Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: ZT7sFJpHcvxoI0ax/TpbSR9BOMU1zUpbQ3bMnljsgNk=
Subject key identifier: 4E:22:16:FB:F6:10:AC:73:19:10:F0:B7:50:FC:D1:04:23:C6:3D:3A
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 01A16A5A3BC914940711AC5C72EC8F0137EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 02FE
Signing time: Fri 23 Oct 2026 20:01:00 +0000
Manifest this update: Fri 23 Oct 2026 20:01:00 +0000
Manifest next update: Sat 24 Oct 2026 20:01:00 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: h2eBRaDnRhovCmuh5M/Pwq1OeB6WcArlLRzGnRit+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:5a:3b:c9:14:94:07:11:ac:5c:72:ec:8f:01:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Oct 23 20:01:00 2026 GMT
Not After : Oct 24 20:01:00 2026 GMT
Subject: CN=4e2216fbf610ac731910f0b750fcd10423c63d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:ed:c9:22:34:24:c5:f5:ee:13:e4:8c:cc:
06:39:17:c0:b3:cd:f4:9a:ed:7b:6d:2d:6f:4e:85:
fb:09:36:1a:e5:0e:7a:ea:00:c8:b3:8a:6d:40:e2:
15:05:22:0b:1b:ea:92:17:34:ba:b4:10:a4:25:84:
7a:4a:58:82:32:07:d0:24:1b:2c:17:a9:65:77:85:
8a:5a:fc:14:12:33:9f:5c:ba:d4:ca:72:b1:d5:71:
9c:f1:36:0f:1f:d8:47:5a:f1:96:58:51:51:3f:45:
f4:54:3e:7e:e8:17:40:24:4d:55:91:5b:0d:c6:01:
34:44:3c:9a:c2:ea:a2:41:77:45:21:0c:64:c6:80:
cf:68:98:d1:74:2a:5b:01:1f:03:77:14:ec:a2:55:
0f:44:26:63:5a:e2:80:02:b2:ae:6d:64:a9:7b:52:
70:d7:9d:78:12:38:b3:81:0f:a2:a1:34:a7:de:c1:
68:56:9d:ce:0e:9f:34:01:c0:02:78:a5:6d:44:fe:
bd:1f:d0:cb:67:87:9f:e5:f3:5d:bc:32:23:67:7a:
c2:e6:85:1d:01:51:e5:dd:9e:29:44:81:69:a5:bb:
37:bd:5f:be:c1:df:51:56:4d:e1:92:75:a5:8b:c8:
7b:6d:cf:ad:dc:ca:7f:72:3d:da:fb:3e:ca:2a:d8:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:16:FB:F6:10:AC:73:19:10:F0:B7:50:FC:D1:04:23:C6:3D:3A
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:79:ee:e1:ea:4a:11:cd:24:12:4a:84:f7:da:85:c2:24:ab:
fe:c6:06:75:5c:35:9c:ca:4c:9e:a8:63:c5:ba:89:2c:b2:fb:
00:a9:c6:5c:65:5a:3f:e2:8e:97:f5:21:69:ee:2e:65:e2:51:
6c:76:d1:e9:3e:91:b2:ca:47:ba:f5:36:89:72:d2:15:f4:05:
4a:2b:f6:65:ac:7a:d0:7c:19:28:55:b1:b8:4e:f5:49:6a:ba:
9a:39:4d:dc:56:f3:84:1d:01:81:2f:0a:57:26:c5:3d:c2:d6:
97:c9:8e:2f:0b:36:8f:9c:61:8e:2e:3a:b2:b0:3b:56:44:de:
d3:f6:a2:54:7d:ba:cf:d1:8e:dd:fb:11:76:23:83:bb:13:61:
9b:2d:2d:b2:77:b5:97:50:67:41:a7:48:22:b1:62:82:43:d5:
42:f4:7b:63:2e:42:89:43:e3:46:b6:d6:e8:62:fc:13:4f:22:
a0:6a:bc:90:a6:e2:51:5d:a4:7f:3c:35:9b:2a:68:79:64:5f:
46:4b:08:c8:7a:34:b0:95:84:47:db:fd:b8:17:72:c3:5c:ad:
d7:97:9a:8f:14:4f:c1:ac:0d:b7:2d:60:21:8e:c2:8e:5f:a6:
03:e5:f7:05:a5:01:f9:8e:7c:6f:a5:ef:cf:71:65:39:29:29:
74:aa:3e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqWjvJFJQHEaxccuyPATfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmYwY2M4NTM1NTRiZGRmOTA5OWFhM2NlZWJkMzUyNDZi
OTI4ZjUwHhcNMjYxMDIzMjAwMTAwWhcNMjYxMDI0MjAwMTAwWjAzMTEwLwYDVQQD
Eyg0ZTIyMTZmYmY2MTBhYzczMTkxMGYwYjc1MGZjZDEwNDIzYzYzZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QntySI0JMX17hPkjMwGORfAs830
mu17bS1vToX7CTYa5Q566gDIs4ptQOIVBSILG+qSFzS6tBCkJYR6SliCMgfQJBss
F6lld4WKWvwUEjOfXLrUynKx1XGc8TYPH9hHWvGWWFFRP0X0VD5+6BdAJE1VkVsN
xgE0RDyawuqiQXdFIQxkxoDPaJjRdCpbAR8DdxTsolUPRCZjWuKAArKubWSpe1Jw
1514EjizgQ+ioTSn3sFoVp3ODp80AcACeKVtRP69H9DLZ4ef5fNdvDIjZ3rC5oUd
AVHl3Z4pRIFppbs3vV++wd9RVk3hknWli8h7bc+t3Mp/cj3a+z7KKtiZEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4iFvv2EKxzGRDwt1D80QQjxj06MB8GA1UdIwQY
MBaAFNn/DMhTVUvd+Qmao87r01JGuSj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAt
Y2FmZTVlN2RiNzU4LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAtY2FmZTVlN2RiNzU4
LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXnu4epK
Ec0kEkqE99qFwiSr/sYGdVw1nMpMnqhjxbqJLLL7AKnGXGVaP+KOl/Uhae4uZeJR
bHbR6T6RsspHuvU2iXLSFfQFSiv2Zax60HwZKFWxuE71SWq6mjlN3FbzhB0BgS8K
VybFPcLWl8mOLws2j5xhji46srA7VkTe0/aiVH26z9GO3fsRdiODuxNhmy0tsne1
l1BnQadIIrFigkPVQvR7Yy5CiUPjRrbW6GL8E08ioGq8kKbiUV2kfzw1mypoeWRf
RksIyHo0sJWER9v9uBdyw1yt15eajxRPwawNty1gIY7Cjl+mA+X3BaUB+Y58b6Xv
z3FlOSkpdKo+lg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:44:52 2026 by rpki-client