Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: E0CSMJb/jqsWv5m2hmzLkCt0KKLEh0VsM+2EWlAoxrU=
Subject key identifier: D0:96:FA:0C:25:ED:57:F6:D4:B3:6D:19:E1:39:E5:19:69:CD:66:97
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 01A1396D9A4F4891C66BF8A0530D299C8C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 08:00:46 +0000
Manifest this update: Wed 14 Oct 2026 08:00:46 +0000
Manifest next update: Thu 15 Oct 2026 08:00:46 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: k0cv5NwWKb/jiikfEw5Nby11DSfEIO6C54LdzDOBNY8=)
2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:9a:4f:48:91:c6:6b:f8:a0:53:0d:29:9c:8c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Oct 14 08:00:46 2026 GMT
Not After : Oct 15 08:00:46 2026 GMT
Subject: CN=d096fa0c25ed57f6d4b36d19e139e51969cd6697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:14:87:7b:eb:15:44:78:5b:8b:de:c6:68:
47:7c:dd:54:14:50:cf:2e:b2:65:10:c1:1c:c7:38:
0c:37:0f:dc:70:fb:74:27:f3:92:34:c1:a7:77:35:
dd:f9:3f:a6:ca:a1:c8:d9:38:8f:69:6d:27:a8:67:
80:56:27:87:d2:78:23:fa:20:6e:c0:ce:11:3f:f6:
60:0f:59:fc:4b:02:e0:9a:74:9c:4f:8f:7a:c4:1a:
38:81:b2:07:98:f8:69:05:92:73:a0:b6:f7:fb:f6:
9a:48:3f:a0:af:87:b1:e4:86:41:44:f9:e8:ac:cd:
55:17:4e:25:ff:e7:26:06:3e:07:54:5f:ca:1c:ae:
f6:ec:73:8a:10:12:cf:c4:b6:f3:64:16:0f:98:24:
a5:05:93:0c:a0:94:36:73:a7:da:38:bb:ed:11:46:
09:df:9a:47:aa:07:d8:44:c1:82:de:7b:4f:7a:34:
04:8a:1d:20:e8:3b:c4:a6:59:4e:2e:48:a3:04:ca:
93:d4:f5:b6:bf:79:4d:a9:76:b8:b2:3e:9f:f7:49:
17:c8:16:11:55:58:c0:d6:43:e2:55:94:9e:b8:b5:
c8:bb:38:33:52:0c:9f:d9:59:ac:90:0f:c7:29:df:
be:e4:92:9b:72:76:6d:6d:6a:59:be:1a:31:79:e8:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:96:FA:0C:25:ED:57:F6:D4:B3:6D:19:E1:39:E5:19:69:CD:66:97
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:a6:04:64:a2:97:9f:e7:2f:ff:cb:01:68:5e:60:8b:f3:
b7:c3:11:44:c2:a2:70:60:8a:6b:f2:ab:af:d5:42:77:f7:3c:
06:da:47:ba:f7:16:49:ed:88:0c:d7:18:71:2c:f7:8c:fa:9c:
37:b5:e2:1c:86:00:a5:6b:8c:12:9a:66:e7:26:76:52:b2:a1:
fd:0e:aa:40:23:bf:3b:ba:0d:45:df:3f:ca:ac:7f:81:ec:5e:
a0:2a:f0:05:5e:88:27:68:ee:e6:69:09:30:53:f3:db:bf:20:
46:b3:38:9e:91:be:de:40:11:12:ea:64:b8:3d:6a:a5:e7:10:
38:e2:bf:1a:22:b6:26:ab:a5:23:06:82:86:2f:d5:01:92:c4:
cb:a7:68:6b:52:33:67:3d:a1:bf:07:e6:b9:ab:d8:a8:66:f7:
96:bd:bc:25:29:3c:ea:aa:2c:7a:5f:9b:65:0f:3c:78:fa:ed:
f3:f0:27:0c:dc:53:7c:fb:b4:26:23:83:db:3a:66:4a:45:1d:
59:06:1c:61:92:5d:db:ee:f4:14:4d:de:81:d5:35:f0:88:ff:
2e:ca:41:ef:55:5c:69:fc:30:e6:e2:43:13:3e:38:b4:2e:ea:
bb:fd:2f:3d:74:77:a5:d4:6c:5d:23:1b:67:39:74:38:76:ee:
71:ab:ae:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5bZpPSJHGa/igUw0pnIwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MGQyNjgxNTE0YWVmZWU5ZDNjODZlMWVhZTM1NzM2Yzg0
ZDFjMDkwHhcNMjYxMDE0MDgwMDQ2WhcNMjYxMDE1MDgwMDQ2WjAzMTEwLwYDVQQD
EyhkMDk2ZmEwYzI1ZWQ1N2Y2ZDRiMzZkMTllMTM5ZTUxOTY5Y2Q2Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uMUh3vrFUR4W4vexmhHfN1UFFDP
LrJlEMEcxzgMNw/ccPt0J/OSNMGndzXd+T+myqHI2TiPaW0nqGeAVieH0ngj+iBu
wM4RP/ZgD1n8SwLgmnScT496xBo4gbIHmPhpBZJzoLb3+/aaSD+gr4ex5IZBRPno
rM1VF04l/+cmBj4HVF/KHK727HOKEBLPxLbzZBYPmCSlBZMMoJQ2c6faOLvtEUYJ
35pHqgfYRMGC3ntPejQEih0g6DvEpllOLkijBMqT1PW2v3lNqXa4sj6f90kXyBYR
VVjA1kPiVZSeuLXIuzgzUgyf2VmskA/HKd++5JKbcnZtbWpZvhoxeejUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCW+gwl7Vf21LNtGeE55RlpzWaXMB8GA1UdIwQY
MBaAFNkNJoFRSu/unTyG4erjVzbITRwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQt
MWQwZjI5YjRiOTdmLzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQtMWQwZjI5YjRiOTdm
LzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkamBGSi
l5/nL//LAWheYIvzt8MRRMKicGCKa/Krr9VCd/c8BtpHuvcWSe2IDNcYcSz3jPqc
N7XiHIYApWuMEppm5yZ2UrKh/Q6qQCO/O7oNRd8/yqx/gexeoCrwBV6IJ2ju5mkJ
MFPz278gRrM4npG+3kAREupkuD1qpecQOOK/GiK2JqulIwaChi/VAZLEy6doa1Iz
Zz2hvwfmuavYqGb3lr28JSk86qosel+bZQ88ePrt8/AnDNxTfPu0JiOD2zpmSkUd
WQYcYZJd2+70FE3egdU18Ij/LspB71Vcafww5uJDEz44tC7qu/0vPXR3pdRsXSMb
Zzl0OHbucauuBQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:03 2026 by rpki-client