Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: x6KCEuwN7bwNdmYO5SrtfHox9DiwdKW6lV1YkHJhA7U=
Subject key identifier: C8:77:AD:3A:35:4C:BD:60:69:27:CA:9A:7F:F8:7C:10:6C:63:8D:2A
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 01A1DCF006A328760103AA9AAB6CB79B1BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 18BA
Signing time: Sun 15 Nov 2026 02:01:20 +0000
Manifest this update: Sun 15 Nov 2026 02:01:20 +0000
Manifest next update: Mon 16 Nov 2026 02:01:20 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: A8mwaX2QfNR/yuj/Fr3BEzTu7QJ73GD6dO769Mcdzck=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:06:a3:28:76:01:03:aa:9a:ab:6c:b7:9b:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Nov 15 02:01:20 2026 GMT
Not After : Nov 16 02:01:20 2026 GMT
Subject: CN=c877ad3a354cbd606927ca9a7ff87c106c638d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:69:e6:49:81:90:91:f2:6b:40:89:87:7f:
99:e6:b0:1c:ce:47:a5:d6:94:24:f2:d7:48:64:00:
a8:f9:74:f6:e4:e0:be:12:a6:8f:6b:fa:0b:20:53:
93:60:24:fa:eb:b0:ad:75:df:07:4c:52:d5:a4:77:
84:ee:4d:2a:19:d1:b8:41:3d:7d:36:5f:6a:b9:00:
26:93:58:7e:f6:0d:55:1b:4a:7a:1c:a8:35:72:74:
81:b8:6f:ac:a3:0a:cb:c7:46:ef:3a:85:23:fc:4d:
d9:19:97:e9:2d:ee:5e:de:b5:08:4e:fe:0a:39:d4:
7b:29:92:4f:09:56:28:9e:96:6a:08:88:20:c3:f8:
8a:96:6f:71:e7:0f:33:2e:25:44:71:29:80:0a:bf:
d3:e2:47:ed:7d:fc:22:dc:f7:2a:85:a8:27:0f:0a:
0e:d8:62:1e:f2:c3:d7:b4:80:e6:12:b4:13:64:13:
e8:18:bf:f4:81:63:0a:0b:a4:f0:ef:11:d6:3d:83:
e5:0d:06:d7:0a:47:a6:d3:90:92:4a:77:a1:a4:82:
06:bc:35:32:52:1b:b4:6f:d1:60:be:18:d7:53:32:
ba:4d:11:d2:bb:b7:3b:cd:cc:4f:9c:86:22:c7:37:
ed:3f:61:4b:f2:82:c6:75:f5:94:fb:91:ca:3f:41:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:AD:3A:35:4C:BD:60:69:27:CA:9A:7F:F8:7C:10:6C:63:8D:2A
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5d:1c:51:f5:0c:58:b6:a8:12:52:f8:6b:95:75:d6:b1:bb:
30:39:c3:9e:c4:45:34:46:87:5e:1d:b3:28:30:be:17:d7:3a:
12:d9:0e:99:01:cd:ee:07:4d:e4:bc:6a:2f:c6:88:9b:36:ce:
89:4f:df:05:c4:d3:91:41:ec:3b:3a:aa:d0:45:7b:08:2e:3b:
18:34:00:53:9d:d6:8e:07:a1:ae:96:c1:a8:a0:ab:78:75:2b:
6a:13:7a:b0:07:2d:d2:e8:71:85:29:74:84:98:dd:8a:98:bd:
18:87:04:64:57:34:c3:76:ba:0f:d8:1e:0c:99:49:e2:23:89:
b2:d7:e8:a5:44:30:89:55:d3:ac:04:a2:eb:99:39:70:2f:92:
48:0e:86:81:ec:ef:26:3f:e7:f2:f1:77:3a:2e:96:37:92:35:
e1:1e:58:8d:71:09:4f:fa:85:a6:88:bf:2d:50:0b:c2:d8:c9:
90:61:c6:81:9e:1b:b9:c8:b4:55:cf:37:94:92:f3:c6:7d:03:
37:b5:b5:8b:d0:f3:e8:d7:ec:9e:4f:13:ba:34:6b:a7:e7:8f:
44:19:ee:a7:76:73:48:d8:51:47:3d:84:d6:6a:bf:eb:a0:d8:
7e:e1:5e:6a:1a:14:61:3c:a7:c0:59:7d:35:1c:f5:8c:24:d0:
ab:8f:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:21:29 2026 by rpki-client