d6:62:8b:c9:ff:59:de:21:f1:
f3:bf:5e:b0:35:e5:ca:a5:c0:62:1a:e1:be:7d:4d:
bb:b7:02:dd:74:85:78:ae:f9:0a:f7:ac:56:7c:e9:
cf:1f:0c:d0:6c:0d:5f:33:be:0c:b7:53:c8:bf:7b:
84:bb:55:49:b6:2b:9c:03:38:22:53:08:31:de:ad:
75:d7:37:a6:59:da:4c:55:d0:2f:a2:ea:3d:75:1f:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:22:94:D2:65:D2:CC:B9:E2:DE:C1:E9:50:0F:6E:2E:16:13:2B
X509v3 Authority Key Identifier:
keyid:DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:54:66:cb:42:ad:6e:db:3d:1f:0e:57:a9:f5:2d:28:b7:30:
17:a6:4f:d2:0e:a6:a5:74:95:61:17:f8:a8:c2:e1:1b:01:39:
7a:d6:92:b5:d7:c7:c7:bc:05:76:40:21:5e:21:8f:b4:31:e0:
5e:09:26:97:8c:3f:24:43:28:41:1a:28:f9:66:5b:46:db:2e:
c0:24:4e:26:d8:bf:06:6d:e1:c4:38:bb:a9:dc:2b:54:87:c2:
c4:b4:2f:23:72:0d:a1:98:0f:e4:e8:2e:a2:44:fd:16:48:3b:
3e:df:39:a7:7f:6b:e1:61:6b:7d:4f:bf:2d:b3:83:9f:90:c0:
61:a0:a8:93:d8:a6:c5:7d:82:45:42:31:95:c6:20:11:02:e8:
47:ff:0d:69:5e:48:73:30:c0:33:d6:77:ec:f2:d3:6c:3a:81:
81:ae:91:3a:2e:ed:6a:c3:8d:89:8f:75:01:e7:6c:0a:97:58:
25:04:fc:4f:9d:c7:ed:c6:74:10:24:22:71:68:5e:c4:2b:68:
6d:e6:18:9d:38:f7:81:7b:d3:aa:79:91:91:db:27:5e:f8:91:
b2:ff:4b:23:d1:3a:17:3b:41:ba:c5:5b:48:95:be:89:9b:0c:
75:a6:84:24:5c:29:04:9e:e1:0c:57:b3:fa:6e:1d:49:72:eb:
4c:5c:5b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsnNCx9dIDWHAWXhJk/oc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGMyMGJhNWY1YTZkMGU1M2M4ZWMwZDVhMWJkZWNhMDZm
YTcwYTMwHhcNMjYwOTI5MTAwMTM0WhcNMjYwOTMwMTAwMTM0WjAzMTEwLwYDVQQD
EygxN2MyMjI5NGQyNjVkMmNjYjllMmRlYzFlOTUwMGY2ZTJlMTYxMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD8NEu2ftTPah+EKuObSxlgph6r9
wXoX+zmimHkBvNOLq43UVLfKlOgsbFm/Jhz4lJJlSqm3K7r3iT1FpFf04hHbA0eR
rxI30tpb8IN5vUgPzPvPefviL0GpGSj92DcZwg8zaap/1oYnTaq4yI/MxleJR424
8E2gUO6ckazRoj05NfhkLXG5F5whBfX3F2sckLXW6pccTXmrbKPs2s1zH+dE+F7D
MQUgUubWYovJ/1neIfHzv16wNeXKpcBiGuG+fU27twLddIV4rvkK96xWfOnPHwzQ
bA1fM74Mt1PIv3uEu1VJtiucAzgiUwgx3q111zemWdpMVdAvouo9dR/dJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfCIpTSZdLMueLewelQD24uFhMrMB8GA1UdIwQY
MBaAFNpMILpfWm0OU8jsDVob3soG+nCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAt
NTViZTcwOTZkYmYwLzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAtNTViZTcwOTZkYmYw
LzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1Rmy0Kt
bts9Hw5XqfUtKLcwF6ZP0g6mpXSVYRf4qMLhGwE5etaStdfHx7wFdkAhXiGPtDHg
Xgkml4w/JEMoQRoo+WZbRtsuwCROJti/Bm3hxDi7qdwrVIfCxLQvI3INoZgP5Ogu
okT9Fkg7Pt85p39r4WFrfU+/LbODn5DAYaCok9imxX2CRUIxlcYgEQLoR/8NaV5I
czDAM9Z37PLTbDqBga6ROi7tasONiY91AedsCpdYJQT8T53H7cZ0ECQicWhexCto
beYYnTj3gXvTqnmRkdsnXviRsv9LI9E6FztBusVbSJW+iZsMdaaEJFwpBJ7hDFez
+m4dSXLrTFxb+A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:20:17 2026 by rpki-client