Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
File: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft (raw, json)
Hash identifier: 7UEq1RrY9nDP3CuJAIISc3nj+jGLMJZKcVqqTUW3WO4=
Subject key identifier: DB:4D:83:C0:5F:49:14:15:D9:42:B8:F2:33:19:18:E9:AD:89:19:3F
Authority key identifier: DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
Certificate issuer: /CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Certificate serial: 01A04016F8DAEF0D54C03BA2660B6D9B9DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
Manifest number: 0223
Signing time: Wed 26 Aug 2026 22:00:42 +0000
Manifest this update: Wed 26 Aug 2026 22:00:42 +0000
Manifest next update: Thu 27 Aug 2026 22:00:42 +0000
Files and hashes: 1: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl (hash: 8H7cJh5WYAG+MVq6/z0nlVhCoaQr/O6VxB6ZBIF1ti4=)
2: QZpcoFZ-mTdXgaU_KSl2tUqS-WA.roa (hash: kKgOgir5OcWMeFMyd0QfuGiJS19k1i7Dnvnix7dS1ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:16:f8:da:ef:0d:54:c0:3b:a2:66:0b:6d:9b:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Validity
Not Before: Aug 26 22:00:42 2026 GMT
Not After : Aug 27 22:00:42 2026 GMT
Subject: CN=db4d83c05f491415d942b8f2331918e9ad89193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:eb:68:84:54:82:7f:9c:91:10:b4:f3:8f:
c4:0b:57:4c:ea:20:f2:e7:9e:54:ca:65:79:71:fe:
67:19:f6:04:04:71:66:a0:70:22:45:ad:28:7c:3b:
a0:d5:4a:bb:56:d6:18:22:fb:1e:f9:30:9f:d5:b7:
58:23:72:2a:9f:f8:1b:e8:56:8f:8f:ef:5b:00:e1:
e6:bf:4d:0a:4e:5a:56:e4:83:01:26:49:92:24:4d:
46:ca:b0:01:51:5c:a6:d1:e3:9c:4f:cf:87:df:1e:
22:57:57:b3:dd:f4:a2:95:29:b6:9e:2d:40:de:19:
b2:df:c7:36:b4:b6:3a:32:f7:f2:6e:45:39:a3:03:
2b:25:d7:34:83:62:42:d9:4a:2d:01:fd:0b:8d:dc:
b1:87:3d:ed:13:58:97:9c:71:d3:da:3c:09:d3:7e:
aa:8d:9f:c7:38:f8:c7:70:0e:68:0a:c4:68:73:31:
ef:8b:55:19:37:09:03:29:02:08:f0:ac:ec:cd:f3:
12:8e:47:f1:19:8a:30:12:8f:9c:e2:e9:d7:9b:62:
57:ad:d3:42:c5:f5:cb:09:61:07:c3:5b:cb:44:f6:
c1:9f:cc:cb:07:90:41:28:f9:b0:7c:bc:01:2e:8c:
d0:26:94:4e:63:41:cf:ce:74:8b:aa:a6:a5:e1:d2:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:83:C0:5F:49:14:15:D9:42:B8:F2:33:19:18:E9:AD:89:19:3F
X509v3 Authority Key Identifier:
keyid:DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:80:69:d0:1f:d0:f8:20:01:68:4f:f7:ef:5b:8f:3d:54:7c:
11:fa:68:6d:8f:87:e5:df:ff:d4:b0:83:a2:ec:35:01:20:54:
4b:cf:c6:45:56:b0:d2:5f:01:85:3d:bf:ca:eb:19:23:df:f5:
65:83:f4:71:4f:ac:9b:3b:d1:29:5a:e1:60:6a:a7:30:3f:21:
d0:11:9f:e8:84:cb:93:b5:da:c6:51:50:3a:56:13:c1:f1:c5:
56:85:f0:3c:04:2a:a6:14:7a:d0:4f:73:60:e0:34:4d:02:e5:
e0:5d:68:5c:ea:ca:20:d8:0f:3c:ca:3d:b6:bb:97:5c:b2:c3:
8d:32:0b:32:40:c5:a7:b7:58:a8:73:12:c6:61:9e:70:5b:3b:
66:4d:80:a1:54:b2:b2:6e:75:e4:7e:0b:3f:71:fa:53:b5:4f:
47:87:2c:ce:46:e4:f9:ed:2b:8c:4a:5c:40:e8:5c:60:bd:81:
2e:40:af:e9:b4:5d:ed:51:16:db:84:cc:33:9e:3b:73:22:4c:
96:6e:40:d6:be:37:29:a9:18:39:61:8e:93:4d:bd:7b:28:b3:
af:b7:a2:d5:dc:4f:a4:3c:c1:70:3a:eb:1d:56:c5:68:90:6d:
b9:00:b7:e8:54:95:c7:5c:9f:2d:de:55:20:38:0e:b1:e4:fc:
fb:0f:e7:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAFvja7w1UwDuiZgttm53DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTQwZTA2OWIzMWYyYjg0YzVkYmQyMTNlZDQ2NzczYjA2
MzNlNTIwHhcNMjYwODI2MjIwMDQyWhcNMjYwODI3MjIwMDQyWjAzMTEwLwYDVQQD
EyhkYjRkODNjMDVmNDkxNDE1ZDk0MmI4ZjIzMzE5MThlOWFkODkxOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWzraIRUgn+ckRC084/EC1dM6iDy
555UymV5cf5nGfYEBHFmoHAiRa0ofDug1Uq7VtYYIvse+TCf1bdYI3Iqn/gb6FaP
j+9bAOHmv00KTlpW5IMBJkmSJE1GyrABUVym0eOcT8+H3x4iV1ez3fSilSm2ni1A
3hmy38c2tLY6MvfybkU5owMrJdc0g2JC2UotAf0Ljdyxhz3tE1iXnHHT2jwJ036q
jZ/HOPjHcA5oCsRoczHvi1UZNwkDKQII8KzszfMSjkfxGYowEo+c4unXm2JXrdNC
xfXLCWEHw1vLRPbBn8zLB5BBKPmwfLwBLozQJpROY0HPznSLqqal4dJLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtNg8BfSRQV2UK48jMZGOmtiRk/MB8GA1UdIwQY
MBaAFNsUDgabMfK4TF29IT7UZ3OwYz5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEt
MzQ5NmU0OGU1NTE0LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEtMzQ5NmU0OGU1NTE0
LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4Bp0B/Q
+CABaE/371uPPVR8EfpobY+H5d//1LCDouw1ASBUS8/GRVaw0l8BhT2/yusZI9/1
ZYP0cU+smzvRKVrhYGqnMD8h0BGf6ITLk7XaxlFQOlYTwfHFVoXwPAQqphR60E9z
YOA0TQLl4F1oXOrKINgPPMo9truXXLLDjTILMkDFp7dYqHMSxmGecFs7Zk2AoVSy
sm515H4LP3H6U7VPR4cszkbk+e0rjEpcQOhcYL2BLkCv6bRd7VEW24TMM547cyJM
lm5A1r43KakYOWGOk029eyizr7ei1dxPpDzBcDrrHVbFaJBtuQC36FSVx1yfLd5V
IDgOseT8+w/nug==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:52 2026 by rpki-client