Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File: 2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier: aFXdFW+pq9CYR+NiopIx7kx3qzzErAL3AcAJAGVElh4=
Subject key identifier: D9:B5:D2:A9:B5:D6:A3:B1:AB:49:FC:44:20:00:2F:E0:0D:ED:A5:B4
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer: /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial: 01A127678D5844045283E006ABA20DA0AB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number: A4
Signing time: Sat 10 Oct 2026 20:00:59 +0000
Manifest this update: Sat 10 Oct 2026 20:00:59 +0000
Manifest next update: Sun 11 Oct 2026 20:00:59 +0000
Files and hashes: 1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: 9wAxRoztH4VzbVW8cj3ZY59Cku9srQija2SK27LqIB0=)
2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:8d:58:44:04:52:83:e0:06:ab:a2:0d:a0:ab:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Validity
Not Before: Oct 10 20:00:59 2026 GMT
Not After : Oct 11 20:00:59 2026 GMT
Subject: CN=d9b5d2a9b5d6a3b1ab49fc4420002fe00deda5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:24:44:94:68:72:dd:d8:1d:d7:c3:e0:60:
36:28:19:87:3e:99:29:34:a8:48:8d:84:97:ca:3e:
ad:b6:77:16:37:38:7d:fc:03:f5:51:f6:bd:63:10:
bc:06:1e:f2:32:86:d9:3e:60:63:d4:96:a9:a5:9b:
fb:44:28:d1:04:79:48:6a:91:f5:17:ff:73:21:5f:
f1:c2:bd:71:d1:07:81:d0:1f:64:78:dd:4f:ff:83:
b4:ed:d5:31:d4:cb:db:e5:12:68:a0:45:87:f5:04:
da:5e:d4:a6:56:cd:f0:3a:18:49:14:73:58:92:eb:
65:c4:7f:76:52:94:19:68:e5:16:81:8b:8a:2d:f3:
72:c9:25:54:66:a2:b1:2f:f7:39:5f:47:e0:bb:ce:
9f:4d:85:28:0d:a6:87:15:94:ac:4d:a5:29:1f:ea:
0c:f8:6d:56:91:7d:71:2c:65:eb:ab:18:ca:b0:73:
08:b9:12:56:97:fe:5e:0b:c1:e4:c9:13:4b:43:14:
7f:fc:4b:b5:36:1c:f7:0b:93:9f:a6:b5:b2:c7:8b:
99:97:07:86:f0:46:a8:e1:34:22:fb:e8:51:ff:18:
b0:20:81:68:f8:17:f8:d9:85:9b:3c:dc:79:aa:db:
77:ee:17:0c:23:c6:ec:5f:3a:89:ed:e8:24:fa:bf:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:D2:A9:B5:D6:A3:B1:AB:49:FC:44:20:00:2F:E0:0D:ED:A5:B4
X509v3 Authority Key Identifier:
keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:91:1b:dd:de:2e:f1:76:db:e2:22:18:f0:e7:2b:9d:29:
a3:67:f7:70:97:6a:67:f1:5a:7d:82:77:a8:1c:23:08:74:ac:
b4:56:7e:1a:7d:1d:64:52:89:ee:68:38:f1:5a:6b:8c:bb:0d:
62:de:32:fe:de:5f:de:74:2b:a8:00:bb:39:0f:ad:e4:a4:26:
c4:a9:3f:6c:ae:ea:d1:30:bb:23:ae:3b:b3:c8:d2:18:26:18:
54:62:ce:df:0d:2f:43:44:6b:e5:74:c7:d1:60:e6:c8:d8:af:
cf:30:de:0d:ec:68:40:a1:c6:14:84:9d:13:ae:2c:60:de:25:
51:ac:bc:7b:09:7c:c4:77:3d:eb:cf:42:c8:15:d0:9c:bd:50:
f1:42:f9:4c:09:88:f9:64:04:17:0d:04:63:fc:74:cc:de:b1:
26:f3:92:30:f1:87:b3:59:b0:96:93:be:be:de:8e:8f:48:ad:
39:55:7e:50:18:7a:eb:b8:5e:58:f1:95:02:d6:1b:e1:2c:d6:
b4:2b:09:c0:77:12:a9:6d:a6:61:15:40:35:19:59:41:55:e7:
15:7b:9d:f2:96:2a:90:d0:ad:fe:12:11:6c:03:9b:e3:fb:ce:
1e:b4:9e:2c:da:f7:7a:83:3c:82:0a:66:ac:09:18:32:37:c2:
ad:0a:c6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEnZ41YRARSg+AGq6INoKtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2Y5Zjg0YjI4MmM3Yzc3ODRiOWQzZDFiNjJkYmUwZDRm
ZjA5YjUwHhcNMjYxMDEwMjAwMDU5WhcNMjYxMDExMjAwMDU5WjAzMTEwLwYDVQQD
EyhkOWI1ZDJhOWI1ZDZhM2IxYWI0OWZjNDQyMDAwMmZlMDBkZWRhNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1YkRJRoct3YHdfD4GA2KBmHPpkp
NKhIjYSXyj6ttncWNzh9/AP1Ufa9YxC8Bh7yMobZPmBj1JappZv7RCjRBHlIapH1
F/9zIV/xwr1x0QeB0B9keN1P/4O07dUx1Mvb5RJooEWH9QTaXtSmVs3wOhhJFHNY
kutlxH92UpQZaOUWgYuKLfNyySVUZqKxL/c5X0fgu86fTYUoDaaHFZSsTaUpH+oM
+G1WkX1xLGXrqxjKsHMIuRJWl/5eC8HkyRNLQxR//Eu1Nhz3C5OfprWyx4uZlweG
8Eao4TQi++hR/xiwIIFo+Bf42YWbPNx5qtt37hcMI8bsXzqJ7egk+r8tgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm10qm11qOxq0n8RCAAL+AN7aW0MB8GA1UdIwQY
MBaAFNp/n4SygsfHeEudPRti2+DU/wm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4tZmhMS0N4OGQ0UzUwOUcyTGI0TlRfQ2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZGFmYjctMTU3NC00NDI1LTk0ODkt
NmFkNGVjOWZmZTc3LzEvMm4tZmhMS0N4OGQ0UzUwOUcyTGI0TlRfQ2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mZGFmYjctMTU3NC00NDI1LTk0ODktNmFkNGVjOWZmZTc3
LzEvMm4tZmhMS0N4OGQ0UzUwOUcyTGI0TlRfQ2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS++RG93e
LvF22+IiGPDnK50po2f3cJdqZ/FafYJ3qBwjCHSstFZ+Gn0dZFKJ7mg48VprjLsN
Yt4y/t5f3nQrqAC7OQ+t5KQmxKk/bK7q0TC7I647s8jSGCYYVGLO3w0vQ0Rr5XTH
0WDmyNivzzDeDexoQKHGFISdE64sYN4lUay8ewl8xHc9689CyBXQnL1Q8UL5TAmI
+WQEFw0EY/x0zN6xJvOSMPGHs1mwlpO+vt6Oj0itOVV+UBh667heWPGVAtYb4SzW
tCsJwHcSqW2mYRVANRlZQVXnFXud8pYqkNCt/hIRbAOb4/vOHrSeLNr3eoM8ggpm
rAkYMjfCrQrG8g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:08 2026 by rpki-client