Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
File: 2kwgul9abQ5TyOwNWhveygb6cKM.mft (raw, json)
Hash identifier: g5gNbt3+wP3meGMX71pS+xoU8pCqtN64uBcueACb+2Y=
Subject key identifier: 5D:57:F7:E7:EC:D0:78:9F:DB:0A:96:D9:5C:AB:29:26:2A:5B:05:86
Authority key identifier: DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
Certificate issuer: /CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Certificate serial: 019FF9489B8502AC0411CF7B6C53745D8D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
Manifest number: 3A
Signing time: Thu 13 Aug 2026 04:01:52 +0000
Manifest this update: Thu 13 Aug 2026 04:01:52 +0000
Manifest next update: Fri 14 Aug 2026 04:01:52 +0000
Files and hashes: 1: 2kwgul9abQ5TyOwNWhveygb6cKM.crl (hash: JB8VixBSTa52eBbUSXRnzwcc7OOnMSXMJHlxVF4gLdM=)
2: UzXtxDxgkbhFDH_EVPuNo0M10SA.roa (hash: FpOUcZwTu/CVw3/85q0MMvR2nT0K2SD9ZyPfseDyCxs=)
3: WT3vaOwOOseS7yID9cVyq57zIoI.asa (hash: vqCOF7NopSR2Vc1g5HAdbSGBQcXK00JYgksWrl2ekCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:9b:85:02:ac:04:11:cf:7b:6c:53:74:5d:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Validity
Not Before: Aug 13 04:01:52 2026 GMT
Not After : Aug 14 04:01:52 2026 GMT
Subject: CN=5d57f7e7ecd0789fdb0a96d95cab29262a5b0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:b8:c5:28:09:51:c1:3f:c5:b6:3f:87:fb:
47:db:39:4c:bd:a0:ce:84:af:be:75:d1:5d:8b:1a:
18:0e:4e:1f:39:bf:55:d8:bc:9e:40:7c:be:4f:00:
5e:24:a5:d0:f9:42:f0:97:6f:82:89:bb:44:1b:b3:
bb:10:a3:47:24:a9:a6:5e:10:26:36:b6:a6:e8:67:
f8:76:59:81:e0:6c:8f:07:c6:c3:37:81:14:56:66:
90:b0:c7:8a:44:04:c4:93:4c:4e:8f:3a:16:ca:2b:
a9:69:41:8a:d1:49:42:c0:a4:84:6e:09:ba:23:2f:
4d:0c:05:bc:d4:b8:5f:fc:83:87:cc:92:5e:a3:77:
da:bb:3e:50:e6:57:7a:ad:a7:d4:2a:fe:1d:3b:00:
80:01:e5:db:a8:0b:41:59:4e:96:21:ca:fe:df:51:
ca:26:3d:da:f7:a6:db:27:08:66:82:00:85:b1:3f:
91:7f:c6:10:97:f3:7a:2e:08:bc:38:fe:56:12:67:
9b:38:fa:1d:aa:88:6c:ed:fd:5b:ab:fb:b0:31:ea:
5e:f6:21:02:cf:45:8a:0e:6c:67:a5:3d:22:95:84:
8a:83:fd:0c:24:f9:5c:7e:f8:50:52:8a:ce:af:1e:
ed:87:a2:bc:cb:7f:70:21:bd:bc:77:b5:d8:bd:24:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:57:F7:E7:EC:D0:78:9F:DB:0A:96:D9:5C:AB:29:26:2A:5B:05:86
X509v3 Authority Key Identifier:
keyid:DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ce:73:ac:2c:1c:53:26:fc:f3:2b:cc:0b:7d:dd:c6:80:85:
07:97:63:32:a5:c3:2d:9d:29:88:49:44:a7:bc:25:56:e1:1e:
e3:f3:66:47:6e:b7:69:0e:50:b7:1d:35:60:db:40:e0:0b:ad:
10:c7:4e:52:9d:09:ce:af:ad:91:0f:fb:ea:26:e6:98:54:60:
d6:46:6d:1b:7c:e4:46:d9:bc:01:9a:72:53:33:22:75:2c:6f:
11:39:38:e4:7d:8e:85:20:04:5a:33:6d:6a:bc:f3:5c:cd:75:
56:b7:dd:ad:d0:d4:9f:29:fd:cd:bf:1f:a2:ce:11:07:eb:8b:
06:13:ae:8a:61:b5:3b:9d:61:48:fc:1e:22:74:1e:53:7b:73:
35:9b:64:10:2d:bd:4b:2c:4c:3c:82:4a:53:04:98:c8:9d:d2:
4a:31:24:a7:5d:97:40:dc:af:dd:db:a9:1b:fd:c4:59:d7:9f:
70:b8:50:8f:67:b3:ad:78:cb:e1:0d:d7:1d:5d:6e:a5:09:0e:
59:df:7a:32:bc:8c:78:24:2b:03:78:8a:6b:65:83:57:a0:f2:
72:2d:48:ed:4f:a8:5a:0b:10:0f:10:31:87:63:77:e4:6e:e5:
f5:00:1a:c6:36:7c:ec:79:81:c6:a5:fc:1d:2d:dc:18:45:e5:
de:3d:af:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5SJuFAqwEEc97bFN0XY1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGMyMGJhNWY1YTZkMGU1M2M4ZWMwZDVhMWJkZWNhMDZm
YTcwYTMwHhcNMjYwODEzMDQwMTUyWhcNMjYwODE0MDQwMTUyWjAzMTEwLwYDVQQD
Eyg1ZDU3ZjdlN2VjZDA3ODlmZGIwYTk2ZDk1Y2FiMjkyNjJhNWIwNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ge4xSgJUcE/xbY/h/tH2zlMvaDO
hK++ddFdixoYDk4fOb9V2LyeQHy+TwBeJKXQ+ULwl2+CibtEG7O7EKNHJKmmXhAm
Nram6Gf4dlmB4GyPB8bDN4EUVmaQsMeKRATEk0xOjzoWyiupaUGK0UlCwKSEbgm6
Iy9NDAW81Lhf/IOHzJJeo3fauz5Q5ld6rafUKv4dOwCAAeXbqAtBWU6WIcr+31HK
Jj3a96bbJwhmggCFsT+Rf8YQl/N6Lgi8OP5WEmebOPodqohs7f1bq/uwMepe9iEC
z0WKDmxnpT0ilYSKg/0MJPlcfvhQUorOrx7th6K8y39wIb28d7XYvSRvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1X9+fs0Hif2wqW2VyrKSYqWwWGMB8GA1UdIwQY
MBaAFNpMILpfWm0OU8jsDVob3soG+nCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAt
NTViZTcwOTZkYmYwLzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMmRkOTctMDQ5My00YTVhLWE3MDAtNTViZTcwOTZkYmYw
LzEvMmt3Z3VsOWFiUTVUeU93TldodmV5Z2I2Y0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFs5zrCwc
Uyb88yvMC33dxoCFB5djMqXDLZ0piElEp7wlVuEe4/NmR263aQ5Qtx01YNtA4Aut
EMdOUp0Jzq+tkQ/76ibmmFRg1kZtG3zkRtm8AZpyUzMidSxvETk45H2OhSAEWjNt
arzzXM11VrfdrdDUnyn9zb8fos4RB+uLBhOuimG1O51hSPweInQeU3tzNZtkEC29
SyxMPIJKUwSYyJ3SSjEkp12XQNyv3dupG/3EWdefcLhQj2ezrXjL4Q3XHV1upQkO
Wd96MryMeCQrA3iKa2WDV6Dyci1I7U+oWgsQDxAxh2N35G7l9QAaxjZ87HmBxqX8
HS3cGEXl3j2vgg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:11 2026 by rpki-client