Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: /UY/nNptoNqNnLSYBo4JwOVVy2aMw/6yd+tnSD0U1Hg=
Subject key identifier: B9:A0:96:0A:D6:A9:69:22:F2:3A:BD:BA:D4:C1:6C:36:1F:75:EA:DA
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01A1DD272DA3A7FBD0FDA2AAE6FEF8A8721F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 03:01:34 +0000
Manifest this update: Sun 15 Nov 2026 03:01:34 +0000
Manifest next update: Mon 16 Nov 2026 03:01:34 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: T4iWOv/lNvJJvygVw4VOWAGPPFa9a4Prq6xis2hHt20=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:2d:a3:a7:fb:d0:fd:a2:aa:e6:fe:f8:a8:72:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Nov 15 03:01:34 2026 GMT
Not After : Nov 16 03:01:34 2026 GMT
Subject: CN=b9a0960ad6a96922f23abdbad4c16c361f75eada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:c4:a6:a7:9b:5e:82:3f:20:61:ed:18:d1:
a7:e3:a2:23:3f:b5:d7:4a:c8:6f:7a:64:10:68:86:
41:b8:9b:04:b1:62:9d:0b:ca:32:51:d1:02:cc:a1:
7e:01:cb:63:f2:ac:73:8c:c0:99:fc:cb:e3:46:e4:
82:fb:37:0b:0a:fa:c3:35:43:f0:3b:f6:0b:db:1a:
c1:d6:13:be:51:06:57:55:7d:af:8d:80:a7:d2:7a:
50:29:4a:2b:70:ad:e4:be:df:f6:5e:cd:00:56:e2:
a3:c5:6f:af:e7:23:38:6a:71:4b:78:9b:97:a7:5b:
9d:0a:87:c9:5b:20:87:0a:07:35:db:46:85:e5:16:
8d:d3:e4:57:de:ae:d6:e3:64:02:24:90:46:4f:7f:
3b:7f:c7:46:72:8e:a5:e4:38:3e:32:86:ee:87:f1:
a6:d1:2e:9c:fa:39:bd:a9:53:91:e7:38:88:ff:52:
29:96:22:e9:0b:d2:f8:1e:29:6b:98:2d:01:f8:5e:
53:f6:ce:13:10:07:d8:db:77:88:5a:d8:8b:9d:a3:
ac:a5:5b:de:ea:e2:e9:08:c9:ef:82:a2:9a:46:61:
ad:a6:a7:49:5b:4d:2f:0c:04:d5:42:f0:73:3c:7e:
53:85:05:ad:7c:85:cc:e9:15:e7:ec:d8:1e:f3:bf:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:96:0A:D6:A9:69:22:F2:3A:BD:BA:D4:C1:6C:36:1F:75:EA:DA
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:08:57:6b:d2:f5:21:e9:4d:b3:9f:a4:02:6c:dc:e6:7e:4d:
43:36:e2:78:79:65:1c:b3:77:b7:3e:85:d4:2d:2c:a9:7a:73:
a1:6b:50:d4:a9:07:fd:32:7d:ed:3c:92:18:81:a0:15:69:02:
ca:34:12:e1:8e:ce:74:df:49:a0:20:14:f1:72:7e:2b:e7:f2:
f7:b6:4e:56:1a:7c:6d:3e:04:11:1b:8b:f6:60:7b:c9:7f:6a:
4b:e8:e3:50:b3:59:7b:c1:e0:77:6e:52:53:96:66:5b:a4:4d:
41:d6:9b:fb:a7:72:e6:ea:07:1a:47:2e:be:00:48:3b:c9:42:
db:1a:53:fe:7b:55:5c:42:e4:25:b5:9a:1b:19:47:f9:75:b5:
65:a2:b1:be:1d:17:84:93:b3:74:ef:1c:75:79:42:40:f8:75:
65:f8:d1:8d:63:2b:a2:a2:f3:68:21:d1:12:82:3a:7d:fb:bf:
f8:7e:a2:6a:25:b4:09:c3:1d:95:f8:3b:c5:c2:09:38:a2:e1:
7d:c9:93:ec:1d:6b:0a:c6:b4:a6:4c:29:25:ef:45:3c:18:01:
63:0d:58:63:52:3f:0a:43:d1:ad:4d:22:de:1b:73:cb:b0:da:
ce:b8:7e:5e:d5:96:39:05:c6:57:2f:94:29:3f:d4:19:ce:58:
0f:6b:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:55 2026 by rpki-client