Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: AP+lw2rgkUxuGhPJ37kRI4PJNL7zOiWmKe8etb2Hx8Y=
Subject key identifier: 60:0A:06:EE:C7:99:52:24:A1:42:F1:94:69:49:7B:B6:CC:46:E4:E5
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 01A00213CDD305DB1C593B2E9B3A7489E5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 18CA
Signing time: Fri 14 Aug 2026 21:00:47 +0000
Manifest this update: Fri 14 Aug 2026 21:00:47 +0000
Manifest next update: Sat 15 Aug 2026 21:00:47 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: +aEvyKYKRDj5+UKz8jTDN9nnavA09e/9rNEtbujQNtA=)
2: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (hash: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:cd:d3:05:db:1c:59:3b:2e:9b:3a:74:89:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Aug 14 21:00:47 2026 GMT
Not After : Aug 15 21:00:47 2026 GMT
Subject: CN=600a06eec7995224a142f19469497bb6cc46e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:ef:f5:19:4d:60:1e:d6:99:72:34:79:64:
56:b1:af:29:f1:d1:a6:ea:dd:de:09:e4:df:2a:23:
4e:56:c0:2c:35:53:75:77:68:a0:8c:af:bf:a5:db:
41:61:a5:3f:dd:2f:0e:13:ca:a7:72:cb:42:09:58:
31:c7:32:37:2b:4e:09:e6:f6:f2:78:88:25:bb:25:
b1:fc:7a:03:73:38:10:d7:88:7c:8a:c7:cb:63:a2:
c2:a6:0e:99:9c:43:08:b6:16:37:4e:de:2d:a7:65:
8d:80:9e:52:bd:b8:36:df:bd:0f:e2:85:ba:88:3f:
60:5b:89:97:bd:60:9d:d8:70:db:fe:8b:21:42:97:
31:0d:d8:71:d1:ec:e4:29:74:61:23:ba:46:dd:4c:
3c:9b:d4:bd:ca:42:70:21:ac:f0:17:21:b2:82:b1:
95:0f:c2:aa:1c:4b:10:c9:65:e2:5d:4c:de:a7:ac:
bb:98:ce:ac:b5:1f:74:f2:21:12:64:f7:e3:84:c2:
f2:8a:97:f2:07:e0:00:26:62:b7:49:a4:a8:54:e3:
91:c4:68:2f:be:10:c0:da:5a:aa:ce:84:29:51:b3:
31:61:61:58:24:e0:09:5d:e6:20:36:aa:e4:71:cc:
b3:9a:dd:a0:16:80:4e:94:06:1f:ef:14:ad:f7:bd:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:06:EE:C7:99:52:24:A1:42:F1:94:69:49:7B:B6:CC:46:E4:E5
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:74:0e:ae:d8:63:b6:5e:1a:70:fd:ac:9c:c5:0a:9b:91:
6f:0b:da:2c:97:48:4b:53:03:c1:77:1d:85:41:4c:67:d4:44:
95:ba:58:e2:10:f8:a8:28:f7:3c:c4:f4:c0:3c:97:77:21:52:
bd:b6:af:68:47:e3:35:4e:2b:fe:0e:25:2d:00:5b:01:8d:d4:
f9:79:b6:5b:07:86:59:56:78:b7:c5:0b:ab:c7:09:49:cf:16:
be:e2:a4:57:bd:04:f9:63:d6:3e:86:bb:4d:1d:69:c2:b1:9e:
61:8c:e7:23:c7:38:18:65:1f:66:e7:b8:aa:25:84:e8:9a:e4:
e8:33:cc:c2:6f:ec:28:ac:49:49:f8:36:c6:0b:92:4f:c5:db:
e7:10:12:0f:be:54:8a:52:5c:ee:be:4d:88:ab:ad:66:99:d4:
30:b6:f2:d2:68:fa:46:cd:4c:cf:11:a4:14:b7:fa:89:ae:c0:
e9:6a:8a:9e:ae:ed:d2:a8:1f:06:37:9d:c7:5d:89:45:10:fe:
df:62:7f:22:4f:d3:cb:fe:51:fc:b6:77:09:e9:c7:6e:f9:7c:
23:18:71:86:32:5a:c7:c6:58:27:ad:12:40:c8:94:f4:32:3b:
ae:51:5e:ee:4c:2b:e6:6d:c8:b7:fe:1f:dd:18:db:c3:d4:6e:
f7:ab:db:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE83TBdscWTsumzp0ieWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzczZDczM2QxODQ1YzQxZDNmOWEzNjJiNTViNzRlNjg2
ZjljMDIwHhcNMjYwODE0MjEwMDQ3WhcNMjYwODE1MjEwMDQ3WjAzMTEwLwYDVQQD
Eyg2MDBhMDZlZWM3OTk1MjI0YTE0MmYxOTQ2OTQ5N2JiNmNjNDZlNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yXv9RlNYB7WmXI0eWRWsa8p8dGm
6t3eCeTfKiNOVsAsNVN1d2igjK+/pdtBYaU/3S8OE8qncstCCVgxxzI3K04J5vby
eIgluyWx/HoDczgQ14h8isfLY6LCpg6ZnEMIthY3Tt4tp2WNgJ5Svbg2370P4oW6
iD9gW4mXvWCd2HDb/oshQpcxDdhx0ezkKXRhI7pG3Uw8m9S9ykJwIazwFyGygrGV
D8KqHEsQyWXiXUzep6y7mM6stR908iESZPfjhMLyipfyB+AAJmK3SaSoVOORxGgv
vhDA2lqqzoQpUbMxYWFYJOAJXeYgNqrkccyzmt2gFoBOlAYf7xSt971cewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAKBu7HmVIkoULxlGlJe7bMRuTlMB8GA1UdIwQY
MBaAFNl3PXM9GEXEHT+aNitVt05ob5wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMt
MDFhMjlmNWY2ZGRlLzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMtMDFhMjlmNWY2ZGRl
LzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7t0Dq7Y
Y7ZeGnD9rJzFCpuRbwvaLJdIS1MDwXcdhUFMZ9RElbpY4hD4qCj3PMT0wDyXdyFS
vbavaEfjNU4r/g4lLQBbAY3U+Xm2WweGWVZ4t8ULq8cJSc8WvuKkV70E+WPWPoa7
TR1pwrGeYYznI8c4GGUfZue4qiWE6Jrk6DPMwm/sKKxJSfg2xguST8Xb5xASD75U
ilJc7r5NiKutZpnUMLby0mj6Rs1MzxGkFLf6ia7A6WqKnq7t0qgfBjedx12JRRD+
32J/Ik/Ty/5R/LZ3CenHbvl8IxhxhjJax8ZYJ60SQMiU9DI7rlFe7kwr5m3It/4f
3Rjbw9Ru96vbPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:35 2026 by rpki-client