Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: fv+XRaOEODIsDWfExGjPOr+OoHoWWFWT5oQRCnC2XFc=
Subject key identifier: E9:73:8E:F9:F5:84:E9:B4:CD:E8:88:E7:05:A3:0E:33:D3:A8:6E:63
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 01A1784C26EC7CA5BA7625C13C760105BFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 1520
Signing time: Mon 26 Oct 2026 13:00:18 +0000
Manifest this update: Mon 26 Oct 2026 13:00:18 +0000
Manifest next update: Tue 27 Oct 2026 13:00:18 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: Y3aHcgE9sGrsgvXJJf4zBkb9fEHM4wokGibyXjsVKK8=)
2: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (hash: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:26:ec:7c:a5:ba:76:25:c1:3c:76:01:05:bf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Oct 26 13:00:18 2026 GMT
Not After : Oct 27 13:00:18 2026 GMT
Subject: CN=e9738ef9f584e9b4cde888e705a30e33d3a86e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:0b:b6:50:85:3f:d0:8e:b6:09:b2:51:24:
7c:cb:8c:b3:36:0b:34:de:53:6b:a0:ff:34:09:b1:
55:e1:63:2c:37:5a:36:81:2b:5c:55:d0:9a:80:ab:
4e:83:41:5a:9b:51:69:d9:dd:a2:35:63:be:b0:4d:
09:60:d4:7a:ff:1c:d2:da:c3:39:37:8e:ac:6f:eb:
9c:9e:1f:e2:30:f9:98:a1:33:c8:0c:f4:cd:41:77:
47:21:8b:64:08:0c:8e:de:ba:64:71:be:18:4f:4f:
66:e6:f7:3a:92:a2:86:e0:85:10:15:ca:05:90:9d:
6b:71:39:f0:ba:47:c5:a3:0f:82:81:de:82:d8:a6:
57:59:7a:48:2c:c9:58:bf:84:f5:57:f5:93:21:8e:
3c:37:4b:76:96:5d:a3:db:e0:d4:70:67:4f:b6:65:
56:4b:6c:93:a7:67:25:72:57:3b:fd:61:96:d1:de:
44:16:31:a4:ea:e2:9e:91:25:73:86:8c:fe:4d:eb:
61:db:94:2e:0b:b6:d6:3e:59:26:02:33:09:e6:98:
4c:97:6b:b4:3a:65:8b:8b:f8:71:d9:be:b5:88:78:
95:40:2f:66:2e:4e:6d:ab:87:bd:21:12:46:00:c3:
0b:f3:82:02:45:e3:d3:65:82:d8:a8:af:02:8e:2f:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:8E:F9:F5:84:E9:B4:CD:E8:88:E7:05:A3:0E:33:D3:A8:6E:63
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:d0:81:96:1a:12:90:fd:5e:4e:7c:06:2a:f2:d8:31:55:
04:c9:b3:0d:41:1b:0f:40:c2:ad:63:76:66:aa:15:74:f5:29:
43:18:33:a8:81:86:02:69:f5:24:69:a8:f4:4d:8b:8a:1d:8d:
fd:4d:f6:a7:cd:ca:29:ea:7d:67:98:3b:c3:c1:e7:ae:d7:36:
29:cc:98:ad:3b:4b:7d:db:bf:6f:9e:88:27:7d:e3:79:17:cc:
55:0c:8d:d1:10:4c:be:20:96:c6:a9:6a:41:32:23:7d:1b:6b:
cc:90:0f:f6:91:2c:b2:91:c2:ff:dd:be:ef:99:89:02:e8:2a:
85:e5:15:c2:54:18:63:5e:bf:0e:84:36:23:21:17:29:c0:69:
d0:36:2e:6e:5a:2a:06:3a:8b:92:f3:45:cc:47:e5:f4:9a:48:
70:62:52:65:38:cf:b9:9c:3c:9e:b0:86:cf:b0:0a:f2:da:2c:
31:ec:5d:f3:91:a4:b7:ca:47:2b:27:40:c0:e9:34:ed:ce:05:
39:05:a0:c3:52:56:aa:38:b9:98:90:e8:36:f5:96:0b:91:df:
f7:48:af:d7:5e:74:da:41:71:a1:3b:0e:57:1d:2d:97:fa:cf:
7e:62:95:f0:54:2d:48:9c:99:84:8c:0f:a8:69:89:69:9f:a2:
76:13:9c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4TCbsfKW6diXBPHYBBb+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh
MTFmYjEwHhcNMjYxMDI2MTMwMDE4WhcNMjYxMDI3MTMwMDE4WjAzMTEwLwYDVQQD
EyhlOTczOGVmOWY1ODRlOWI0Y2RlODg4ZTcwNWEzMGUzM2QzYTg2ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzELtlCFP9COtgmyUSR8y4yzNgs0
3lNroP80CbFV4WMsN1o2gStcVdCagKtOg0Fam1Fp2d2iNWO+sE0JYNR6/xzS2sM5
N46sb+ucnh/iMPmYoTPIDPTNQXdHIYtkCAyO3rpkcb4YT09m5vc6kqKG4IUQFcoF
kJ1rcTnwukfFow+Cgd6C2KZXWXpILMlYv4T1V/WTIY48N0t2ll2j2+DUcGdPtmVW
S2yTp2clclc7/WGW0d5EFjGk6uKekSVzhoz+Teth25QuC7bWPlkmAjMJ5phMl2u0
OmWLi/hx2b61iHiVQC9mLk5tq4e9IRJGAMML84ICRePTZYLYqK8Cji+oBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlzjvn1hOm0zeiI5wWjDjPTqG5jMB8GA1UdIwQY
MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt
Nzg4YzViNzU3NTRiLzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi
LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnnQgZYa
EpD9Xk58Biry2DFVBMmzDUEbD0DCrWN2ZqoVdPUpQxgzqIGGAmn1JGmo9E2Lih2N
/U32p83KKep9Z5g7w8Hnrtc2KcyYrTtLfdu/b56IJ33jeRfMVQyN0RBMviCWxqlq
QTIjfRtrzJAP9pEsspHC/92+75mJAugqheUVwlQYY16/DoQ2IyEXKcBp0DYubloq
BjqLkvNFzEfl9JpIcGJSZTjPuZw8nrCGz7AK8tosMexd85Gkt8pHKydAwOk07c4F
OQWgw1JWqji5mJDoNvWWC5Hf90iv11502kFxoTsOVx0tl/rPfmKV8FQtSJyZhIwP
qGmJaZ+idhOcHA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:39:51 2026 by rpki-client