Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: WByrDCyJ1ch1Cvd5CCGaN4zwyxZ8IcNFCTEFFB9n6Ew=
Subject key identifier: 10:D8:A8:B5:0A:C6:EA:32:08:56:F8:4D:84:F1:39:EB:BB:49:0F:40
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019E8D92FF2AD409F97A9BDE57BC60BDC337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 10D5
Signing time: Wed 03 Jun 2026 13:01:21 +0000
Manifest this update: Wed 03 Jun 2026 13:01:21 +0000
Manifest next update: Thu 04 Jun 2026 13:01:21 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: aoBCcZ6v16pgz14OXTlNn099OLKvQm5TN5fxneh1WUQ=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:ff:2a:d4:09:f9:7a:9b:de:57:bc:60:bd:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jun 3 13:01:21 2026 GMT
Not After : Jun 4 13:01:21 2026 GMT
Subject: CN=10d8a8b50ac6ea320856f84d84f139ebbb490f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:13:02:a4:15:39:eb:9b:f6:af:17:ac:eb:
7f:dd:d5:d1:2c:16:14:79:17:25:58:21:77:6a:d0:
2c:45:4d:14:fb:53:db:4a:f4:25:f7:02:71:83:92:
f4:14:22:71:ed:25:11:ae:82:b1:84:93:b6:32:0a:
88:1b:40:98:2d:2a:2b:c8:fb:8b:11:83:48:09:e3:
47:df:8e:f3:0d:77:d3:51:0c:92:fb:68:c5:ff:2e:
79:be:0a:a5:1a:13:21:49:d8:75:85:fd:43:79:97:
5b:da:7e:37:e4:dc:bf:65:c7:7a:1f:c6:c2:ad:a8:
3c:f8:f7:e4:01:76:7f:29:10:aa:eb:40:fe:06:cf:
21:76:93:55:92:ba:91:fa:af:c0:d3:10:a2:65:57:
6b:16:c6:31:81:ab:d7:a9:69:5a:cb:50:46:d4:9e:
a4:11:58:78:52:20:b4:d6:75:a4:38:ed:10:ee:d1:
7c:7e:13:95:0a:dd:67:80:4b:ea:9e:0f:e2:0d:1c:
3d:07:6a:83:a1:2e:b4:a4:5f:54:76:72:e3:0b:76:
85:cd:99:05:e8:9a:50:a7:d3:23:42:94:c9:59:65:
9c:bc:ac:95:29:5c:9e:7d:c3:c6:ae:01:fd:d0:26:
ad:a6:a4:09:d8:fc:8b:f7:b9:d7:91:40:3e:24:e9:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:A8:B5:0A:C6:EA:32:08:56:F8:4D:84:F1:39:EB:BB:49:0F:40
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:b1:e6:1b:8f:d1:82:0a:d1:31:d7:51:25:cd:2a:44:b9:
78:10:a3:ea:74:4b:75:89:45:04:0e:40:bd:d5:d1:63:c3:14:
a6:1a:8c:59:d1:fb:28:3e:61:32:5a:67:55:3d:fd:7f:28:84:
92:6d:fc:38:c3:c6:e7:77:ce:fc:ea:8e:63:3a:ab:de:e5:76:
2d:d0:e9:0b:f2:ab:12:3b:e3:90:a0:2c:02:99:a7:68:57:c8:
9e:40:c8:e2:ba:97:44:4c:98:ed:1a:35:a1:9e:6a:fd:e0:93:
9d:bf:1c:3e:01:82:c5:a6:0a:df:2c:28:83:f4:0d:d5:fd:78:
f4:32:c4:06:5a:69:3b:cc:53:e3:49:67:7a:69:b3:7d:09:cb:
ba:d0:37:0a:14:e2:93:9d:2e:39:0f:6b:eb:10:0f:45:85:d9:
d4:b2:eb:16:c9:34:81:c1:e5:22:6f:26:2e:06:e5:8f:a3:a8:
a4:3c:fc:9d:da:45:62:35:a8:0c:52:80:dc:f8:a8:ce:ea:12:
72:3d:ad:31:fa:fd:4a:47:ba:fa:c6:5b:11:aa:5a:61:a0:2e:
b5:be:61:86:e2:fe:20:e1:6d:f4:20:5f:f4:ff:ea:12:e7:7c:
c7:8a:3f:94:5b:3b:23:01:c0:c3:e9:0a:51:45:02:bf:f0:b4:
84:be:65:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Nkv8q1An5epveV7xgvcM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjYwNjAzMTMwMTIxWhcNMjYwNjA0MTMwMTIxWjAzMTEwLwYDVQQD
EygxMGQ4YThiNTBhYzZlYTMyMDg1NmY4NGQ4NGYxMzllYmJiNDkwZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SATAqQVOeub9q8XrOt/3dXRLBYU
eRclWCF3atAsRU0U+1PbSvQl9wJxg5L0FCJx7SURroKxhJO2MgqIG0CYLSoryPuL
EYNICeNH347zDXfTUQyS+2jF/y55vgqlGhMhSdh1hf1DeZdb2n435Ny/Zcd6H8bC
rag8+PfkAXZ/KRCq60D+Bs8hdpNVkrqR+q/A0xCiZVdrFsYxgavXqWlay1BG1J6k
EVh4UiC01nWkOO0Q7tF8fhOVCt1ngEvqng/iDRw9B2qDoS60pF9UdnLjC3aFzZkF
6JpQp9MjQpTJWWWcvKyVKVyefcPGrgH90CatpqQJ2PyL97nXkUA+JOnw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDYqLUKxuoyCFb4TYTxOeu7SQ9AMB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu2x5huP
0YIK0THXUSXNKkS5eBCj6nRLdYlFBA5AvdXRY8MUphqMWdH7KD5hMlpnVT39fyiE
km38OMPG53fO/OqOYzqr3uV2LdDpC/KrEjvjkKAsApmnaFfInkDI4rqXREyY7Ro1
oZ5q/eCTnb8cPgGCxaYK3ywog/QN1f149DLEBlppO8xT40lnemmzfQnLutA3ChTi
k50uOQ9r6xAPRYXZ1LLrFsk0gcHlIm8mLgblj6OopDz8ndpFYjWoDFKA3PiozuoS
cj2tMfr9Ske6+sZbEapaYaAutb5hhuL+IOFt9CBf9P/qEud8x4o/lFs7IwHAw+kK
UUUCv/C0hL5lrA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:24 2026 by rpki-client