Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
File: 2q99feqywLmZjuJntfO25TEEA-E.mft (raw, json)
Hash identifier: GyeVMBnKacOcNdWg00AYWtMvU8V+WPeF/Aa135Hb1Jk=
Subject key identifier: 3F:A4:4B:FB:63:E2:73:9A:ED:28:F2:CF:19:73:5C:51:FF:70:8E:00
Authority key identifier: DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
Certificate issuer: /CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Certificate serial: 01A084C14DBE35D598ED45EF3AC7C975C529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
Manifest number: BE
Signing time: Wed 09 Sep 2026 06:00:55 +0000
Manifest this update: Wed 09 Sep 2026 06:00:55 +0000
Manifest next update: Thu 10 Sep 2026 06:00:55 +0000
Files and hashes: 1: 2q99feqywLmZjuJntfO25TEEA-E.crl (hash: Ua1HfN4vx/CFk+zg69KxoV9HpHLttT+j57KaCu9Iybk=)
2: 7RGCArg6zHYj0Iou9jA7oVTdAb4.roa (hash: mGoXGOaisyNwd8zq8IefJ6jzjpEEa9vteqG8Ej7ZF/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:4d:be:35:d5:98:ed:45:ef:3a:c7:c9:75:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Validity
Not Before: Sep 9 06:00:55 2026 GMT
Not After : Sep 10 06:00:55 2026 GMT
Subject: CN=3fa44bfb63e2739aed28f2cf19735c51ff708e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:7c:1d:d8:22:29:01:70:3d:c3:1d:ab:16:
4e:f0:b4:9d:dc:de:a4:6e:c6:7a:7c:30:1b:d5:93:
36:04:94:7e:d5:3c:9c:0e:b9:29:b4:3a:cd:6a:9e:
41:8e:69:93:77:0c:85:ed:fb:1c:b1:f5:09:76:e0:
40:f5:6d:f9:ef:97:50:ea:91:d5:a6:4c:e6:12:7b:
f3:9b:8b:e3:4c:11:22:1c:e3:61:f0:4f:ef:8d:7b:
27:85:3d:03:35:51:59:c3:a4:0b:e5:21:63:bc:a7:
c2:42:c4:1e:ae:7b:6d:25:93:36:71:c7:9e:c2:f2:
0d:fb:fa:a5:ba:b0:b8:21:96:99:3d:33:fb:94:fd:
19:92:29:cc:0b:b1:4a:9a:4c:a8:31:65:f4:80:99:
31:e6:0e:6f:04:4c:32:e1:8f:83:71:ae:68:e1:bf:
f5:0a:7d:ea:1a:42:2a:87:5f:8d:9c:d2:cc:36:5a:
d2:14:ac:7c:b1:8f:30:dd:52:4a:14:e6:e3:f4:fb:
6a:bf:37:19:28:d0:df:c9:3c:e4:6a:55:bc:16:fe:
66:a9:86:4f:71:f9:43:72:d6:fb:12:2e:1b:2a:09:
6e:85:cb:02:89:9f:b6:28:a9:d9:2d:77:7c:c1:07:
d0:db:30:bb:a7:01:f2:2b:c4:15:06:75:c4:d3:e2:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A4:4B:FB:63:E2:73:9A:ED:28:F2:CF:19:73:5C:51:FF:70:8E:00
X509v3 Authority Key Identifier:
keyid:DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0c:50:56:af:41:55:b8:ac:80:e9:de:69:36:bd:42:0a:34:
1d:dd:ce:05:bd:21:29:f2:d6:9d:ec:7f:5e:21:81:9f:e6:c6:
9a:43:67:fa:65:6f:a0:12:5b:e2:43:bf:ff:4b:71:43:cf:8b:
be:14:68:65:21:e2:66:e2:22:b9:f2:7a:d1:e2:92:d0:8f:af:
35:61:01:b8:7f:3d:f4:80:36:6c:86:06:96:3f:ce:75:29:0e:
c5:07:1e:96:cd:61:51:08:a3:4d:58:35:40:98:37:4e:8f:75:
6d:1c:47:02:e9:8f:04:8a:b7:90:46:f9:05:c5:0b:08:7c:82:
94:82:b4:76:61:36:7e:90:b1:fd:9d:05:a1:df:3a:9c:b8:a5:
2e:78:f2:7a:36:ad:90:12:3e:bb:a7:cb:bc:30:1b:d6:ac:2c:
ed:47:63:1e:9a:ac:88:08:84:f2:dc:63:df:e9:4d:1b:2a:9b:
b9:2d:6c:8f:c1:52:37:4d:a1:3a:c6:74:26:68:9b:3d:ba:d3:
77:ae:db:ca:fe:b8:53:78:ad:ed:98:9e:0f:3e:77:41:ab:88:
43:62:fa:28:1d:53:ba:d7:99:3c:7d:9f:0d:6a:e4:a7:c6:e4:
2c:e0:b1:64:22:45:8b:03:06:06:cc:de:a2:de:52:4a:c8:6a:
6d:92:b9:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCEwU2+NdWY7UXvOsfJdcUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWY3ZDdkZWFiMmMwYjk5OThlZTI2N2I1ZjNiNmU1MzEw
NDAzZTEwHhcNMjYwOTA5MDYwMDU1WhcNMjYwOTEwMDYwMDU1WjAzMTEwLwYDVQQD
EygzZmE0NGJmYjYzZTI3MzlhZWQyOGYyY2YxOTczNWM1MWZmNzA4ZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhZ8HdgiKQFwPcMdqxZO8LSd3N6k
bsZ6fDAb1ZM2BJR+1TycDrkptDrNap5BjmmTdwyF7fscsfUJduBA9W3575dQ6pHV
pkzmEnvzm4vjTBEiHONh8E/vjXsnhT0DNVFZw6QL5SFjvKfCQsQernttJZM2ccee
wvIN+/qlurC4IZaZPTP7lP0ZkinMC7FKmkyoMWX0gJkx5g5vBEwy4Y+Dca5o4b/1
Cn3qGkIqh1+NnNLMNlrSFKx8sY8w3VJKFObj9PtqvzcZKNDfyTzkalW8Fv5mqYZP
cflDctb7Ei4bKgluhcsCiZ+2KKnZLXd8wQfQ2zC7pwHyK8QVBnXE0+I37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+kS/tj4nOa7SjyzxlzXFH/cI4AMB8GA1UdIwQY
MBaAFNqvfX3qssC5mY7iZ7XztuUxBAPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAxQVq9B
VbisgOneaTa9Qgo0Hd3OBb0hKfLWnex/XiGBn+bGmkNn+mVvoBJb4kO//0txQ8+L
vhRoZSHiZuIiufJ60eKS0I+vNWEBuH899IA2bIYGlj/OdSkOxQcels1hUQijTVg1
QJg3To91bRxHAumPBIq3kEb5BcULCHyClIK0dmE2fpCx/Z0Fod86nLilLnjyejat
kBI+u6fLvDAb1qws7UdjHpqsiAiE8txj3+lNGyqbuS1sj8FSN02hOsZ0JmibPbrT
d67byv64U3it7ZieDz53QauIQ2L6KB1TuteZPH2fDWrkp8bkLOCxZCJFiwMGBsze
ot5SSshqbZK5Ww==
-----END CERTIFICATE-----
Generated at Wed Sep 9 16:38:04 2026 by rpki-client