Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: F+Y4fkIQqCOgPzSaO9QeRrPB6p9UPwrtHkVfP05YpmY=
Subject key identifier: AF:D9:19:0C:46:1D:E9:73:F2:6F:58:6A:36:A1:4E:FA:8C:0E:C3:63
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01A001A65C203CAFF7849E7BBDAEF88D7928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 19:01:14 +0000
Manifest this update: Fri 14 Aug 2026 19:01:14 +0000
Manifest next update: Sat 15 Aug 2026 19:01:14 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: SiyFhxfmk6lDHlgOoClblgUM/sNRep7QhToLErkfWTQ=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:5c:20:3c:af:f7:84:9e:7b:bd:ae:f8:8d:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Aug 14 19:01:14 2026 GMT
Not After : Aug 15 19:01:14 2026 GMT
Subject: CN=afd9190c461de973f26f586a36a14efa8c0ec363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:17:b2:80:c0:9f:33:ef:26:70:9b:d0:a7:
c5:27:e5:f0:94:1a:9a:af:d3:03:6a:5e:99:37:0b:
14:96:41:a5:9b:31:16:3e:59:8b:1e:e7:e5:3b:f4:
91:72:dd:e8:64:f4:e2:e9:8d:59:45:92:18:f3:a5:
54:0d:2f:b1:8e:80:c8:0c:28:41:b0:55:03:67:74:
8b:5c:15:9e:21:4e:26:39:76:cf:76:e9:74:84:83:
af:b1:96:9d:0e:5f:08:85:14:c4:09:d3:93:08:58:
9a:97:d3:2f:e1:03:01:35:98:c5:8d:d6:9d:cc:39:
9f:8b:23:76:0d:10:2b:1d:8f:7d:2c:39:08:66:4c:
92:f6:4f:8d:e2:60:3c:a1:8f:19:44:e6:8a:d3:fb:
ed:40:e9:36:e8:a5:7f:fc:83:92:7d:17:68:de:e0:
29:df:65:06:d8:61:48:e9:2b:46:26:49:49:85:c0:
ac:6e:7d:97:6a:46:3a:c9:1c:09:f4:ee:b5:8f:79:
b0:9f:85:d4:28:56:51:28:f1:8b:7e:9c:e7:8c:8a:
31:3d:bd:c3:6f:f5:f0:cc:cc:c5:9e:16:b4:91:44:
cb:20:b6:ed:d9:0a:f7:ec:20:50:78:91:46:2c:49:
ac:37:cb:b9:ec:4d:10:9d:ea:83:03:95:8d:83:de:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:19:0C:46:1D:E9:73:F2:6F:58:6A:36:A1:4E:FA:8C:0E:C3:63
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b4:f5:00:5f:38:38:c2:f3:98:18:6e:82:d1:03:14:2c:2b:
1a:3b:c0:58:d5:c7:d5:d6:a8:f3:e8:54:92:a0:f5:fc:70:72:
34:5c:b8:63:dc:bc:f6:25:db:9c:41:2a:59:6f:3a:f7:b2:e8:
15:36:b2:f2:65:f4:07:10:97:03:f1:83:87:26:4a:45:60:82:
6e:bc:9e:f3:10:0b:3a:12:d2:4f:75:43:30:62:48:50:e6:08:
7c:76:cd:3e:a5:02:71:d8:7e:55:5a:15:5c:7b:09:97:b8:2c:
bd:ab:0d:ed:5a:2d:93:03:ed:57:47:85:ba:27:e6:a5:a8:a4:
72:37:e2:fc:ca:d8:21:74:0f:47:08:20:6b:00:2c:d9:18:8c:
95:11:ee:97:82:4c:37:e8:69:67:37:d2:7b:e0:0e:f1:7e:3b:
09:99:6a:e3:67:82:f5:78:b9:c5:65:f8:4c:47:41:73:b1:39:
88:ea:74:89:65:13:bc:9a:4a:4c:62:91:dc:a9:d5:e7:72:bc:
fb:7c:8a:e2:7f:bc:67:ff:a4:c9:92:4f:ff:bd:0a:18:7a:db:
2e:78:bc:9e:c8:12:0a:8b:c5:e4:75:0f:17:54:1d:fc:1a:42:
63:0d:e0:ee:65:ca:00:fa:5b:d0:22:9d:82:35:b6:bc:0a:79:
f6:89:87:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABplwgPK/3hJ57va74jXkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk
M2EzNDcwHhcNMjYwODE0MTkwMTE0WhcNMjYwODE1MTkwMTE0WjAzMTEwLwYDVQQD
EyhhZmQ5MTkwYzQ2MWRlOTczZjI2ZjU4NmEzNmExNGVmYThjMGVjMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1sXsoDAnzPvJnCb0KfFJ+XwlBqa
r9MDal6ZNwsUlkGlmzEWPlmLHuflO/SRct3oZPTi6Y1ZRZIY86VUDS+xjoDIDChB
sFUDZ3SLXBWeIU4mOXbPdul0hIOvsZadDl8IhRTECdOTCFial9Mv4QMBNZjFjdad
zDmfiyN2DRArHY99LDkIZkyS9k+N4mA8oY8ZROaK0/vtQOk26KV//IOSfRdo3uAp
32UG2GFI6StGJklJhcCsbn2XakY6yRwJ9O61j3mwn4XUKFZRKPGLfpznjIoxPb3D
b/XwzMzFnha0kUTLILbt2Qr37CBQeJFGLEmsN8u57E0QneqDA5WNg962+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/ZGQxGHelz8m9YajahTvqMDsNjMB8GA1UdIwQY
MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt
ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx
LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLT1AF84
OMLzmBhugtEDFCwrGjvAWNXH1dao8+hUkqD1/HByNFy4Y9y89iXbnEEqWW8697Lo
FTay8mX0BxCXA/GDhyZKRWCCbrye8xALOhLST3VDMGJIUOYIfHbNPqUCcdh+VVoV
XHsJl7gsvasN7VotkwPtV0eFuifmpaikcjfi/MrYIXQPRwggawAs2RiMlRHul4JM
N+hpZzfSe+AO8X47CZlq42eC9Xi5xWX4TEdBc7E5iOp0iWUTvJpKTGKR3KnV53K8
+3yK4n+8Z/+kyZJP/70KGHrbLni8nsgSCovF5HUPF1Qd/BpCYw3g7mXKAPpb0CKd
gjW2vAp59omH9A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:57 2026 by rpki-client