Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: BOclMyKql8O85LumRPjxW6tM6aTAMxSMnUZuWDVX6iE=
Subject key identifier: 25:0B:21:32:DD:16:99:D2:F0:D7:AA:7C:46:A6:83:5A:FB:38:97:20
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 01A1DEDE5712DFBE4CFEDBB0931E34AA87F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 11:01:15 +0000
Manifest this update: Sun 15 Nov 2026 11:01:15 +0000
Manifest next update: Mon 16 Nov 2026 11:01:15 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: x61o95JFUYxhN4QS/dAva2w4NUzsuXBOByKwNtx00qE=)
2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:57:12:df:be:4c:fe:db:b0:93:1e:34:aa:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Nov 15 11:01:15 2026 GMT
Not After : Nov 16 11:01:15 2026 GMT
Subject: CN=250b2132dd1699d2f0d7aa7c46a6835afb389720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:4f:b9:d8:fa:d0:f0:31:f2:61:3e:cf:56:
93:a0:48:e8:d0:bc:7e:2c:11:cd:35:1b:31:24:8b:
1f:f4:c7:79:2c:13:55:bf:50:6e:d5:fb:80:58:6e:
9f:8f:9a:4c:b9:2e:f6:c3:3d:3b:fd:a3:67:20:48:
b0:aa:8c:95:90:e7:09:6a:e9:fb:12:4b:7a:39:10:
a0:10:bd:f8:18:fe:f2:70:40:8d:30:ae:59:22:ea:
dd:23:94:6c:1b:e1:df:1d:d1:47:4b:37:5c:e4:90:
ef:7b:e7:f0:0e:84:f6:c7:34:52:16:bf:30:40:f9:
18:94:db:0f:e8:44:6a:69:de:e0:9f:f7:e8:e6:a4:
e8:bf:ed:da:75:d7:91:ba:d7:8e:da:f3:41:34:11:
31:a2:8d:83:98:46:36:23:50:e5:0e:95:e6:72:8d:
35:db:a5:64:fc:69:a3:6c:c7:76:e0:9d:d2:82:be:
17:e6:ef:96:47:01:35:b5:d0:48:68:35:da:f9:9c:
ed:e8:05:8a:82:f0:97:82:22:60:cb:2f:8d:d0:9d:
f9:9c:05:4a:63:1e:4a:9d:33:b6:82:c0:0e:17:53:
e7:e2:66:fc:04:a6:02:f1:15:99:52:07:23:31:d8:
c3:fd:f8:5c:29:06:04:e5:23:5b:4d:34:31:13:07:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:21:32:DD:16:99:D2:F0:D7:AA:7C:46:A6:83:5A:FB:38:97:20
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:ac:ab:18:b3:6b:07:aa:a5:c6:a5:22:c3:61:be:56:04:
bc:5b:20:3c:7b:44:e1:02:87:e5:7a:e5:91:79:40:68:5a:28:
49:b8:05:e5:8c:2f:ed:25:e7:3a:19:25:f4:50:3b:3f:1e:34:
48:27:8a:03:5b:e4:3b:14:df:9a:57:02:5c:18:47:f6:f1:83:
ac:38:6a:d3:61:8e:f7:2c:6e:58:d9:7d:03:6c:36:6d:93:e8:
d4:3e:7b:6f:40:9b:4a:25:23:7c:63:c6:11:cc:d2:60:e3:72:
62:0e:16:d1:b7:4c:c1:a3:b7:9e:15:86:8b:d3:c2:36:c2:26:
a4:60:b9:f4:04:a0:a6:46:b1:95:e3:a0:a3:a8:d1:e1:b2:cb:
b7:05:e2:0c:28:10:d1:05:10:f5:90:6b:32:f7:6d:a0:c1:3d:
da:20:b1:e6:6f:f2:38:92:bd:87:f1:97:6b:3a:86:ca:6f:c4:
3c:10:55:8c:08:3a:f3:ce:71:8a:a6:18:28:aa:83:ee:2e:2b:
95:59:fc:bb:8e:1d:b2:52:92:47:8d:df:3b:e9:ba:ab:84:46:
b8:6b:45:b4:de:44:16:4f:b9:9c:00:e5:2e:52:0e:82:f4:c7:
51:3a:f7:85:9e:23:de:d1:2f:fc:2d:57:56:04:03:53:30:e4:
69:26:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:42 2026 by rpki-client