Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File: 2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier: o3Dt6V+XUH6Ls/XUUgcSIuoFNv7qnVF5FqCGakcsAiw=
Subject key identifier: 9D:E4:B5:2A:62:C3:F4:23:4F:FC:32:FC:EF:7D:AE:E8:BA:1D:7D:83
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 01A1724A93869C07C4C808521637967C0EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 09:00:52 +0000
Manifest this update: Sun 25 Oct 2026 09:00:52 +0000
Manifest next update: Mon 26 Oct 2026 09:00:52 +0000
Files and hashes: 1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: cphY1QK7gWsujABFiSlxG+zVFL1x5J+UPTNooH8Qqeo=)
2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:93:86:9c:07:c4:c8:08:52:16:37:96:7c:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Oct 25 09:00:52 2026 GMT
Not After : Oct 26 09:00:52 2026 GMT
Subject: CN=9de4b52a62c3f4234ffc32fcef7daee8ba1d7d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:71:e8:bb:5d:3e:5b:6f:1d:0d:78:7d:68:
80:5e:d1:a3:50:58:67:00:34:99:79:63:b9:97:88:
5e:17:45:ce:f1:1d:1f:e6:6d:4a:0a:45:d7:b8:11:
fd:b5:3f:fe:a2:9e:b5:b6:27:19:e6:57:25:09:89:
60:ec:9c:01:cd:4e:8f:dd:65:7a:c0:27:fd:83:65:
cc:86:84:1e:cf:f9:07:1c:29:8d:9f:d8:51:03:a3:
9b:5e:c3:0b:8c:4a:6b:cf:db:da:94:95:6c:b2:27:
15:73:3a:9c:41:0d:45:09:a3:6d:5a:02:48:1a:f6:
2e:3c:a3:0e:d5:2f:a2:51:3f:f7:65:e5:07:f7:0e:
56:68:6f:44:e6:3c:38:4c:50:d7:f0:26:93:5a:88:
40:70:91:4e:47:d3:31:64:33:35:f0:99:17:8c:ef:
2a:b0:5c:22:bd:e8:52:c4:7a:bc:49:0a:0e:34:6d:
c6:bc:81:fe:57:0a:a6:cd:2f:61:fa:26:62:3a:c2:
be:46:3c:0e:99:c3:3b:fd:a3:b0:45:93:e1:27:2e:
a0:3c:20:a4:7c:69:bb:20:58:0d:c8:cd:7a:b8:97:
fc:02:21:13:a1:10:76:ad:ac:2a:3e:36:6b:3a:48:
ab:4b:d3:07:b9:94:9f:6b:a3:68:5c:c3:e8:f7:dd:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:B5:2A:62:C3:F4:23:4F:FC:32:FC:EF:7D:AE:E8:BA:1D:7D:83
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c5:4a:ef:7d:2c:1f:9f:77:b0:5e:01:6b:bf:1a:68:1a:1c:
5a:d3:91:4a:e5:93:08:7e:35:67:3e:42:0b:54:27:cb:c4:5e:
25:d6:1d:10:b6:b0:82:4f:a9:f2:c9:16:8b:c3:ff:92:54:aa:
ed:c4:cd:31:e1:2e:53:13:f8:c5:eb:9e:5c:e6:67:6b:65:93:
dc:fe:43:eb:6a:31:87:6d:6d:ad:47:e6:df:60:ff:0b:21:89:
eb:88:e0:06:69:5c:94:68:bc:e9:59:04:60:94:42:2b:fd:b0:
c2:4d:67:47:6b:af:12:43:ee:67:e2:58:d2:6c:8b:74:c7:c9:
d6:a6:86:12:06:11:b7:7f:41:99:7f:6f:5f:2a:cb:61:8f:29:
af:08:11:29:00:6b:b8:d7:3d:a3:aa:68:e1:6a:ae:fb:d0:ba:
37:32:44:e4:2b:47:bd:6c:dd:16:2f:b0:da:f3:02:97:48:2d:
e8:64:91:26:e4:5d:ca:58:e3:55:59:84:19:59:92:8f:24:47:
0d:51:4b:20:47:17:1d:77:bd:0a:44:af:76:ca:23:52:33:dc:
9a:0b:2c:95:13:c1:f8:76:28:35:ad:d3:0f:b7:79:d3:22:7b:
99:f7:46:2c:1b:27:ad:34:27:62:cb:22:bf:d4:ca:7c:cd:d4:
a1:1c:84:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFySpOGnAfEyAhSFjeWfA7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YzhmZTNiNzRhY2QxMjQ2MDFlZmIxMzA2NGY3YzczMDA2
MDk2N2EwHhcNMjYxMDI1MDkwMDUyWhcNMjYxMDI2MDkwMDUyWjAzMTEwLwYDVQQD
Eyg5ZGU0YjUyYTYyYzNmNDIzNGZmYzMyZmNlZjdkYWVlOGJhMWQ3ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxflx6LtdPltvHQ14fWiAXtGjUFhn
ADSZeWO5l4heF0XO8R0f5m1KCkXXuBH9tT/+op61ticZ5lclCYlg7JwBzU6P3WV6
wCf9g2XMhoQez/kHHCmNn9hRA6ObXsMLjEprz9valJVssicVczqcQQ1FCaNtWgJI
GvYuPKMO1S+iUT/3ZeUH9w5WaG9E5jw4TFDX8CaTWohAcJFOR9MxZDM18JkXjO8q
sFwivehSxHq8SQoONG3GvIH+VwqmzS9h+iZiOsK+RjwOmcM7/aOwRZPhJy6gPCCk
fGm7IFgNyM16uJf8AiEToRB2rawqPjZrOkirS9MHuZSfa6NoXMPo991JcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3ktSpiw/QjT/wy/O99rui6HX2DMB8GA1UdIwQY
MBaAFNnI/jt0rNEkYB77EwZPfHMAYJZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNqLU8zU3MwU1JnSHZzVEJrOThjd0JnbG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMt
ODg4YzA3ZjIxNTNmLzEvMmNqLU8zU3MwU1JnSHZzVEJrOThjd0JnbG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMtODg4YzA3ZjIxNTNm
LzEvMmNqLU8zU3MwU1JnSHZzVEJrOThjd0JnbG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMVK730s
H593sF4Ba78aaBocWtORSuWTCH41Zz5CC1Qny8ReJdYdELawgk+p8skWi8P/klSq
7cTNMeEuUxP4xeueXOZna2WT3P5D62oxh21trUfm32D/CyGJ64jgBmlclGi86VkE
YJRCK/2wwk1nR2uvEkPuZ+JY0myLdMfJ1qaGEgYRt39BmX9vXyrLYY8prwgRKQBr
uNc9o6po4Wqu+9C6NzJE5CtHvWzdFi+w2vMCl0gt6GSRJuRdyljjVVmEGVmSjyRH
DVFLIEcXHXe9CkSvdsojUjPcmgsslRPB+HYoNa3TD7d50yJ7mfdGLBsnrTQnYssi
v9TKfM3UoRyEKg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:07 2026 by rpki-client