Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier: ImknLBOJ1VX+X64CA5CnHqrY97pCjii4lM7tgiWEBwk=
Subject key identifier: 99:5F:0F:E6:CC:6A:F3:5F:A2:3F:48:0F:E4:55:E7:94:1C:59:95:EE
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 019F18D6AA51720C0286FE5ACC37F8842C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number: 10AA
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: dCkjrce5uRNENxQferd5sVaoQVvtVpWKbSXA2ghtvBQ=)
2: L2j3YbDrhxKGFha7tz1-c-vN-uQ.roa (hash: iDoMcXtz4bozdB/C54gk9t9e+mReC2IXbtgvzCL2Yp0=)
3: UIBjpglW4YWleiz-oKKmcURIxwc.roa (hash: ErWPaj7tYXmjYMsLMNAAh1j4o0c+Mnbdnzjy6PRwJIk=)
4: UZsKg_QtparPPd-wVk9iuY4cLb8.roa (hash: LXCP+y+LLCN1p4aORJt/oEFqWyCdqeZadpBwWIWxu8s=)
5: i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa (hash: gEKkmfmle5KluLRAtXEyZBHa6B0VwRl775bqLnntmPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:aa:51:72:0c:02:86:fe:5a:cc:37:f8:84:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=995f0fe6cc6af35fa23f480fe455e7941c5995ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:cf:b9:72:0f:bf:83:1a:ad:20:e6:7f:b4:
a5:ff:9b:4c:4e:b7:b0:ca:5c:3f:f9:58:38:4b:4a:
3a:fa:d1:a5:9d:7c:b1:e3:64:13:66:da:d5:5b:a2:
ef:3e:1b:29:5b:10:89:d0:35:30:35:b2:fc:6d:b7:
ac:07:b1:88:dc:a4:14:dd:8d:c6:38:5e:a1:e8:2a:
e7:47:75:a2:ec:4a:e9:bc:7a:2d:97:86:97:3a:af:
27:8a:58:e1:77:aa:44:00:8d:13:a3:87:3d:81:be:
43:dc:53:ae:73:90:1c:f7:a8:94:0f:28:97:84:e0:
5b:bc:a5:68:02:0a:f7:37:e3:94:7c:90:c3:a8:21:
67:13:7a:4c:cd:15:8c:96:4f:53:b9:7d:f8:12:62:
2c:eb:d2:06:a2:4a:7f:61:d4:13:f7:88:6f:c2:91:
5b:38:35:c5:05:22:9d:25:d3:65:85:eb:78:e2:68:
13:fe:28:af:c8:de:db:e8:8e:6f:98:44:c2:46:74:
ed:91:3c:7b:7a:0a:62:d5:d6:8f:8c:92:11:07:d3:
2e:07:b4:93:74:17:8b:d1:b9:de:98:e9:2f:92:43:
9d:00:57:7c:12:84:89:f6:09:14:f5:74:f8:72:b5:
e1:88:b3:0e:e7:16:e7:e1:fd:92:3c:61:e8:00:01:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:0F:E6:CC:6A:F3:5F:A2:3F:48:0F:E4:55:E7:94:1C:59:95:EE
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:d2:b0:fd:b9:fc:5a:71:92:32:fc:25:24:cc:db:1f:14:
47:09:ac:08:7b:5b:1b:ad:33:9d:bc:64:85:d0:d1:2e:c4:1f:
ab:a7:22:37:2e:d3:f3:af:fb:6d:df:8d:ad:f1:60:f0:cf:d7:
57:a5:34:ae:80:37:66:f6:f0:98:a6:4c:90:79:11:e7:b5:05:
d4:82:a3:08:b8:9f:df:cf:f3:68:b5:42:0e:d2:50:46:c2:2a:
1b:b8:81:68:59:2a:db:fe:d6:37:3d:b0:3c:80:4a:dd:2c:74:
56:b9:1e:af:b0:da:57:18:5f:ac:27:c5:aa:0f:49:cf:a3:93:
ba:e6:0e:3c:d6:b3:ae:0a:3d:00:67:bf:9f:eb:48:ef:2a:67:
00:07:a0:47:74:b7:26:b1:9a:0b:d9:6c:30:8a:62:8f:f9:dc:
cb:68:cc:c9:f8:67:4b:35:65:c9:47:4b:54:b1:3b:1e:d6:4c:
74:1c:97:81:75:a9:33:cf:53:c0:b7:0e:c3:69:c6:91:37:e4:
e6:e0:35:8f:d6:de:68:a9:d9:f2:fd:74:a7:48:d5:f7:6f:44:
4d:e1:4a:35:39:e1:40:e0:27:42:ea:f0:c8:a3:b6:08:54:76:
ad:13:05:18:1b:3b:13:da:44:c4:dd:bc:84:94:cb:7e:3f:a0:
ca:84:32:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1qpRcgwChv5azDf4hCxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl
YjA4ODgwHhcNMjYwNjMwMTQwMjI5WhcNMjYwNzAxMTQwMjI5WjAzMTEwLwYDVQQD
Eyg5OTVmMGZlNmNjNmFmMzVmYTIzZjQ4MGZlNDU1ZTc5NDFjNTk5NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua3PuXIPv4MarSDmf7Sl/5tMTrew
ylw/+Vg4S0o6+tGlnXyx42QTZtrVW6LvPhspWxCJ0DUwNbL8bbesB7GI3KQU3Y3G
OF6h6CrnR3Wi7ErpvHotl4aXOq8niljhd6pEAI0To4c9gb5D3FOuc5Ac96iUDyiX
hOBbvKVoAgr3N+OUfJDDqCFnE3pMzRWMlk9TuX34EmIs69IGokp/YdQT94hvwpFb
ODXFBSKdJdNlhet44mgT/iivyN7b6I5vmETCRnTtkTx7egpi1daPjJIRB9MuB7ST
dBeL0bnemOkvkkOdAFd8EoSJ9gkU9XT4crXhiLMO5xbn4f2SPGHoAAEr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlfD+bMavNfoj9ID+RV55QcWZXuMB8GA1UdIwQY
MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt
YzI2NDczODVlNzI3LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3
LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBbSsP25
/FpxkjL8JSTM2x8URwmsCHtbG60znbxkhdDRLsQfq6ciNy7T86/7bd+NrfFg8M/X
V6U0roA3ZvbwmKZMkHkR57UF1IKjCLif38/zaLVCDtJQRsIqG7iBaFkq2/7WNz2w
PIBK3Sx0Vrker7DaVxhfrCfFqg9Jz6OTuuYOPNazrgo9AGe/n+tI7ypnAAegR3S3
JrGaC9lsMIpij/ncy2jMyfhnSzVlyUdLVLE7HtZMdByXgXWpM89TwLcOw2nGkTfk
5uA1j9beaKnZ8v10p0jV929ETeFKNTnhQOAnQurwyKO2CFR2rRMFGBs7E9pExN28
hJTLfj+gyoQy1g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:24 2026 by rpki-client