Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: hum9K8kKY51ot8/PSYk4bw4AkVRBqNmC6ndJerZVRsY=
Subject key identifier: F0:C5:66:7D:1D:10:8D:81:12:B7:B8:76:44:42:20:DD:2C:70:A1:F1
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 01A0017014482642903A6C280CB3115E00A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0DCA
Signing time: Fri 14 Aug 2026 18:01:57 +0000
Manifest this update: Fri 14 Aug 2026 18:01:57 +0000
Manifest next update: Sat 15 Aug 2026 18:01:57 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: 1U7nB2xvBsW8jC6NRsyI7xWjpRL9Yij/D+4C31zLB3I=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:14:48:26:42:90:3a:6c:28:0c:b3:11:5e:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Aug 14 18:01:57 2026 GMT
Not After : Aug 15 18:01:57 2026 GMT
Subject: CN=f0c5667d1d108d8112b7b876444220dd2c70a1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:12:6d:29:36:b8:5c:e5:69:e4:18:77:09:
87:90:ff:7a:0e:60:54:d6:d7:43:81:9a:e5:ea:e3:
b2:41:47:59:92:ae:0c:3c:34:63:5e:62:34:69:50:
7a:72:14:b8:52:b0:48:2c:d1:d9:de:e4:4f:22:9e:
07:68:f7:57:55:ff:4d:c6:e0:86:1d:8a:98:0c:7c:
25:6b:a9:6b:ce:44:7b:80:3a:5b:aa:48:dc:5f:4d:
fe:5e:4b:63:fc:f9:42:50:80:49:87:57:23:fd:ad:
a9:ba:e6:b1:77:90:93:85:d9:6a:3e:bd:cf:51:ea:
12:fa:ff:2b:ab:8b:0e:eb:0f:e3:01:49:de:f6:a9:
bc:7c:86:11:75:ec:f2:c5:cc:10:4b:c2:2a:31:89:
17:c7:ed:2a:e5:29:67:1e:b6:29:b1:69:e8:f3:e8:
e2:78:91:3b:e4:d7:2c:a9:21:7b:84:0b:ff:72:89:
db:c0:8e:98:7c:5f:b8:86:c8:2a:83:2b:af:db:00:
0f:dc:0b:17:a8:99:07:e6:01:bf:65:69:dd:07:01:
bd:eb:11:48:f7:a7:2f:c8:7a:f1:5e:a3:b7:bd:c5:
e3:a8:cf:df:1e:0f:90:4c:cf:2b:60:c7:bb:a9:cb:
b3:68:0e:7c:7e:3a:11:20:1e:b6:4c:8a:a0:da:4d:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:66:7D:1D:10:8D:81:12:B7:B8:76:44:42:20:DD:2C:70:A1:F1
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9e:b6:c9:53:f1:a3:17:ec:c7:bb:71:d7:8a:d1:4c:db:df:
79:db:d1:41:db:25:e2:9a:b0:a6:2f:50:6e:a7:1e:a4:d1:21:
ae:f3:4f:c3:b6:4c:02:a8:be:ea:28:15:09:c6:b7:4a:03:dc:
88:45:87:e3:85:b1:63:43:c9:49:e7:e3:9b:53:b9:02:18:12:
57:5f:ca:a9:31:90:af:95:67:06:ae:b3:f8:45:e8:76:99:a4:
80:69:d6:9b:ca:bb:ad:65:af:45:65:3f:83:c2:65:b9:57:21:
38:c5:b0:81:d4:11:3f:37:87:04:dc:e7:31:53:03:bf:7f:4e:
89:59:ac:03:b4:1e:f6:82:b1:48:3d:58:b9:21:fa:03:67:13:
0c:83:6d:e5:b9:9f:61:05:4e:d3:f7:f9:ff:b1:80:fa:55:9d:
ff:f0:8f:ee:21:a6:aa:a5:09:27:ea:2e:72:43:ca:34:db:3c:
74:4e:74:86:eb:92:33:3f:3f:a9:d1:0a:e1:d9:ad:28:70:9e:
24:b0:d1:92:e0:08:ef:2d:69:04:0f:d5:05:f5:4d:a9:89:8c:
8c:fb:c4:fd:fa:c8:29:63:75:f2:01:9c:f1:48:44:ef:23:06:
d1:b0:7f:e3:a0:e3:07:35:91:42:03:bb:98:59:5a:ff:54:85:
39:32:ff:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcBRIJkKQOmwoDLMRXgCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz
YWU4ZWUwHhcNMjYwODE0MTgwMTU3WhcNMjYwODE1MTgwMTU3WjAzMTEwLwYDVQQD
EyhmMGM1NjY3ZDFkMTA4ZDgxMTJiN2I4NzY0NDQyMjBkZDJjNzBhMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2QSbSk2uFzlaeQYdwmHkP96DmBU
1tdDgZrl6uOyQUdZkq4MPDRjXmI0aVB6chS4UrBILNHZ3uRPIp4HaPdXVf9NxuCG
HYqYDHwla6lrzkR7gDpbqkjcX03+Xktj/PlCUIBJh1cj/a2puuaxd5CThdlqPr3P
UeoS+v8rq4sO6w/jAUne9qm8fIYRdezyxcwQS8IqMYkXx+0q5SlnHrYpsWno8+ji
eJE75NcsqSF7hAv/conbwI6YfF+4hsgqgyuv2wAP3AsXqJkH5gG/ZWndBwG96xFI
96cvyHrxXqO3vcXjqM/fHg+QTM8rYMe7qcuzaA58fjoRIB62TIqg2k18JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDFZn0dEI2BEre4dkRCIN0scKHxMB8GA1UdIwQY
MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt
YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4
LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJ62yVPx
oxfsx7tx14rRTNvfedvRQdsl4pqwpi9QbqcepNEhrvNPw7ZMAqi+6igVCca3SgPc
iEWH44WxY0PJSefjm1O5AhgSV1/KqTGQr5VnBq6z+EXodpmkgGnWm8q7rWWvRWU/
g8JluVchOMWwgdQRPzeHBNznMVMDv39OiVmsA7Qe9oKxSD1YuSH6A2cTDINt5bmf
YQVO0/f5/7GA+lWd//CP7iGmqqUJJ+ouckPKNNs8dE50huuSMz8/qdEK4dmtKHCe
JLDRkuAI7y1pBA/VBfVNqYmMjPvE/frIKWN18gGc8UhE7yMG0bB/46DjBzWRQgO7
mFla/1SFOTL/CQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:56 2026 by rpki-client