Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: mu482w4qWhcF/5pAg4kBkbawVd4jik00yTSAhtGJTss=
Subject key identifier: FC:0A:37:50:47:B2:46:61:85:86:CB:9E:50:52:44:BC:DC:B5:05:EB
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 01A0404DEB69DFB30343E6D909C3800C15C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 05A1
Signing time: Wed 26 Aug 2026 23:00:43 +0000
Manifest this update: Wed 26 Aug 2026 23:00:43 +0000
Manifest next update: Thu 27 Aug 2026 23:00:43 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: 1ydT6vjgfpPGQwK4sNj4kfOLIRPUEgjxBGcVDdVk1uY=)
2: nNN8oPaWzwsAkuqBUkdubOWtVpo.roa (hash: 0qPiY5OdqzEcTjsFlVm1KfW2HObtyaiMymvYvbm7kPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:eb:69:df:b3:03:43:e6:d9:09:c3:80:0c:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Aug 26 23:00:43 2026 GMT
Not After : Aug 27 23:00:43 2026 GMT
Subject: CN=fc0a375047b246618586cb9e505244bcdcb505eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:5b:c9:ba:74:30:ca:f4:a8:f9:d7:97:5b:
3d:5e:45:18:aa:1a:21:b6:ad:e1:b0:0c:e3:68:99:
bc:e8:33:55:e8:2f:84:33:b2:a9:88:3f:5b:f1:3d:
bf:f3:84:88:f9:39:33:4b:6f:a2:fb:09:a3:cf:6c:
e4:85:b9:7c:74:62:53:5d:d5:d4:70:37:71:5c:28:
b6:9d:dd:2b:a1:f7:09:19:af:46:4f:f2:b2:df:f8:
5f:e7:20:81:ad:14:f2:e7:69:32:4d:0b:39:87:e5:
97:08:33:bc:cd:91:db:48:0c:92:18:48:be:40:c3:
1f:18:64:5a:c6:b9:c5:9c:75:e8:6d:6c:98:f1:9f:
d7:58:92:f6:0f:ae:27:17:8e:3b:db:9f:8b:a1:a5:
0e:18:6a:92:02:99:a3:90:da:7e:5e:3a:ee:54:7c:
fd:dc:33:10:44:aa:4b:95:63:32:f0:ec:b0:20:e2:
94:5a:27:a1:86:2b:dc:f4:43:e4:4a:54:ea:4a:03:
a2:ec:c7:a0:67:7d:a2:dd:ff:16:0c:aa:92:73:97:
65:0c:02:25:02:59:a3:42:c6:43:1f:a0:6f:a1:78:
5a:9b:ec:eb:06:69:2b:27:a3:34:da:f1:98:fd:ca:
e0:05:c0:42:56:5b:6a:24:cf:cf:6f:de:c0:34:a5:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:37:50:47:B2:46:61:85:86:CB:9E:50:52:44:BC:DC:B5:05:EB
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:81:72:ab:1a:2f:14:eb:0d:94:a4:31:4e:12:45:85:64:d2:
db:b9:b0:22:c9:fe:a8:0f:93:79:9c:1b:4e:7e:c3:05:9d:3b:
78:11:16:3c:79:03:30:df:15:f4:f8:30:17:9e:ee:32:c0:1e:
f9:ce:f0:46:8b:8b:7c:1a:e2:b3:a8:bf:c6:be:35:33:21:27:
9a:dd:ff:c3:d2:5c:7d:fd:a4:96:82:d1:fa:a2:70:7b:db:50:
37:53:27:cb:95:01:62:f5:93:55:f4:5e:1f:de:6c:55:17:7c:
a1:86:6a:93:a9:a0:f0:3c:00:e0:4a:26:ca:31:f5:b2:d7:c7:
58:5d:3e:f9:d2:9e:a7:14:e1:9e:20:f7:56:82:f3:08:b5:72:
90:36:9a:26:f8:6c:f9:ab:de:00:34:b0:57:a8:52:fc:42:5b:
81:da:d5:3d:95:33:28:fe:e3:12:64:34:be:7a:0b:20:30:68:
23:78:9a:af:de:cf:bb:f0:5d:ac:be:ac:da:e0:3b:00:1e:54:
df:d2:5d:5d:c3:23:ef:2a:3e:f9:5a:4e:75:30:34:fd:e3:37:
89:5e:a0:51:93:50:fe:19:7e:2b:c5:89:a9:3a:4f:e9:4d:4e:
d6:30:2e:ee:91:dd:68:26:dd:6d:b2:9e:a3:ec:5a:ef:68:4b:
e9:7a:86:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATetp37MDQ+bZCcOADBXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4M2VmNzE0Mjk5OGU0ZTY1NjYwNTNlMmM2M2E3MDgwOGM2
ZWEyMzcwHhcNMjYwODI2MjMwMDQzWhcNMjYwODI3MjMwMDQzWjAzMTEwLwYDVQQD
EyhmYzBhMzc1MDQ3YjI0NjYxODU4NmNiOWU1MDUyNDRiY2RjYjUwNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1bybp0MMr0qPnXl1s9XkUYqhoh
tq3hsAzjaJm86DNV6C+EM7KpiD9b8T2/84SI+TkzS2+i+wmjz2zkhbl8dGJTXdXU
cDdxXCi2nd0rofcJGa9GT/Ky3/hf5yCBrRTy52kyTQs5h+WXCDO8zZHbSAySGEi+
QMMfGGRaxrnFnHXobWyY8Z/XWJL2D64nF44725+LoaUOGGqSApmjkNp+XjruVHz9
3DMQRKpLlWMy8OywIOKUWiehhivc9EPkSlTqSgOi7MegZ32i3f8WDKqSc5dlDAIl
AlmjQsZDH6BvoXham+zrBmkrJ6M02vGY/crgBcBCVltqJM/Pb97ANKXU0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwKN1BHskZhhYbLnlBSRLzctQXrMB8GA1UdIwQY
MBaAFNg+9xQpmOTmVmBT4sY6cICMbqI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjIt
N2Y3NWExYjEwZWMzLzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjItN2Y3NWExYjEwZWMz
LzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoFyqxov
FOsNlKQxThJFhWTS27mwIsn+qA+TeZwbTn7DBZ07eBEWPHkDMN8V9PgwF57uMsAe
+c7wRouLfBris6i/xr41MyEnmt3/w9Jcff2kloLR+qJwe9tQN1Mny5UBYvWTVfRe
H95sVRd8oYZqk6mg8DwA4EomyjH1stfHWF0++dKepxThniD3VoLzCLVykDaaJvhs
+aveADSwV6hS/EJbgdrVPZUzKP7jEmQ0vnoLIDBoI3iar97Pu/BdrL6s2uA7AB5U
39JdXcMj7yo++VpOdTA0/eM3iV6gUZNQ/hl+K8WJqTpP6U1O1jAu7pHdaCbdbbKe
o+xa72hL6XqGVw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:17:59 2026 by rpki-client