Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: E65sr+QZ1jsXxWT4Cu89gqkedtFl8dE84MiFVzLw4tI=
Subject key identifier: 36:B4:DB:49:88:9E:2F:E7:0D:12:13:D9:54:4C:56:D8:35:F8:3A:33
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01A0DA5F3BD51D329DE5FE95048A42226F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 11B5
Signing time: Fri 25 Sep 2026 21:01:09 +0000
Manifest this update: Fri 25 Sep 2026 21:01:09 +0000
Manifest next update: Sat 26 Sep 2026 21:01:09 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: hRMGfRZfGt39h0GgQFuMx/mwLLwOr4V/J32DJFYVotk=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:3b:d5:1d:32:9d:e5:fe:95:04:8a:42:22:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Sep 25 21:01:09 2026 GMT
Not After : Sep 26 21:01:09 2026 GMT
Subject: CN=36b4db49889e2fe70d1213d9544c56d835f83a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:3f:d8:7c:90:26:58:3c:e9:83:72:d2:da:
a6:3e:00:cb:1a:81:62:27:4a:aa:d6:86:a2:b8:7d:
b4:42:36:32:40:00:c5:b4:52:66:cd:4c:50:3b:2a:
72:76:63:90:ec:ea:b2:ff:64:e6:26:30:76:e7:3c:
c5:f5:ca:99:63:02:4c:7a:97:c9:e6:26:3f:62:a1:
8b:4b:c5:64:e7:77:54:10:d7:14:3a:0b:bb:22:86:
ca:43:e7:e0:53:ee:c7:38:04:0b:d3:3a:b4:5a:df:
7a:14:a2:c0:e5:9e:71:94:bf:f5:36:02:15:3d:41:
d3:1f:a5:d9:32:11:45:3e:50:7b:32:cc:71:b2:ef:
47:01:27:1d:11:a9:f9:3b:42:ca:6c:49:d0:aa:86:
98:a3:82:f9:6d:05:8e:7b:0d:3f:b5:4a:43:67:a5:
1c:93:42:a7:07:e3:5e:94:3a:0f:95:05:e5:73:6a:
26:70:9e:94:7e:27:82:cf:19:4b:b4:62:3e:0c:02:
95:dc:00:ae:87:ab:55:7c:49:a1:9d:bf:82:70:02:
79:a8:c5:2d:e5:54:b0:bb:ca:88:b3:29:6c:ef:ee:
ac:66:2f:7e:68:05:ba:f6:c5:71:60:d7:ab:20:6b:
fd:db:74:54:a2:6f:aa:da:8f:ab:19:40:6e:26:15:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:DB:49:88:9E:2F:E7:0D:12:13:D9:54:4C:56:D8:35:F8:3A:33
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:e1:50:51:8b:da:4a:d5:3c:9e:df:4c:b3:05:48:6a:87:
6f:bc:0b:2a:cb:b8:0a:0f:c8:a6:91:4d:0b:aa:c3:e8:c1:fe:
ae:d5:64:87:61:3a:e7:a2:53:44:fa:9e:90:f0:6a:11:c8:b5:
d7:ee:a3:b1:60:b8:d8:71:75:84:1b:bf:56:0b:1e:34:84:1b:
9b:b8:cc:67:6f:d7:f3:02:77:6a:23:a6:d9:50:bc:38:0a:9a:
ce:64:e0:27:f0:a2:ce:e5:a2:07:0c:8d:1a:cc:11:3f:93:73:
b1:e2:7f:07:57:9a:1c:6c:d7:05:78:9d:4c:bb:c6:cf:6e:16:
e4:a1:e7:b4:fe:d7:f6:e8:00:e2:c0:1c:c4:b8:a6:c2:68:e5:
4f:7a:59:06:6d:6a:2f:86:62:25:77:a2:6a:91:69:7e:14:28:
a7:a1:67:71:f9:c5:f6:ac:1b:9f:a7:99:7f:17:37:7d:be:0a:
28:46:c0:ee:49:bd:85:47:44:6a:38:2a:b0:7c:66:39:6f:ee:
be:6f:33:c1:72:b7:33:d0:44:9f:a7:4b:d6:5c:7e:ab:56:8d:
85:8c:8c:4c:fa:ce:3a:8e:7b:d0:9c:06:2e:fa:4a:df:8a:67:
de:04:b5:35:a9:7f:b0:2e:86:0c:12:10:a6:6a:c5:b4:8f:b3:
42:c8:6b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaXzvVHTKd5f6VBIpCIm9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjYwOTI1MjEwMTA5WhcNMjYwOTI2MjEwMTA5WjAzMTEwLwYDVQQD
EygzNmI0ZGI0OTg4OWUyZmU3MGQxMjEzZDk1NDRjNTZkODM1ZjgzYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxg/2HyQJlg86YNy0tqmPgDLGoFi
J0qq1oaiuH20QjYyQADFtFJmzUxQOypydmOQ7Oqy/2TmJjB25zzF9cqZYwJMepfJ
5iY/YqGLS8Vk53dUENcUOgu7IobKQ+fgU+7HOAQL0zq0Wt96FKLA5Z5xlL/1NgIV
PUHTH6XZMhFFPlB7Msxxsu9HAScdEan5O0LKbEnQqoaYo4L5bQWOew0/tUpDZ6Uc
k0KnB+NelDoPlQXlc2omcJ6UfieCzxlLtGI+DAKV3ACuh6tVfEmhnb+CcAJ5qMUt
5VSwu8qIsyls7+6sZi9+aAW69sVxYNerIGv923RUom+q2o+rGUBuJhWTOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa020mIni/nDRIT2VRMVtg1+DozMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbzhUFGL
2krVPJ7fTLMFSGqHb7wLKsu4Cg/IppFNC6rD6MH+rtVkh2E656JTRPqekPBqEci1
1+6jsWC42HF1hBu/VgseNIQbm7jMZ2/X8wJ3aiOm2VC8OAqazmTgJ/CizuWiBwyN
GswRP5NzseJ/B1eaHGzXBXidTLvGz24W5KHntP7X9ugA4sAcxLimwmjlT3pZBm1q
L4ZiJXeiapFpfhQop6FncfnF9qwbn6eZfxc3fb4KKEbA7km9hUdEajgqsHxmOW/u
vm8zwXK3M9BEn6dL1lx+q1aNhYyMTPrOOo570JwGLvpK34pn3gS1Nal/sC6GDBIQ
pmrFtI+zQshrxA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:49:00 2026 by rpki-client