Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: i+JEumVJeEt0ZDWY6QXjeKibc76Mc4eEyKYmi8KRe/8=
Subject key identifier: 66:5B:8E:C1:E8:A7:FF:D2:41:49:D3:26:65:78:FA:39:ED:FF:96:08
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 01A14082F063354B629D40883A3397796E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 126F
Signing time: Thu 15 Oct 2026 17:01:25 +0000
Manifest this update: Thu 15 Oct 2026 17:01:25 +0000
Manifest next update: Fri 16 Oct 2026 17:01:25 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: qk7S6FSMNbo0O4SyAPykGbWOgyU7+Js0b7KwilGqBW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:f0:63:35:4b:62:9d:40:88:3a:33:97:79:6e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Oct 15 17:01:25 2026 GMT
Not After : Oct 16 17:01:25 2026 GMT
Subject: CN=665b8ec1e8a7ffd24149d3266578fa39edff9608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:c2:db:48:7e:65:15:a6:c2:5a:be:64:cc:
f9:27:86:d3:d3:81:b6:b0:14:c1:2d:7a:2f:1a:c3:
36:fa:59:21:51:dd:b6:90:29:c8:47:a9:f3:16:a3:
8d:0f:b2:68:e1:30:9e:b5:35:21:8c:17:7f:de:3e:
e6:20:08:72:18:9c:6f:d7:36:37:c6:a6:75:ac:f2:
2f:59:0e:28:f3:84:9d:0a:be:7f:41:f2:81:ca:8d:
3e:d3:76:57:37:70:64:b5:64:1a:21:2f:9d:2a:79:
a4:d9:03:58:d7:ad:0d:63:3a:70:05:83:60:f4:f0:
f1:6f:92:f2:fc:76:a7:f4:ac:56:1a:d6:fc:46:ea:
c0:ba:55:f6:a6:d2:13:ad:9c:b6:86:0f:4c:10:76:
d9:2e:d5:6f:2e:70:62:c4:86:74:86:0a:9a:4b:8f:
74:66:c2:a5:49:70:1b:0a:63:31:c2:87:b0:a5:2b:
13:81:b9:12:06:40:9d:bb:5f:05:f7:90:dd:27:0f:
96:42:d9:cc:46:5e:a6:65:aa:24:0b:2b:13:22:e9:
3f:b5:45:68:10:08:3c:72:54:8c:aa:5a:95:46:81:
58:de:56:56:21:22:31:0e:cb:5d:60:ba:62:19:7b:
99:89:45:3f:3c:dd:d8:f5:a6:25:95:fc:10:be:1c:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:8E:C1:E8:A7:FF:D2:41:49:D3:26:65:78:FA:39:ED:FF:96:08
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:36:80:5c:7b:47:8d:6a:de:b7:83:3c:cb:25:fd:b9:b1:
9a:3d:ae:26:8d:c2:ab:f1:25:4d:01:6c:b6:21:08:43:a7:f1:
d9:e6:2c:38:37:ea:a3:cc:32:70:d8:6b:9a:bf:82:34:58:e1:
e7:e5:b5:28:55:1b:46:f7:0c:09:c5:2a:ec:54:cf:2a:45:bf:
7a:ce:2f:b3:0b:55:6f:c7:90:a6:37:12:f9:5e:61:f4:f9:bf:
6d:3b:69:d8:05:bb:79:9b:70:98:dd:06:44:47:d5:f9:20:fd:
9d:52:a9:08:90:99:16:10:3d:81:45:2d:0e:61:34:64:f7:76:
c1:0a:34:c6:f9:59:b9:b1:e0:19:00:4a:55:bf:18:14:f8:78:
59:fd:d1:83:c5:6c:03:11:f8:0e:81:1d:8f:0d:03:ee:b7:9c:
06:80:bf:6b:ef:e9:4f:00:a2:52:9d:34:25:01:2e:4f:96:28:
0d:b5:66:c3:26:97:4b:ea:da:f6:91:af:7c:d7:cc:31:1e:98:
69:f3:72:0f:01:0b:a4:41:62:a9:cc:96:60:88:65:4a:7e:5c:
b0:e7:4c:82:9a:25:3a:37:d5:6c:e4:b8:64:8d:bf:ec:28:63:
c7:9c:13:40:d4:78:83:ce:36:84:fe:17:2e:b1:34:ec:75:4b:
4a:28:16:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgvBjNUtinUCIOjOXeW4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODUwNTVkNzAzOThjZjBjNzJjY2VhYzVlNTgxYWQ0MGYy
MDNlZmMwHhcNMjYxMDE1MTcwMTI1WhcNMjYxMDE2MTcwMTI1WjAzMTEwLwYDVQQD
Eyg2NjViOGVjMWU4YTdmZmQyNDE0OWQzMjY2NTc4ZmEzOWVkZmY5NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtenC20h+ZRWmwlq+ZMz5J4bT04G2
sBTBLXovGsM2+lkhUd22kCnIR6nzFqOND7Jo4TCetTUhjBd/3j7mIAhyGJxv1zY3
xqZ1rPIvWQ4o84SdCr5/QfKByo0+03ZXN3BktWQaIS+dKnmk2QNY160NYzpwBYNg
9PDxb5Ly/Han9KxWGtb8RurAulX2ptITrZy2hg9MEHbZLtVvLnBixIZ0hgqaS490
ZsKlSXAbCmMxwoewpSsTgbkSBkCdu18F95DdJw+WQtnMRl6mZaokCysTIuk/tUVo
EAg8clSMqlqVRoFY3lZWISIxDstdYLpiGXuZiUU/PN3Y9aYllfwQvhzQEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZbjsHop//SQUnTJmV4+jnt/5YIMB8GA1UdIwQY
MBaAFNiFBV1wOYzwxyzOrF5YGtQPID78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUt
MWNhM2M2N2YxNTA2LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUtMWNhM2M2N2YxNTA2
LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtk2gFx7
R41q3reDPMsl/bmxmj2uJo3Cq/ElTQFstiEIQ6fx2eYsODfqo8wycNhrmr+CNFjh
5+W1KFUbRvcMCcUq7FTPKkW/es4vswtVb8eQpjcS+V5h9Pm/bTtp2AW7eZtwmN0G
REfV+SD9nVKpCJCZFhA9gUUtDmE0ZPd2wQo0xvlZubHgGQBKVb8YFPh4Wf3Rg8Vs
AxH4DoEdjw0D7recBoC/a+/pTwCiUp00JQEuT5YoDbVmwyaXS+ra9pGvfNfMMR6Y
afNyDwELpEFiqcyWYIhlSn5csOdMgpolOjfVbOS4ZI2/7Chjx5wTQNR4g842hP4X
LrE07HVLSigWOA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:22 2026 by rpki-client