Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: 4nLHdMIXxhGUHAGfK1epfnWaCFZ7xaOD8RhVEA8e7gU=
Subject key identifier: 6D:75:40:B7:05:6A:A3:D2:7C:AE:75:18:82:5A:2D:93:06:8B:94:97
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01A13F0295AA5225D238BB290579D7FD6CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 198F
Signing time: Thu 15 Oct 2026 10:01:36 +0000
Manifest this update: Thu 15 Oct 2026 10:01:36 +0000
Manifest next update: Fri 16 Oct 2026 10:01:36 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: jAEl/NXLvxIFx5lNxpYu0JJV7N0WWNVXD7Cq4U6ozDE=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:95:aa:52:25:d2:38:bb:29:05:79:d7:fd:6c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Oct 15 10:01:36 2026 GMT
Not After : Oct 16 10:01:36 2026 GMT
Subject: CN=6d7540b7056aa3d27cae7518825a2d93068b9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:1c:2d:f2:0c:f5:9c:63:5f:fc:79:4c:a2:
09:d5:fa:1e:b3:dd:79:45:f4:a2:3c:be:73:b8:4c:
c5:bf:f6:81:f7:d0:bc:30:03:86:ca:d2:46:4f:47:
dc:5b:67:dd:c3:21:d6:a2:4b:27:a8:1b:c9:f2:48:
59:ab:b9:0e:40:6f:4c:16:0e:c9:3b:db:a2:5b:1d:
c8:e3:b3:8b:77:8d:93:9d:ba:df:44:84:d6:e0:85:
33:55:4f:d3:1f:e1:6d:8d:a6:a8:4a:ec:c8:97:2d:
c5:31:24:63:ac:95:4b:ae:66:60:04:f5:cf:4a:0f:
35:ff:af:55:74:0d:28:ff:9f:01:ab:85:e9:8c:75:
ea:28:21:fc:f4:f8:4c:b5:a4:62:a0:67:70:0d:95:
7e:63:36:ae:0e:eb:da:01:26:ec:ce:89:63:05:2a:
0b:c4:1e:30:9d:aa:de:41:18:de:39:30:3a:e0:ef:
c2:c1:5c:b4:c2:5b:16:cf:6f:d4:85:09:c0:85:47:
57:ad:52:8a:ca:ed:f2:5b:71:ee:d4:47:ad:b1:95:
3b:f4:23:af:d3:9c:70:14:2a:5b:e7:a4:7d:b5:09:
e8:dd:05:ff:07:50:d6:30:31:fe:2f:99:97:fb:b4:
6a:e0:a2:3e:fc:1d:5d:2f:b8:85:1a:33:c0:c1:ac:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:40:B7:05:6A:A3:D2:7C:AE:75:18:82:5A:2D:93:06:8B:94:97
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:36:a9:80:94:ee:dd:76:73:e5:25:6d:8b:7a:6c:4b:ce:
8d:58:6f:c5:5e:55:41:a8:5e:01:80:6d:c2:65:e7:0c:41:04:
a4:86:d3:9a:a9:8d:7b:6d:0d:0f:84:74:52:3d:75:8a:c2:18:
07:5f:99:61:98:cd:ec:7e:33:b6:e1:96:8f:09:62:1c:c0:42:
1a:9f:e2:c1:1f:20:72:37:e1:84:46:a3:a7:94:0e:9e:78:dc:
1c:c0:ee:2e:6f:34:54:d8:c0:51:3d:55:39:ee:2b:01:82:58:
c4:fc:25:c2:83:88:c1:d6:32:51:c3:aa:9b:2a:0f:8b:9f:42:
9d:30:56:25:eb:a1:0c:f3:bf:ae:31:d1:ca:b9:36:69:7d:75:
32:43:ad:86:4c:11:35:0b:76:68:d1:f0:52:84:19:7f:c9:be:
a1:d8:1f:16:46:27:48:b9:fc:fa:58:bf:f1:83:d1:3d:cf:2b:
26:b1:3b:bb:ed:4c:03:57:c6:45:3a:76:bf:ce:28:90:65:2f:
c1:09:4b:21:f3:81:a4:c2:71:61:20:6b:82:40:eb:2e:f4:c6:
5e:7c:d5:60:8e:fb:60:51:9d:ef:80:09:5d:fb:55:18:b0:02:
82:b0:45:a0:cf:56:32:85:7d:e7:23:b3:da:e2:23:75:48:60:
e3:17:67:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/ApWqUiXSOLspBXnX/Wz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjYxMDE1MTAwMTM2WhcNMjYxMDE2MTAwMTM2WjAzMTEwLwYDVQQD
Eyg2ZDc1NDBiNzA1NmFhM2QyN2NhZTc1MTg4MjVhMmQ5MzA2OGI5NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gscLfIM9ZxjX/x5TKIJ1foes915
RfSiPL5zuEzFv/aB99C8MAOGytJGT0fcW2fdwyHWoksnqBvJ8khZq7kOQG9MFg7J
O9uiWx3I47OLd42TnbrfRITW4IUzVU/TH+FtjaaoSuzIly3FMSRjrJVLrmZgBPXP
Sg81/69VdA0o/58Bq4XpjHXqKCH89PhMtaRioGdwDZV+YzauDuvaASbszoljBSoL
xB4wnareQRjeOTA64O/CwVy0wlsWz2/UhQnAhUdXrVKKyu3yW3Hu1EetsZU79COv
05xwFCpb56R9tQno3QX/B1DWMDH+L5mX+7Rq4KI+/B1dL7iFGjPAwaxA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG11QLcFaqPSfK51GIJaLZMGi5SXMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZU2qYCU
7t12c+UlbYt6bEvOjVhvxV5VQaheAYBtwmXnDEEEpIbTmqmNe20ND4R0Uj11isIY
B1+ZYZjN7H4ztuGWjwliHMBCGp/iwR8gcjfhhEajp5QOnnjcHMDuLm80VNjAUT1V
Oe4rAYJYxPwlwoOIwdYyUcOqmyoPi59CnTBWJeuhDPO/rjHRyrk2aX11MkOthkwR
NQt2aNHwUoQZf8m+odgfFkYnSLn8+li/8YPRPc8rJrE7u+1MA1fGRTp2v84okGUv
wQlLIfOBpMJxYSBrgkDrLvTGXnzVYI77YFGd74AJXftVGLACgrBFoM9WMoV95yOz
2uIjdUhg4xdnpw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:16 2026 by rpki-client