Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
File: 2DmRJrYFJVLagB0O5HosfDLnzbw.mft (raw, json)
Hash identifier: oMU0+07vzwTKK8uv2xy5mlGH+SM+Q1OSNWUlKdVDvKU=
Subject key identifier: 95:B0:F3:41:D8:9E:1E:76:A1:90:CC:BE:57:FA:B7:74:55:16:76:3E
Authority key identifier: D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
Certificate issuer: /CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Certificate serial: 01A04017159C0BD39E22EE754E1CE739F806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
Manifest number: 026E
Signing time: Wed 26 Aug 2026 22:00:49 +0000
Manifest this update: Wed 26 Aug 2026 22:00:49 +0000
Manifest next update: Thu 27 Aug 2026 22:00:49 +0000
Files and hashes: 1: 0zE3UfEHUEziOBAn5MV-3cMOfAI.roa (hash: C69mVu54AG+KnNmbROi8pSxGo/q1kcnt7UFnI0LaEzc=)
2: 2DmRJrYFJVLagB0O5HosfDLnzbw.crl (hash: 3x1HH+8/h1Bp0ifAWsKP9HrJ0SgXTLWtjgKrf1zJurA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:15:9c:0b:d3:9e:22:ee:75:4e:1c:e7:39:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Validity
Not Before: Aug 26 22:00:49 2026 GMT
Not After : Aug 27 22:00:49 2026 GMT
Subject: CN=95b0f341d89e1e76a190ccbe57fab7745516763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:fc:3c:d4:85:61:b9:9f:31:aa:0a:3b:85:
4e:27:90:ac:4c:76:ba:4e:9c:4f:89:3e:e7:6a:df:
86:53:60:70:fb:c9:63:c8:b6:ad:91:e1:3f:43:0e:
a0:e7:1a:58:88:c2:a1:9e:27:26:8d:67:ea:5f:e7:
86:85:ce:ae:eb:8a:a8:40:1b:3f:1d:01:bb:77:c6:
ca:ce:0d:30:95:19:c8:70:3e:d7:f0:98:fc:f7:a3:
83:a2:2a:b1:59:d0:53:36:47:a4:e8:b4:aa:8a:1f:
19:4d:d1:d0:85:04:f0:d5:90:1b:6b:e2:a6:ea:74:
8e:05:0f:31:23:fe:69:ce:80:58:66:df:4e:c7:5c:
9b:16:3c:01:23:f3:75:15:3d:c2:d4:b3:f6:b9:ff:
69:35:f4:f1:37:4d:dd:13:f9:e7:60:27:e0:8e:d3:
4a:69:cc:3a:a8:b0:a1:c3:0e:a6:d0:e0:1a:06:69:
15:21:4c:1e:c0:52:e7:9e:88:9d:b4:83:cb:10:6e:
00:72:b5:83:e0:cd:a3:e0:b3:fc:5a:47:a2:6b:11:
aa:52:a5:5a:ac:b9:dd:d4:f1:8b:6c:e5:11:13:4b:
78:6c:7e:c0:3a:62:a9:9c:29:6b:5c:20:08:49:f4:
00:63:9f:c2:35:02:1a:b3:34:27:cd:84:a1:e4:b0:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:F3:41:D8:9E:1E:76:A1:90:CC:BE:57:FA:B7:74:55:16:76:3E
X509v3 Authority Key Identifier:
keyid:D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:72:02:a8:7b:0b:29:08:18:c8:0f:9f:cf:13:e1:6f:07:
b9:04:cc:7b:cf:7c:58:fe:2e:b3:64:50:0c:73:15:eb:76:7b:
7a:29:d9:a8:1f:d1:f9:03:ea:5e:d5:b8:5b:df:48:41:ec:3b:
c1:e3:9e:8e:c7:7f:37:59:d9:b3:6b:60:53:c4:d1:e0:3c:7a:
5e:cf:6f:a0:19:cb:b0:20:35:f7:05:27:dc:cd:35:31:97:76:
1d:d2:df:41:9d:18:7c:ef:b0:58:cc:13:04:7e:36:da:70:a5:
bc:3c:21:a3:7d:86:03:9e:16:98:16:0f:2c:35:2f:13:a8:41:
15:13:c7:f9:6f:78:45:fa:f5:6f:d0:39:77:86:79:5c:78:9b:
0c:31:8e:22:4f:c4:d5:c8:21:df:c6:23:e6:70:8c:48:0f:22:
68:97:cd:84:38:58:51:3b:cf:3d:1a:1c:49:d4:b8:b1:e0:62:
0f:1c:49:55:5b:77:28:67:1c:36:34:b2:d6:00:ce:66:8b:d6:
cc:eb:75:94:fa:f7:e3:f5:97:9b:09:9d:d4:e7:e7:4a:5f:10:
a1:f5:11:39:6c:8e:46:0a:d7:2c:df:0a:e8:ff:46:9f:04:41:
8a:dd:98:f9:bf:b5:17:7d:c3:81:01:fc:3f:1a:dd:bc:08:a4:
19:20:e1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAFxWcC9OeIu51ThznOfgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mzk5MTI2YjYwNTI1NTJkYTgwMWQwZWU0N2EyYzdjMzJl
N2NkYmMwHhcNMjYwODI2MjIwMDQ5WhcNMjYwODI3MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg5NWIwZjM0MWQ4OWUxZTc2YTE5MGNjYmU1N2ZhYjc3NDU1MTY3NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6f8PNSFYbmfMaoKO4VOJ5CsTHa6
TpxPiT7nat+GU2Bw+8ljyLatkeE/Qw6g5xpYiMKhnicmjWfqX+eGhc6u64qoQBs/
HQG7d8bKzg0wlRnIcD7X8Jj896ODoiqxWdBTNkek6LSqih8ZTdHQhQTw1ZAba+Km
6nSOBQ8xI/5pzoBYZt9Ox1ybFjwBI/N1FT3C1LP2uf9pNfTxN03dE/nnYCfgjtNK
acw6qLChww6m0OAaBmkVIUwewFLnnoidtIPLEG4AcrWD4M2j4LP8WkeiaxGqUqVa
rLnd1PGLbOURE0t4bH7AOmKpnClrXCAISfQAY5/CNQIaszQnzYSh5LB8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWw80HYnh52oZDMvlf6t3RVFnY+MB8GA1UdIwQY
MBaAFNg5kSa2BSVS2oAdDuR6LHwy5828MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZGIxMGQtMGY0MC00MTUxLWFlMTct
YzFiNjIxNmI3MjY4LzEvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZGIxMGQtMGY0MC00MTUxLWFlMTctYzFiNjIxNmI3MjY4
LzEvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKhyAqh7
CykIGMgPn88T4W8HuQTMe898WP4us2RQDHMV63Z7einZqB/R+QPqXtW4W99IQew7
weOejsd/N1nZs2tgU8TR4Dx6Xs9voBnLsCA19wUn3M01MZd2HdLfQZ0YfO+wWMwT
BH422nClvDwho32GA54WmBYPLDUvE6hBFRPH+W94Rfr1b9A5d4Z5XHibDDGOIk/E
1cgh38Yj5nCMSA8iaJfNhDhYUTvPPRocSdS4seBiDxxJVVt3KGccNjSy1gDOZovW
zOt1lPr34/WXmwmd1OfnSl8QofUROWyORgrXLN8K6P9GnwRBit2Y+b+1F33DgQH8
PxrdvAikGSDhCw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:46 2026 by rpki-client