Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: /nionSwOTKuv0mLwunvMdvm07wWRLeLgKH4q9x597O8=
Subject key identifier: 00:C3:A9:C3:A5:57:AB:10:87:0E:D6:92:FE:96:1E:8B:90:C8:74:C0
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 01A1152B0AB28E5CC9F76E86E0BC94CE73EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 09B0
Signing time: Wed 07 Oct 2026 07:01:44 +0000
Manifest this update: Wed 07 Oct 2026 07:01:44 +0000
Manifest next update: Thu 08 Oct 2026 07:01:44 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: EWIOgFAruE2Bv4Ay9190QttKQTXnq2OxDbAT5/19MQE=)
2: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (hash: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2b:0a:b2:8e:5c:c9:f7:6e:86:e0:bc:94:ce:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Oct 7 07:01:44 2026 GMT
Not After : Oct 8 07:01:44 2026 GMT
Subject: CN=00c3a9c3a557ab10870ed692fe961e8b90c874c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:53:02:1b:7c:78:46:f0:46:e3:3a:e6:19:
2a:1a:68:ba:29:c3:68:33:f6:a5:8b:ee:45:ed:69:
79:77:56:9b:47:cc:87:03:80:a9:40:8d:bc:5c:9b:
62:9b:92:ee:07:48:3d:a1:90:da:2c:2b:00:2b:3e:
ac:62:b8:c6:8a:94:1c:56:14:91:5d:2a:1e:b5:40:
a8:b6:f4:51:82:53:d4:86:4a:05:c4:91:ee:44:ba:
2b:36:c1:2e:61:35:58:59:79:73:86:2a:2a:0e:e0:
82:10:bb:6d:ff:02:c6:42:8b:3c:b2:2e:d0:33:1a:
f3:75:e8:67:33:32:9c:36:fb:1d:c0:59:b7:38:1a:
38:2d:4c:6f:64:93:d8:3c:35:cb:11:ab:8c:85:ea:
df:a1:46:75:55:29:a9:38:ba:68:7a:69:00:4c:32:
09:c7:bb:67:e7:b0:78:61:30:5a:10:cb:44:5e:4b:
71:b5:dc:1b:3d:d1:8f:5e:71:87:81:3e:e7:90:43:
4f:21:83:6f:b6:cf:86:f2:f1:fe:6d:13:be:44:de:
92:6c:91:0a:45:18:93:5f:8b:e9:0a:0d:f3:86:01:
cd:cb:df:32:f8:c6:ab:95:d7:26:39:0d:8a:fb:f1:
57:f0:ec:b3:c6:13:10:0e:96:48:bc:d8:50:80:19:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:A9:C3:A5:57:AB:10:87:0E:D6:92:FE:96:1E:8B:90:C8:74:C0
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ad:c5:02:71:6a:07:c8:a6:52:21:c4:f1:18:1e:7b:20:21:
6d:e6:7c:19:79:52:a8:57:f8:8b:0c:cd:72:ad:66:5b:ed:39:
16:a8:83:88:02:d7:91:88:e8:f0:b8:66:17:44:04:fe:82:28:
2b:ce:49:f0:ce:de:1c:cc:64:c4:b2:df:85:5d:02:1a:41:6d:
92:09:cf:3d:36:d2:4d:ba:37:f2:29:15:d6:1b:5e:e6:2d:4a:
48:7c:35:6d:2f:16:4e:24:f5:73:56:5b:fd:52:42:a7:ea:30:
64:d0:45:51:dc:20:5e:07:0d:88:cc:a2:ba:d6:f9:17:35:89:
17:bc:47:94:02:b7:31:ed:46:a3:2b:fc:8b:e9:e9:7c:e0:7c:
16:58:ef:2a:9d:5d:99:69:ad:5c:d0:ed:70:b9:3a:b6:04:1d:
4a:41:1a:7d:c7:9e:13:42:5b:5e:f2:d9:f7:e1:68:fa:41:97:
b2:29:12:8c:8d:65:93:26:c8:81:e7:0f:17:8b:53:4d:df:de:
c5:be:b2:fb:3b:1e:a1:30:2d:ef:dd:99:14:09:98:72:45:fc:
ce:50:f2:b5:54:7b:9d:09:c3:e7:a7:d7:0e:5b:c5:b8:a7:6a:
f7:c9:12:77:cc:36:94:03:de:59:ec:76:6c:ff:79:e0:04:99:
13:08:20:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVKwqyjlzJ926G4LyUznPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjYxMDA3MDcwMTQ0WhcNMjYxMDA4MDcwMTQ0WjAzMTEwLwYDVQQD
EygwMGMzYTljM2E1NTdhYjEwODcwZWQ2OTJmZTk2MWU4YjkwYzg3NGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriFTAht8eEbwRuM65hkqGmi6KcNo
M/ali+5F7Wl5d1abR8yHA4CpQI28XJtim5LuB0g9oZDaLCsAKz6sYrjGipQcVhSR
XSoetUCotvRRglPUhkoFxJHuRLorNsEuYTVYWXlzhioqDuCCELtt/wLGQos8si7Q
MxrzdehnMzKcNvsdwFm3OBo4LUxvZJPYPDXLEauMherfoUZ1VSmpOLpoemkATDIJ
x7tn57B4YTBaEMtEXktxtdwbPdGPXnGHgT7nkENPIYNvts+G8vH+bRO+RN6SbJEK
RRiTX4vpCg3zhgHNy98y+MarldcmOQ2K+/FX8OyzxhMQDpZIvNhQgBkpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADDqcOlV6sQhw7Wkv6WHouQyHTAMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa63FAnFq
B8imUiHE8RgeeyAhbeZ8GXlSqFf4iwzNcq1mW+05FqiDiALXkYjo8LhmF0QE/oIo
K85J8M7eHMxkxLLfhV0CGkFtkgnPPTbSTbo38ikV1hte5i1KSHw1bS8WTiT1c1Zb
/VJCp+owZNBFUdwgXgcNiMyiutb5FzWJF7xHlAK3Me1Goyv8i+npfOB8FljvKp1d
mWmtXNDtcLk6tgQdSkEafceeE0JbXvLZ9+Fo+kGXsikSjI1lkybIgecPF4tTTd/e
xb6y+zseoTAt792ZFAmYckX8zlDytVR7nQnD56fXDlvFuKdq98kSd8w2lAPeWex2
bP954ASZEwggFQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:20:06 2026 by rpki-client