Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: r29xclD0TpwSYq5Wv7VtlyTQsBmq3JUSqFuP0fF9Ozg=
Subject key identifier: DA:78:BF:34:76:9C:28:CC:25:23:23:EC:59:19:14:03:24:C4:2C:F5
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019F9EBA4D779F69F5D9428A80CE9A0FABF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 0283
Signing time: Sun 26 Jul 2026 14:00:37 +0000
Manifest this update: Sun 26 Jul 2026 14:00:37 +0000
Manifest next update: Mon 27 Jul 2026 14:00:37 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: NGevUVrR2oIJilvGQABLNwLL6IYoxUpbva5R0iDfvik=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:4d:77:9f:69:f5:d9:42:8a:80:ce:9a:0f:ab:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Jul 26 14:00:37 2026 GMT
Not After : Jul 27 14:00:37 2026 GMT
Subject: CN=da78bf34769c28cc252323ec5919140324c42cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:61:6c:16:26:61:fa:4e:02:5f:05:83:5d:
0b:74:c5:ca:12:1e:16:63:48:3f:d3:d3:6f:23:d4:
c5:a3:e1:66:75:b9:b5:d1:71:6c:2b:89:32:f3:c7:
aa:ca:3d:c9:40:2a:30:35:23:0b:bc:00:29:e2:4e:
cf:36:bb:34:a6:e1:3e:a4:85:b4:ba:07:9f:41:78:
bc:04:b3:39:0c:b3:c7:6e:22:78:ca:fc:f3:e5:cf:
81:c1:ce:fa:24:7d:e1:af:4e:18:80:c9:4b:af:4b:
6b:36:6a:d4:a3:c6:11:13:0e:25:2c:12:21:9a:e8:
c2:d8:ef:9c:46:b2:dc:bc:d8:82:fe:f1:e4:f2:d0:
2d:34:93:53:37:7b:21:53:0c:20:4b:df:bb:21:7a:
de:2c:5e:22:9c:c7:7c:54:a0:ed:fc:62:e3:f1:fe:
b8:6d:33:ff:1a:35:d9:cc:e0:96:7b:f6:d2:c9:7a:
4c:49:1c:97:ea:c4:60:02:b5:91:8c:9a:42:ee:6a:
57:83:8b:53:fa:83:27:d7:16:36:0f:bd:c5:b1:98:
80:ce:b6:90:5e:f5:f4:f0:a4:26:3f:2b:34:81:d7:
0b:11:6d:51:93:d1:40:96:81:58:29:a5:96:11:a1:
c2:da:9d:6c:82:5a:28:81:7d:7c:eb:12:2c:a2:38:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:BF:34:76:9C:28:CC:25:23:23:EC:59:19:14:03:24:C4:2C:F5
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:16:1c:06:ae:1e:2e:b5:9d:2d:8b:94:4f:1b:d7:45:da:05:
56:48:41:84:e6:dc:0a:1d:7a:61:8e:4b:88:fd:39:63:c5:a8:
ab:0e:0c:91:56:37:94:30:33:6f:90:f6:62:43:b6:9a:59:a7:
f6:d6:a2:76:45:d4:e9:50:85:a8:f4:99:63:64:62:45:c6:ca:
b6:26:71:d4:45:f7:79:2b:d0:f5:1b:ec:aa:13:d6:a5:bd:a5:
31:1a:2b:1d:ec:af:f0:3d:6a:7d:57:11:b5:1e:75:40:7c:10:
f4:66:2d:39:c7:01:41:f3:d5:13:9b:f8:f1:49:04:c6:6a:27:
a1:50:38:b8:6c:66:30:f2:19:68:20:61:9c:64:aa:c9:9d:e7:
24:79:bf:51:18:e6:ec:ba:32:a4:cf:6d:de:03:2b:4b:86:75:
8c:6c:b4:f7:66:d7:94:35:1c:4d:25:a2:67:08:50:6d:07:61:
e9:90:4b:b0:f2:20:c0:a1:3e:a4:8b:e1:8a:10:57:bf:73:7d:
fb:ef:40:8e:26:3b:2f:05:41:c3:f2:e4:3b:21:cb:24:a0:aa:
88:18:59:81:fb:98:83:8b:45:18:d6:96:3d:5e:03:46:2b:85:
a8:07:00:98:cb:83:38:d7:26:b2:6d:72:8d:51:a4:b7:f7:32:
be:8c:44:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+euk13n2n12UKKgM6aD6v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4
ZTNhMWMwHhcNMjYwNzI2MTQwMDM3WhcNMjYwNzI3MTQwMDM3WjAzMTEwLwYDVQQD
EyhkYTc4YmYzNDc2OWMyOGNjMjUyMzIzZWM1OTE5MTQwMzI0YzQyY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr9hbBYmYfpOAl8Fg10LdMXKEh4W
Y0g/09NvI9TFo+Fmdbm10XFsK4ky88eqyj3JQCowNSMLvAAp4k7PNrs0puE+pIW0
ugefQXi8BLM5DLPHbiJ4yvzz5c+Bwc76JH3hr04YgMlLr0trNmrUo8YREw4lLBIh
mujC2O+cRrLcvNiC/vHk8tAtNJNTN3shUwwgS9+7IXreLF4inMd8VKDt/GLj8f64
bTP/GjXZzOCWe/bSyXpMSRyX6sRgArWRjJpC7mpXg4tT+oMn1xY2D73FsZiAzraQ
XvX08KQmPys0gdcLEW1Rk9FAloFYKaWWEaHC2p1sgloogX186xIsojgCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp4vzR2nCjMJSMj7FkZFAMkxCz1MB8GA1UdIwQY
MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt
M2ZmYTM5YjRkYzBiLzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi
LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRYcBq4e
LrWdLYuUTxvXRdoFVkhBhObcCh16YY5LiP05Y8Woqw4MkVY3lDAzb5D2YkO2mlmn
9taidkXU6VCFqPSZY2RiRcbKtiZx1EX3eSvQ9RvsqhPWpb2lMRorHeyv8D1qfVcR
tR51QHwQ9GYtOccBQfPVE5v48UkExmonoVA4uGxmMPIZaCBhnGSqyZ3nJHm/URjm
7LoypM9t3gMrS4Z1jGy092bXlDUcTSWiZwhQbQdh6ZBLsPIgwKE+pIvhihBXv3N9
++9AjiY7LwVBw/LkOyHLJKCqiBhZgfuYg4tFGNaWPV4DRiuFqAcAmMuDONcmsm1y
jVGkt/cyvoxEPQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:54 2026 by rpki-client