Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: Ck79b0WKTSAQ5PwbqOsZOOsi/1Bz7hI/iMvNvv4VJ3E=
Subject key identifier: D5:05:F1:93:CA:6B:F5:21:56:C4:BB:5A:C0:78:AF:0F:27:E2:BF:99
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019F178BB7FCC4A6ACFAD2A73F98CAFA6A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 08:01:00 +0000
Manifest this update: Tue 30 Jun 2026 08:01:00 +0000
Manifest next update: Wed 01 Jul 2026 08:01:00 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: w5fpyViS77OBmNL0Csd47VSbCO5puVQKgYGgvJA6c3A=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:b7:fc:c4:a6:ac:fa:d2:a7:3f:98:ca:fa:6a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jun 30 08:01:00 2026 GMT
Not After : Jul 1 08:01:00 2026 GMT
Subject: CN=d505f193ca6bf52156c4bb5ac078af0f27e2bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:e7:28:3e:36:18:af:62:ad:24:7d:d8:67:
ae:36:8c:69:9f:9f:21:f4:a1:e9:5b:a2:36:ad:ba:
72:71:fd:8d:28:14:9c:4d:e2:90:7c:10:f9:67:13:
ba:1c:bb:6f:07:44:17:0a:b8:eb:79:16:73:a1:16:
dd:18:d3:ed:d8:dc:40:4c:5d:4f:1f:16:5e:fd:1c:
69:42:90:29:1f:84:fd:0e:c4:83:75:8f:04:47:dd:
c1:6a:1a:40:9f:4b:1d:9b:2b:df:64:10:79:db:e9:
07:cc:1b:91:a5:1e:7a:71:c3:c1:76:aa:f1:fb:27:
45:23:72:98:1b:61:35:9a:6d:9d:b0:54:03:8e:0e:
12:1c:fd:a8:aa:b5:f0:dc:ac:9b:30:a8:88:44:bb:
bc:46:ab:d6:e1:36:33:71:6a:11:39:b1:87:cf:be:
7a:23:8d:cc:11:e1:6f:5f:99:71:00:27:19:fd:30:
36:b5:84:c7:6b:d7:87:50:52:42:c0:49:50:51:74:
f2:a6:f0:0f:92:8f:fa:52:ca:a6:4f:8b:f9:c5:21:
d5:ca:65:51:84:2d:8e:56:99:df:b0:d4:39:0d:7b:
b3:90:96:b1:0c:af:ec:8b:f5:2f:41:99:c4:89:3c:
25:c6:4d:9a:06:bb:a9:ab:1e:a5:b3:78:37:eb:de:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:F1:93:CA:6B:F5:21:56:C4:BB:5A:C0:78:AF:0F:27:E2:BF:99
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:69:e9:d7:64:ca:b1:a9:64:ee:9b:f5:76:ad:50:eb:0b:8c:
3e:53:2d:3e:f2:b4:29:bd:b7:d2:c5:60:88:77:6f:37:4a:64:
66:a2:d2:69:2f:a4:22:2e:ab:48:f1:af:a0:06:d2:6b:2d:bc:
61:6f:1a:ac:5c:36:4c:96:f4:6f:ce:0c:e3:e5:e8:ec:4c:e8:
2b:22:7f:c3:ca:1f:d5:bc:4c:4b:d9:34:e5:c2:39:cd:a9:ca:
df:6f:a3:0d:b8:72:09:0e:8c:8b:6d:6f:f3:65:32:52:06:91:
a0:7d:9a:fd:9f:fe:f5:6d:23:38:92:1f:90:2e:dc:52:86:3a:
a5:55:0e:e1:ac:8b:3f:c2:c8:11:60:e0:63:11:7e:5e:bc:bb:
76:12:87:47:e5:29:50:13:0c:5f:54:4b:5b:b1:3a:99:f3:86:
b6:d2:75:e7:7f:2c:64:76:8e:59:6e:4f:79:06:95:89:15:ee:
b8:a8:f1:7f:e1:a0:2f:b1:f6:4b:d7:21:98:8b:bb:c0:51:8b:
b7:00:29:eb:e6:a2:73:c0:e1:4f:4c:ce:9e:c3:e9:14:05:49:
16:80:e2:c4:5b:d8:ef:fc:ee:bf:a8:95:db:24:8a:95:5a:55:
f7:f4:38:be:fe:9e:ac:11:7c:9c:8a:eb:cf:56:3a:c3:a5:65:
15:ab:51:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xi7f8xKas+tKnP5jK+mphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5
NjQ5YmIwHhcNMjYwNjMwMDgwMTAwWhcNMjYwNzAxMDgwMTAwWjAzMTEwLwYDVQQD
EyhkNTA1ZjE5M2NhNmJmNTIxNTZjNGJiNWFjMDc4YWYwZjI3ZTJiZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodnnKD42GK9irSR92GeuNoxpn58h
9KHpW6I2rbpycf2NKBScTeKQfBD5ZxO6HLtvB0QXCrjreRZzoRbdGNPt2NxATF1P
HxZe/RxpQpApH4T9DsSDdY8ER93BahpAn0sdmyvfZBB52+kHzBuRpR56ccPBdqrx
+ydFI3KYG2E1mm2dsFQDjg4SHP2oqrXw3KybMKiIRLu8RqvW4TYzcWoRObGHz756
I43MEeFvX5lxACcZ/TA2tYTHa9eHUFJCwElQUXTypvAPko/6UsqmT4v5xSHVymVR
hC2OVpnfsNQ5DXuzkJaxDK/si/UvQZnEiTwlxk2aBrupqx6ls3g3694aFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUF8ZPKa/UhVsS7WsB4rw8n4r+ZMB8GA1UdIwQY
MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt
ZWVkZjc2MDc3ZjA5LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5
LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2np12TK
salk7pv1dq1Q6wuMPlMtPvK0Kb230sVgiHdvN0pkZqLSaS+kIi6rSPGvoAbSay28
YW8arFw2TJb0b84M4+Xo7EzoKyJ/w8of1bxMS9k05cI5zanK32+jDbhyCQ6Mi21v
82UyUgaRoH2a/Z/+9W0jOJIfkC7cUoY6pVUO4ayLP8LIEWDgYxF+Xry7dhKHR+Up
UBMMX1RLW7E6mfOGttJ1538sZHaOWW5PeQaViRXuuKjxf+GgL7H2S9chmIu7wFGL
twAp6+aic8DhT0zOnsPpFAVJFoDixFvY7/zuv6iV2ySKlVpV9/Q4vv6erBF8nIrr
z1Y6w6VlFatREA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client