Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: pGIIs4hpavow94WXQSpGKX3zkhG+8CiFX19i9hwENys=
Subject key identifier: CB:04:DD:89:B8:54:8F:1A:85:2E:DD:67:0F:C9:04:76:EB:A1:38:21
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 01A1DA9479BCBBAE4689DEFE10015E2C7F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 02BE
Signing time: Sat 14 Nov 2026 15:02:05 +0000
Manifest this update: Sat 14 Nov 2026 15:02:05 +0000
Manifest next update: Sun 15 Nov 2026 15:02:05 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: Rg5J33ktA0xh21lZrULeA3udhyEP2ELrwSBOxz6e7LA=)
2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:79:bc:bb:ae:46:89:de:fe:10:01:5e:2c:7f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Nov 14 15:02:05 2026 GMT
Not After : Nov 15 15:02:05 2026 GMT
Subject: CN=cb04dd89b8548f1a852edd670fc90476eba13821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:7f:74:26:40:ac:17:d3:3b:b7:52:19:5e:
8d:42:14:9e:1c:d8:af:fa:66:8f:8c:87:39:21:2d:
51:95:ce:6b:50:fe:68:c5:0b:7c:b5:67:7b:19:4d:
ea:89:6f:aa:a9:f5:32:44:31:19:43:1e:37:1e:11:
cb:13:b7:89:02:3b:95:d5:82:b5:99:c9:2b:3b:df:
19:90:95:d0:82:c6:ac:87:5d:f0:13:19:a6:28:06:
cd:f2:4d:9b:da:40:30:75:33:af:d6:e5:0a:22:4c:
93:b9:54:70:71:22:bf:64:2d:ad:dd:a0:64:bc:05:
0f:a8:53:19:e2:9d:50:6d:91:b4:af:58:ea:23:b2:
b0:c3:cf:53:00:3c:8a:7a:06:a1:9d:70:8e:21:a1:
09:f5:81:27:f0:5e:dc:98:e0:44:2f:af:e7:3b:52:
c2:d0:d8:98:0f:2e:4c:db:66:da:3a:8c:60:fe:92:
64:c9:fb:63:5f:38:83:6a:90:52:05:d5:c3:6f:cb:
b6:6d:03:5c:35:1e:1f:e7:f3:69:65:95:90:21:01:
d0:e6:44:33:d3:5d:44:5c:a4:42:96:5c:29:1a:cc:
18:16:5f:e6:5c:79:32:f2:2e:bd:30:a0:49:48:32:
b6:4c:ce:d4:85:4b:ac:d3:3e:00:d8:19:f9:ae:74:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:DD:89:B8:54:8F:1A:85:2E:DD:67:0F:C9:04:76:EB:A1:38:21
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:b7:f4:79:68:ec:57:a7:30:3f:10:dc:bd:1e:16:e0:f7:
50:55:d8:db:b5:15:1e:8c:25:e9:74:4b:a3:c8:c7:98:10:96:
3d:3e:f9:ae:7a:1b:7b:ca:ed:a7:1e:ab:d0:ca:d1:1a:1b:c4:
f5:0a:33:8e:55:ff:03:aa:cf:36:5c:52:be:e7:91:3f:4e:d1:
fb:2c:fe:aa:de:cd:4e:54:90:61:7c:88:db:df:bc:34:ef:eb:
41:99:a1:b0:c8:a6:ca:1f:e0:a7:fa:00:70:57:ce:b7:26:ca:
7b:ec:7a:8c:9b:fa:aa:3e:a6:cd:d0:79:e7:63:ec:4f:ad:9b:
dc:d1:41:58:6d:79:3f:d6:e6:2a:d9:d9:b8:0c:c7:98:f1:fc:
3e:9d:23:28:46:90:84:8d:77:ed:58:76:4a:be:19:b6:68:b9:
54:a7:30:71:91:a7:12:a7:f0:aa:3f:93:1f:18:bd:0d:9a:98:
0b:ca:a2:e1:8d:a1:d8:ff:a1:e2:49:34:74:5d:3a:47:d4:b9:
e6:6e:c5:da:e9:85:8f:52:9c:e5:35:3d:f4:11:89:3d:68:92:
55:12:49:66:06:4f:c4:26:52:72:65:95:98:9c:82:29:70:05:
6b:dd:da:77:aa:91:b7:84:9c:88:98:75:d0:0e:6c:09:a0:e0:
95:35:59:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHalHm8u65Gid7+EAFeLH8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzBlMWJjOGVlZGQ5NDc4NjEwYjFhZmYwOTMwZjQwMzQ3
NTI2ZTUwHhcNMjYxMTE0MTUwMjA1WhcNMjYxMTE1MTUwMjA1WjAzMTEwLwYDVQQD
EyhjYjA0ZGQ4OWI4NTQ4ZjFhODUyZWRkNjcwZmM5MDQ3NmViYTEzODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaF/dCZArBfTO7dSGV6NQhSeHNiv
+maPjIc5IS1Rlc5rUP5oxQt8tWd7GU3qiW+qqfUyRDEZQx43HhHLE7eJAjuV1YK1
mckrO98ZkJXQgsash13wExmmKAbN8k2b2kAwdTOv1uUKIkyTuVRwcSK/ZC2t3aBk
vAUPqFMZ4p1QbZG0r1jqI7Kww89TADyKegahnXCOIaEJ9YEn8F7cmOBEL6/nO1LC
0NiYDy5M22baOoxg/pJkyftjXziDapBSBdXDb8u2bQNcNR4f5/NpZZWQIQHQ5kQz
011EXKRCllwpGswYFl/mXHky8i69MKBJSDK2TM7UhUus0z4A2Bn5rnQOvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsE3Ym4VI8ahS7dZw/JBHbroTghMB8GA1UdIwQY
MBaAFEpw4byO7dlHhhCxr/CTD0A0dSblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUt
YWE5Yjg3M2Q3Zjk2LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUtYWE5Yjg3M2Q3Zjk2
LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaO39Hlo
7FenMD8Q3L0eFuD3UFXY27UVHowl6XRLo8jHmBCWPT75rnobe8rtpx6r0MrRGhvE
9QozjlX/A6rPNlxSvueRP07R+yz+qt7NTlSQYXyI29+8NO/rQZmhsMimyh/gp/oA
cFfOtybKe+x6jJv6qj6mzdB552PsT62b3NFBWG15P9bmKtnZuAzHmPH8Pp0jKEaQ
hI137Vh2Sr4Ztmi5VKcwcZGnEqfwqj+THxi9DZqYC8qi4Y2h2P+h4kk0dF06R9S5
5m7F2umFj1Kc5TU99BGJPWiSVRJJZgZPxCZScmWVmJyCKXAFa93ad6qRt4SciJh1
0A5sCaDglTVZCg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:04:29 2026 by rpki-client