Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: 7S1UguNx6cBKL5hiwPKCKWmL15YAbkAEfipiAowaVSQ=
Subject key identifier: 0E:26:11:6D:C1:F1:5E:A1:DC:F0:7F:FD:55:41:65:C8:61:54:D1:7A
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 01A08A55BCFCDA8923C093F1023FB4E02FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 0520
Signing time: Thu 10 Sep 2026 08:01:09 +0000
Manifest this update: Thu 10 Sep 2026 08:01:09 +0000
Manifest next update: Fri 11 Sep 2026 08:01:09 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: q8pXX3Z+EnwRNZ20pO7ugeCzU1J/Ol670KYd6JBLUvk=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:bc:fc:da:89:23:c0:93:f1:02:3f:b4:e0:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Sep 10 08:01:09 2026 GMT
Not After : Sep 11 08:01:09 2026 GMT
Subject: CN=0e26116dc1f15ea1dcf07ffd554165c86154d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:1c:12:4b:8b:0e:51:ea:e7:0a:51:38:10:
a5:69:30:ff:fe:07:d8:dd:7a:c4:a0:29:85:2a:8f:
ea:83:a1:e1:49:fc:c1:a3:0e:8f:48:2d:3a:12:dd:
75:a7:8f:fe:7e:b0:1a:2a:c9:94:2a:5c:a4:9c:e1:
70:9d:50:ba:d0:82:e3:5f:3a:a9:e5:6b:b8:a7:d1:
36:7c:90:44:6f:5d:de:4e:94:9b:26:cd:5a:50:c0:
bd:ee:8b:ab:66:a3:36:33:92:f1:a1:6e:2f:7f:2d:
35:86:ce:aa:b3:35:a1:1b:30:be:93:01:29:67:16:
e9:9f:cf:cc:7e:72:c7:9c:87:5f:fc:9d:1c:d5:21:
84:c1:65:a9:4f:49:7f:d9:90:e2:96:4d:26:17:49:
b3:43:8b:d1:47:06:ae:79:c0:07:a4:62:06:f5:b8:
11:6d:df:da:8e:f7:97:00:fb:20:79:dd:c2:62:64:
68:58:38:30:2f:04:f0:3f:92:a3:e1:b5:76:91:e9:
a6:df:3a:71:4f:5f:f1:95:72:26:7d:e2:d1:9e:33:
97:71:73:ff:17:28:1c:8f:6f:04:d1:34:33:d4:47:
cd:bf:ab:dc:c2:0d:bf:05:9f:7e:4f:e5:70:e8:fb:
3d:50:82:fc:83:b0:82:5d:86:ec:b7:dd:d7:54:c5:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:11:6D:C1:F1:5E:A1:DC:F0:7F:FD:55:41:65:C8:61:54:D1:7A
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:09:ab:55:35:f6:fb:60:0a:6a:5e:02:93:f0:f3:9a:eb:
56:ef:c9:56:df:60:1d:99:7a:07:cc:40:c2:44:ea:fe:e4:36:
06:fd:ce:ab:d0:bb:fd:77:3a:61:dd:3f:f8:a3:36:6e:76:0c:
66:88:4d:b3:81:21:1b:26:b3:5c:41:96:81:43:a3:92:73:de:
a4:73:3a:eb:21:b7:62:7a:d0:71:ee:af:cf:51:da:7d:66:fb:
dd:ec:60:cd:8b:af:a8:94:5d:3a:ca:46:9d:23:c2:b9:2d:60:
d5:96:50:ea:a7:39:4c:2b:2f:e7:5a:15:02:f4:81:32:12:3a:
b4:94:50:72:9c:6e:69:87:d5:2a:2c:9d:c9:81:0f:08:b1:98:
69:c8:ef:8f:79:20:37:49:54:de:90:f5:ff:88:c5:9f:4c:a5:
3e:f0:c0:2e:88:c2:95:be:40:0c:00:59:82:6e:0f:b5:70:d0:
b2:85:25:f5:93:39:d8:4f:fe:cb:ef:eb:a0:cc:38:6a:0d:80:
2f:42:f1:99:b1:2e:5a:15:ac:47:34:4a:29:74:26:70:b8:40:
2a:98:70:a9:de:7f:5b:d9:f4:2d:62:23:4e:78:61:61:e1:49:
99:cb:ad:25:6e:e7:df:cc:a7:a8:bf:02:69:0c:ce:2f:f3:b0:
0b:3a:d9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVbz82okjwJPxAj+04C/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5N2E3NzkzMDEyMjg3OWE3NjY0NzBkZjhkNjYwYzk4NDQy
YTk5MzIwHhcNMjYwOTEwMDgwMTA5WhcNMjYwOTExMDgwMTA5WjAzMTEwLwYDVQQD
EygwZTI2MTE2ZGMxZjE1ZWExZGNmMDdmZmQ1NTQxNjVjODYxNTRkMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC4cEkuLDlHq5wpROBClaTD//gfY
3XrEoCmFKo/qg6HhSfzBow6PSC06Et11p4/+frAaKsmUKlyknOFwnVC60ILjXzqp
5Wu4p9E2fJBEb13eTpSbJs1aUMC97ourZqM2M5LxoW4vfy01hs6qszWhGzC+kwEp
Zxbpn8/MfnLHnIdf/J0c1SGEwWWpT0l/2ZDilk0mF0mzQ4vRRwauecAHpGIG9bgR
bd/ajveXAPsged3CYmRoWDgwLwTwP5Kj4bV2kemm3zpxT1/xlXImfeLRnjOXcXP/
Fygcj28E0TQz1EfNv6vcwg2/BZ9+T+Vw6Ps9UIL8g7CCXYbst93XVMXWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4mEW3B8V6h3PB//VVBZchhVNF6MB8GA1UdIwQY
MBaAFNl6d5MBIoeadmRw341mDJhEKpkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQt
Y2Q0NTlhNjU3MjFiLzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQtY2Q0NTlhNjU3MjFi
LzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRwJq1U1
9vtgCmpeApPw85rrVu/JVt9gHZl6B8xAwkTq/uQ2Bv3Oq9C7/Xc6Yd0/+KM2bnYM
ZohNs4EhGyazXEGWgUOjknPepHM66yG3YnrQce6vz1HafWb73exgzYuvqJRdOspG
nSPCuS1g1ZZQ6qc5TCsv51oVAvSBMhI6tJRQcpxuaYfVKiydyYEPCLGYacjvj3kg
N0lU3pD1/4jFn0ylPvDALojClb5ADABZgm4PtXDQsoUl9ZM52E/+y+/roMw4ag2A
L0LxmbEuWhWsRzRKKXQmcLhAKphwqd5/W9n0LWIjTnhhYeFJmcutJW7n38ynqL8C
aQzOL/OwCzrZnQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:16 2026 by rpki-client