Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: aJ03y2ZJca64SaYbBTdZkH1l4a6tmVoBdODNKrKyka4=
Subject key identifier: 76:8C:C8:A6:18:F4:EB:33:A1:75:B9:17:46:BE:1D:5D:E4:99:2A:43
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01A000CA8D1F8ECED5478717DBCDA08CE830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 1147
Signing time: Fri 14 Aug 2026 15:01:09 +0000
Manifest this update: Fri 14 Aug 2026 15:01:09 +0000
Manifest next update: Sat 15 Aug 2026 15:01:09 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: TOit0d7sDRSObP4jAQQiPsSJ3HWSefIoCtLVionDspQ=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:8d:1f:8e:ce:d5:47:87:17:db:cd:a0:8c:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Aug 14 15:01:09 2026 GMT
Not After : Aug 15 15:01:09 2026 GMT
Subject: CN=768cc8a618f4eb33a175b91746be1d5de4992a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:09:27:c2:de:28:60:a3:d4:72:2e:ba:ce:
7a:68:7d:06:05:09:42:bf:99:ec:ac:6a:48:7c:69:
4d:52:90:c5:86:fc:8a:63:fb:96:64:36:c3:aa:ce:
c7:b6:42:67:15:b9:41:9b:b2:80:07:70:71:16:91:
ca:5c:c2:79:15:1f:bb:a6:02:0a:b1:9f:06:c6:b0:
ea:57:cc:50:41:47:e1:7b:77:2d:d4:bd:d1:af:97:
3b:2b:1d:b3:f9:78:56:40:4c:4c:39:f8:df:03:80:
97:26:a9:51:91:5b:bb:bc:bc:4c:42:90:78:5f:4c:
58:76:5a:4d:f5:de:27:fa:35:19:e8:49:63:5a:6f:
05:58:99:87:ee:4c:51:91:be:e3:45:0c:39:61:88:
75:98:6c:ae:b1:1e:b8:d0:f1:3e:04:7d:e6:3f:94:
89:7f:37:d0:b2:05:92:24:87:6a:84:23:d9:c1:03:
ca:73:dc:ee:82:98:c5:ac:7c:23:5b:4a:49:13:dc:
bc:32:06:01:6b:bd:25:7c:45:5a:af:96:23:ef:37:
65:5e:93:c8:ce:16:d7:a7:21:94:f2:46:7e:0d:ac:
e9:ec:74:90:06:e2:56:e2:a9:cc:b5:f2:8d:16:d6:
00:37:77:c9:27:06:02:e9:70:f5:ab:87:1c:bf:00:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:C8:A6:18:F4:EB:33:A1:75:B9:17:46:BE:1D:5D:E4:99:2A:43
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:bf:81:c5:44:37:7d:0d:5e:1d:19:70:0e:cc:9a:2a:6f:
4a:74:ea:35:92:84:49:10:5d:12:1e:f6:a0:db:0a:84:bc:13:
f2:1d:a9:55:76:dc:42:0d:9e:bf:b9:cf:a3:5a:ee:29:b4:70:
48:f3:74:d4:e1:81:47:e7:75:88:5f:f8:4e:bc:5c:ba:61:79:
0f:43:06:5d:85:6c:9e:50:2d:68:a5:6f:40:13:fc:82:3d:f4:
38:81:6a:b9:5e:2a:17:95:8b:d0:cc:3b:0b:ea:08:47:87:16:
30:91:72:5d:cb:b2:34:54:7c:3a:62:18:20:75:55:10:3c:e3:
bf:ec:a1:3f:94:27:73:35:b9:64:98:2f:54:e8:90:7b:9e:34:
eb:2c:39:c4:63:22:d0:72:6b:18:39:75:14:57:54:7f:4d:15:
d0:70:09:00:dc:8c:7c:03:fe:d3:46:a6:96:7a:d0:33:a5:e3:
7f:f1:61:ef:bc:95:09:61:42:1d:0c:e3:cf:f3:c5:79:b3:a2:
23:51:88:b7:15:1a:77:01:fc:d9:f9:43:b0:91:e3:03:7d:02:
ad:5d:89:f6:d3:50:5a:61:c2:71:99:3a:26:56:62:c3:b1:04:
4f:49:66:2a:9e:02:0c:6c:27:0a:55:a4:5b:84:16:99:bf:38:
9b:5f:da:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyo0fjs7VR4cX282gjOgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjYwODE0MTUwMTA5WhcNMjYwODE1MTUwMTA5WjAzMTEwLwYDVQQD
Eyg3NjhjYzhhNjE4ZjRlYjMzYTE3NWI5MTc0NmJlMWQ1ZGU0OTkyYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxAJJ8LeKGCj1HIuus56aH0GBQlC
v5nsrGpIfGlNUpDFhvyKY/uWZDbDqs7HtkJnFblBm7KAB3BxFpHKXMJ5FR+7pgIK
sZ8GxrDqV8xQQUfhe3ct1L3Rr5c7Kx2z+XhWQExMOfjfA4CXJqlRkVu7vLxMQpB4
X0xYdlpN9d4n+jUZ6EljWm8FWJmH7kxRkb7jRQw5YYh1mGyusR640PE+BH3mP5SJ
fzfQsgWSJIdqhCPZwQPKc9zugpjFrHwjW0pJE9y8MgYBa70lfEVar5Yj7zdlXpPI
zhbXpyGU8kZ+Dazp7HSQBuJW4qnMtfKNFtYAN3fJJwYC6XD1q4ccvwBABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaMyKYY9OszoXW5F0a+HV3kmSpDMB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPy/gcVE
N30NXh0ZcA7MmipvSnTqNZKESRBdEh72oNsKhLwT8h2pVXbcQg2ev7nPo1ruKbRw
SPN01OGBR+d1iF/4TrxcumF5D0MGXYVsnlAtaKVvQBP8gj30OIFquV4qF5WL0Mw7
C+oIR4cWMJFyXcuyNFR8OmIYIHVVEDzjv+yhP5QnczW5ZJgvVOiQe5406yw5xGMi
0HJrGDl1FFdUf00V0HAJANyMfAP+00amlnrQM6Xjf/Fh77yVCWFCHQzjz/PFebOi
I1GItxUadwH82flDsJHjA30CrV2J9tNQWmHCcZk6JlZiw7EET0lmKp4CDGwnClWk
W4QWmb84m1/aDg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:53 2026 by rpki-client