Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: j1W04FZomEC4W9j5mjcA+uWs0IUMDEZSCNnMBr77j2A=
Subject key identifier: A6:2D:8D:35:62:2A:52:A4:50:D2:32:D1:5E:30:03:DE:67:3E:9D:51
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019FDD62DE1955C5F180AC9BD80BDDAAB590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0D71
Signing time: Fri 07 Aug 2026 18:01:11 +0000
Manifest this update: Fri 07 Aug 2026 18:01:11 +0000
Manifest next update: Sat 08 Aug 2026 18:01:11 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: WOYQKUIZAmD6LS4F3bI/C8wHOIzJUQyfpDv6ZnRdX3A=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:62:de:19:55:c5:f1:80:ac:9b:d8:0b:dd:aa:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Aug 7 18:01:11 2026 GMT
Not After : Aug 8 18:01:11 2026 GMT
Subject: CN=a62d8d35622a52a450d232d15e3003de673e9d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:ab:bf:c5:09:9b:08:8e:dd:88:e0:f9:87:
e8:81:9d:3b:fc:57:fd:8b:36:44:73:05:aa:b0:e7:
a0:cf:c8:98:5a:90:5d:89:ab:65:16:75:d1:67:d9:
0c:5b:c6:9b:10:d3:ac:d4:da:8a:3c:6a:17:6e:d7:
a3:48:4c:a5:ec:c0:45:4f:00:c9:cc:93:4e:77:56:
53:1f:36:35:ba:64:7f:18:00:3b:bd:06:20:f9:ee:
78:ff:71:3d:d4:b7:6d:8a:7b:96:ce:0e:00:50:cb:
52:97:38:99:bf:a3:bb:0c:bc:0c:44:bb:f2:3b:40:
43:8d:8b:2e:7a:e4:5c:ca:ba:0d:7c:c9:6b:d7:ab:
2a:dc:30:77:7f:a3:5b:9b:e7:0f:98:d0:c8:bf:f0:
ae:e0:dc:09:cd:bd:19:de:d3:39:46:eb:8b:0d:92:
7b:d8:ed:0a:64:fc:c7:fc:fd:02:f2:78:35:ed:02:
24:b0:e6:95:f0:64:ff:cf:4b:11:a3:84:10:a5:59:
d5:1a:80:76:22:96:37:21:08:ae:6f:2a:90:46:4b:
2e:3a:a6:4f:fa:b3:d1:9b:a0:7a:7f:ef:48:95:bf:
98:74:e9:ad:3c:a7:e9:ea:fd:03:71:7c:3e:85:b4:
46:c9:da:df:46:12:50:be:52:14:d6:8f:d7:9a:cf:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:8D:35:62:2A:52:A4:50:D2:32:D1:5E:30:03:DE:67:3E:9D:51
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:2a:3f:b5:ef:1f:f5:c9:38:f6:25:a5:9f:9b:93:65:84:
38:28:56:28:c1:62:8f:91:0f:58:25:83:30:96:3c:31:5a:59:
71:08:63:4a:af:b6:dc:06:93:c8:08:9f:99:42:e7:a0:1c:1b:
05:60:5a:2d:4e:23:9d:1a:08:b6:b5:1e:79:f5:5e:09:37:ff:
57:bd:95:d1:b1:e2:f6:19:04:ec:57:3a:08:9b:7f:44:68:a7:
40:7a:17:bf:ac:a1:87:6a:21:1d:38:e7:68:90:21:25:98:12:
89:a4:4b:f4:fa:53:77:c0:2e:1a:e2:91:48:76:0b:e7:8b:d1:
4d:9d:24:42:a2:cc:78:5a:a6:20:5c:26:10:fa:35:0e:82:8f:
6f:a5:78:09:3a:56:58:07:df:6a:58:bf:63:a4:8b:75:38:f6:
27:46:f9:c7:26:5d:57:5f:8c:f3:32:8a:03:24:73:f8:06:56:
b0:35:2b:d9:bf:59:b0:2e:cc:ac:13:72:f1:ed:8d:e2:ce:e8:
6e:c8:01:ad:29:69:cc:50:99:3a:14:89:b4:d2:27:a0:2d:a8:
3a:55:44:77:b0:dc:30:8c:02:02:7e:1e:66:7e:51:80:58:0c:
09:c2:34:94:a2:96:bd:e6:8d:14:c8:03:2a:9d:8d:af:e6:38:
87:88:8c:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/dYt4ZVcXxgKyb2AvdqrWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjYwODA3MTgwMTExWhcNMjYwODA4MTgwMTExWjAzMTEwLwYDVQQD
EyhhNjJkOGQzNTYyMmE1MmE0NTBkMjMyZDE1ZTMwMDNkZTY3M2U5ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXCrv8UJmwiO3Yjg+YfogZ07/Ff9
izZEcwWqsOegz8iYWpBdiatlFnXRZ9kMW8abENOs1NqKPGoXbtejSEyl7MBFTwDJ
zJNOd1ZTHzY1umR/GAA7vQYg+e54/3E91LdtinuWzg4AUMtSlziZv6O7DLwMRLvy
O0BDjYsueuRcyroNfMlr16sq3DB3f6Nbm+cPmNDIv/Cu4NwJzb0Z3tM5RuuLDZJ7
2O0KZPzH/P0C8ng17QIksOaV8GT/z0sRo4QQpVnVGoB2IpY3IQiubyqQRksuOqZP
+rPRm6B6f+9Ilb+YdOmtPKfp6v0DcXw+hbRGydrfRhJQvlIU1o/Xms9VmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYtjTViKlKkUNIy0V4wA95nPp1RMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsQqP7Xv
H/XJOPYlpZ+bk2WEOChWKMFij5EPWCWDMJY8MVpZcQhjSq+23AaTyAifmULnoBwb
BWBaLU4jnRoItrUeefVeCTf/V72V0bHi9hkE7Fc6CJt/RGinQHoXv6yhh2ohHTjn
aJAhJZgSiaRL9PpTd8AuGuKRSHYL54vRTZ0kQqLMeFqmIFwmEPo1DoKPb6V4CTpW
WAffali/Y6SLdTj2J0b5xyZdV1+M8zKKAyRz+AZWsDUr2b9ZsC7MrBNy8e2N4s7o
bsgBrSlpzFCZOhSJtNInoC2oOlVEd7DcMIwCAn4eZn5RgFgMCcI0lKKWveaNFMgD
Kp2Nr+Y4h4iMjw==
-----END CERTIFICATE-----
Generated at Sat Aug 8 01:48:31 2026 by rpki-client