Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: +rElTsebBQtWT5l+DWyGMX7xfZp4y8Y59kcnA4luGfU=
Subject key identifier: A8:66:52:FC:A2:93:05:9F:9A:96:30:D8:BA:0D:50:F0:C8:CE:C0:D1
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 01A001DD55DD821254A1D7888B7D1F613CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0BA9
Signing time: Fri 14 Aug 2026 20:01:17 +0000
Manifest this update: Fri 14 Aug 2026 20:01:17 +0000
Manifest next update: Sat 15 Aug 2026 20:01:17 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: REVWTRFhZkJKHZSKxO7L/JdNmfoBOuF9Qg6Y3ZmV/Us=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:55:dd:82:12:54:a1:d7:88:8b:7d:1f:61:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Aug 14 20:01:17 2026 GMT
Not After : Aug 15 20:01:17 2026 GMT
Subject: CN=a86652fca293059f9a9630d8ba0d50f0c8cec0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:db:e1:ea:9c:ef:bc:7f:f9:7b:11:05:4f:
bf:31:f3:84:5e:83:f6:7c:12:f8:94:21:36:5a:1d:
bc:0a:f1:d1:84:9a:3e:7f:0c:be:b2:e6:34:99:7d:
24:b9:14:7c:b6:44:4e:77:92:ad:f1:61:dc:e9:91:
77:37:39:57:d2:c5:a1:3c:ca:fc:4a:3b:53:31:da:
33:b2:04:22:e9:6b:30:25:b8:ac:37:f1:73:d1:dc:
a0:4a:2b:19:b7:bd:eb:ef:c4:62:24:5d:5b:e8:b4:
95:0c:9d:ca:25:e0:33:ae:5c:50:02:37:a7:0b:20:
2b:84:1f:d2:6a:ce:1c:d1:1e:7b:23:39:b5:93:15:
18:51:11:f7:f9:ab:4e:9e:98:f7:a0:28:6b:97:fe:
9a:2c:3c:8e:37:6c:85:7c:b8:63:6d:75:da:69:37:
28:1a:cd:8c:0b:15:cf:00:38:0c:5c:d9:4a:2b:02:
c3:d7:06:0b:df:74:f1:54:d5:7f:e0:29:36:3e:2f:
69:c4:2c:c7:4e:7f:ed:76:3c:06:da:e0:1b:a6:4f:
ce:2e:25:b8:1d:be:66:11:5e:0b:1f:b6:7d:bf:43:
8e:eb:35:22:27:73:87:07:c1:5f:c7:d6:ec:14:39:
61:87:90:0e:39:ef:00:c8:e7:8a:fd:1b:c6:19:e3:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:52:FC:A2:93:05:9F:9A:96:30:D8:BA:0D:50:F0:C8:CE:C0:D1
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:4c:d5:21:7f:2a:9d:e2:13:a6:5a:a2:c0:bf:dc:72:15:
30:42:d1:68:d5:3b:48:18:f3:ef:bc:be:67:f4:81:6d:04:15:
4d:f6:b9:f5:67:af:ad:37:53:d7:91:1c:4d:79:22:ad:98:29:
fc:d0:3c:ec:9a:cd:9d:1e:46:5f:c7:14:a0:04:6e:1d:57:57:
e6:6f:c4:9d:a3:db:bb:7f:99:91:28:c9:b5:53:d6:fb:f7:18:
6c:74:08:8e:28:d2:ab:e3:20:de:e4:14:72:b1:c1:9d:0e:f7:
ca:3c:30:0f:39:ec:be:4b:b2:6c:00:29:b4:51:ca:a8:e4:dd:
ed:b9:82:72:04:51:7c:4b:8a:d3:54:34:84:f5:bc:f9:01:d6:
85:dd:90:c7:61:bf:49:22:c1:92:3c:6a:ea:73:8d:70:1c:64:
6d:a0:4a:69:cb:5f:08:e4:e5:38:d5:8a:d5:9b:d6:c2:66:02:
89:6c:6d:e5:5a:3a:3b:15:f5:ae:22:17:ea:c8:74:9e:14:a6:
72:5e:68:c1:77:4f:fe:c4:e2:e9:be:91:2f:a0:b3:8a:1d:b8:
bf:c4:08:c0:e2:5e:24:92:8f:c4:6f:3d:f8:5a:5c:15:8d:8e:
29:e7:4c:15:16:5b:3c:bc:47:8c:a0:5f:cc:ea:52:cd:f2:7d:
44:a6:91:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3VXdghJUodeIi30fYTz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjYwODE0MjAwMTE3WhcNMjYwODE1MjAwMTE3WjAzMTEwLwYDVQQD
EyhhODY2NTJmY2EyOTMwNTlmOWE5NjMwZDhiYTBkNTBmMGM4Y2VjMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm/b4eqc77x/+XsRBU+/MfOEXoP2
fBL4lCE2Wh28CvHRhJo+fwy+suY0mX0kuRR8tkROd5Kt8WHc6ZF3NzlX0sWhPMr8
SjtTMdozsgQi6WswJbisN/Fz0dygSisZt73r78RiJF1b6LSVDJ3KJeAzrlxQAjen
CyArhB/Sas4c0R57Izm1kxUYURH3+atOnpj3oChrl/6aLDyON2yFfLhjbXXaaTco
Gs2MCxXPADgMXNlKKwLD1wYL33TxVNV/4Ck2Pi9pxCzHTn/tdjwG2uAbpk/OLiW4
Hb5mEV4LH7Z9v0OO6zUiJ3OHB8Ffx9bsFDlhh5AOOe8AyOeK/RvGGePBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhmUvyikwWfmpYw2LoNUPDIzsDRMB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt1M1SF/
Kp3iE6ZaosC/3HIVMELRaNU7SBjz77y+Z/SBbQQVTfa59WevrTdT15EcTXkirZgp
/NA87JrNnR5GX8cUoARuHVdX5m/EnaPbu3+ZkSjJtVPW+/cYbHQIjijSq+Mg3uQU
crHBnQ73yjwwDznsvkuybAAptFHKqOTd7bmCcgRRfEuK01Q0hPW8+QHWhd2Qx2G/
SSLBkjxq6nONcBxkbaBKactfCOTlONWK1ZvWwmYCiWxt5Vo6OxX1riIX6sh0nhSm
cl5owXdP/sTi6b6RL6Czih24v8QIwOJeJJKPxG89+FpcFY2OKedMFRZbPLxHjKBf
zOpSzfJ9RKaRLQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:56 2026 by rpki-client