Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
File: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft (raw, json)
Hash identifier: 1GfDjJeZKqx14gSe9p3GSo6ZxMJfLZoMn5pF6iZc9Rg=
Subject key identifier: 8C:A6:1D:B6:5D:74:04:04:46:F8:74:43:AF:2A:62:CC:42:19:00:0C
Authority key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Certificate issuer: /CN=db11520db30e58560013baee6106ca245f194a4a
Certificate serial: 01A1DE709C1CA2E958AE3A588E25347F5A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:24 +0000
Manifest this update: Sun 15 Nov 2026 09:01:24 +0000
Manifest next update: Mon 16 Nov 2026 09:01:24 +0000
Files and hashes: 1: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl (hash: Sgck7gvP6+OZz0f8FwFksq0It1VLuOodNAnvEjUilvE=)
2: dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa (hash: n7M2DLVhupTXknxIXP5S/bJ1i2MjgUBbOoeKbEgGiQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:9c:1c:a2:e9:58:ae:3a:58:8e:25:34:7f:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db11520db30e58560013baee6106ca245f194a4a
Validity
Not Before: Nov 15 09:01:24 2026 GMT
Not After : Nov 16 09:01:24 2026 GMT
Subject: CN=8ca61db65d74040446f87443af2a62cc4219000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:6e:c3:ea:8e:c9:21:03:33:64:0b:a8:34:
dc:b2:cc:5c:e5:0e:56:32:d5:8d:99:6e:22:cb:fb:
55:d9:a4:68:3f:8a:ea:53:6d:70:d1:db:24:c1:1c:
c6:74:00:ba:0b:3e:06:30:e4:64:34:97:7f:d7:37:
cb:fe:ff:3b:f7:b2:0f:4f:3e:7a:1f:60:c3:07:02:
a5:37:41:17:fd:57:b1:d5:f8:3a:8a:41:de:bd:5e:
4a:0b:5c:50:fb:42:b4:b2:23:db:35:3a:48:37:98:
9d:bf:df:2b:1e:1c:44:a0:7d:6e:53:fd:72:dd:04:
48:9e:1f:22:70:be:82:c9:79:73:db:f8:b9:6f:28:
03:9e:b4:a0:bd:b2:92:ef:71:f1:b2:42:1a:28:c2:
12:97:51:3f:f5:5b:3b:90:25:e6:fc:a1:72:50:09:
bf:21:fc:e7:94:30:dc:1b:c2:71:d9:6e:53:4c:60:
27:05:da:81:f1:aa:65:fa:b1:be:72:1c:ec:65:7d:
5b:25:1d:c8:3d:26:96:3d:14:c1:36:92:70:3c:84:
01:bd:db:41:3d:db:d4:c4:df:0f:a3:d6:b2:f7:ff:
3d:e9:30:05:08:17:ec:28:b0:56:8a:81:52:04:14:
0b:69:a8:3f:6c:6f:68:a0:e8:a0:30:11:91:1f:70:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:1D:B6:5D:74:04:04:46:F8:74:43:AF:2A:62:CC:42:19:00:0C
X509v3 Authority Key Identifier:
keyid:DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:ed:ca:fb:78:b6:ae:29:9a:68:a4:b4:4c:12:40:f9:e9:
12:da:a5:ae:43:87:21:b8:76:76:4f:8a:61:ac:e5:d9:98:d5:
ae:d2:14:97:14:55:8c:65:f5:29:23:d8:bf:62:75:47:23:db:
1b:9e:10:8a:28:59:7f:ee:50:4c:6d:e7:e6:55:00:ef:0f:7a:
88:47:51:f1:19:08:66:02:05:78:95:20:16:1f:dd:2a:6c:bc:
3e:79:ad:8c:63:be:af:6e:6e:0c:39:b7:73:f7:5c:88:58:2a:
b5:01:bb:45:ed:9e:95:f2:59:b3:6f:63:7e:1d:19:6f:68:a9:
87:a9:a8:58:a9:b0:5f:64:11:70:bd:cd:b7:c7:6e:0a:d4:3a:
03:77:f4:dc:9e:11:72:ed:4a:d3:fc:f9:5b:b5:28:e3:22:7c:
35:c8:d9:f8:40:78:c9:76:d0:ad:f1:c5:30:76:57:38:23:16:
d9:35:ab:c8:24:87:97:92:ba:68:0f:b6:37:86:b9:f8:80:45:
7d:c3:14:e2:20:b2:0a:18:83:65:08:0d:7c:7d:70:97:e8:c7:
66:6d:10:1f:21:87:44:bf:ce:65:6a:0f:09:12:bd:09:c1:1a:
0f:08:1a:b5:d6:87:89:38:84:a7:45:1f:77:58:4d:c9:1f:78:
b2:51:f9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecJwcoulYrjpYjiU0f1paMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTE1MjBkYjMwZTU4NTYwMDEzYmFlZTYxMDZjYTI0NWYx
OTRhNGEwHhcNMjYxMTE1MDkwMTI0WhcNMjYxMTE2MDkwMTI0WjAzMTEwLwYDVQQD
Eyg4Y2E2MWRiNjVkNzQwNDA0NDZmODc0NDNhZjJhNjJjYzQyMTkwMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl21uw+qOySEDM2QLqDTcssxc5Q5W
MtWNmW4iy/tV2aRoP4rqU21w0dskwRzGdAC6Cz4GMORkNJd/1zfL/v8797IPTz56
H2DDBwKlN0EX/Vex1fg6ikHevV5KC1xQ+0K0siPbNTpIN5idv98rHhxEoH1uU/1y
3QRInh8icL6CyXlz2/i5bygDnrSgvbKS73HxskIaKMISl1E/9Vs7kCXm/KFyUAm/
IfznlDDcG8Jx2W5TTGAnBdqB8apl+rG+chzsZX1bJR3IPSaWPRTBNpJwPIQBvdtB
PdvUxN8Po9ay9/896TAFCBfsKLBWioFSBBQLaag/bG9ooOigMBGRH3BSWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIymHbZddAQERvh0Q68qYsxCGQAMMB8GA1UdIwQY
MBaAFNsRUg2zDlhWABO67mEGyiRfGUpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhGU0RiTU9XRllBRTdydVlRYktKRjhaU2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt
YWU0NjA5NDM4OWJhLzEvMnhGU0RiTU9XRllBRTdydVlRYktKRjhaU2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh
LzEvMnhGU0RiTU9XRllBRTdydVlRYktKRjhaU2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXLtyvt4
tq4pmmiktEwSQPnpEtqlrkOHIbh2dk+KYazl2ZjVrtIUlxRVjGX1KSPYv2J1RyPb
G54QiihZf+5QTG3n5lUA7w96iEdR8RkIZgIFeJUgFh/dKmy8PnmtjGO+r25uDDm3
c/dciFgqtQG7Re2elfJZs29jfh0Zb2iph6moWKmwX2QRcL3Nt8duCtQ6A3f03J4R
cu1K0/z5W7Uo4yJ8NcjZ+EB4yXbQrfHFMHZXOCMW2TWryCSHl5K6aA+2N4a5+IBF
fcMU4iCyChiDZQgNfH1wl+jHZm0QHyGHRL/OZWoPCRK9CcEaDwgatdaHiTiEp0Uf
d1hNyR94slH5vw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:58 2026 by rpki-client