Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: WsqBU+oVFipS8dyoNUTSZvldCsNhf98hsmfG7qfAK8c=
Subject key identifier: 10:4A:EF:DC:56:94:78:37:27:4E:30:E0:52:D2:B9:CD:60:C6:4B:3F
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019F94029245B1921A3D335CE7B8C90E8BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 110C
Signing time: Fri 24 Jul 2026 12:03:44 +0000
Manifest this update: Fri 24 Jul 2026 12:03:44 +0000
Manifest next update: Sat 25 Jul 2026 12:03:44 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: 0RO8CTs7rx64+Ra07AQ0wjamD3LcNBvnwIl+wnWdhyY=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:02:92:45:b1:92:1a:3d:33:5c:e7:b8:c9:0e:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jul 24 12:03:44 2026 GMT
Not After : Jul 25 12:03:44 2026 GMT
Subject: CN=104aefdc56947837274e30e052d2b9cd60c64b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:3b:47:cf:fe:8e:39:30:23:c8:6c:f7:3b:
29:d7:99:27:d0:a7:c1:89:5d:b6:73:93:b2:8c:2f:
b0:00:d9:80:f7:5e:3d:f5:21:1a:0d:60:88:08:de:
18:62:f1:ce:71:66:4f:77:e1:fb:13:66:32:ef:64:
b1:25:0c:c3:aa:5e:eb:31:98:d1:83:6c:fa:b8:4f:
da:69:d0:53:2e:03:0c:fb:46:96:f0:d8:fb:34:60:
d4:25:da:a3:6f:49:18:33:0b:06:ae:55:d6:71:18:
4c:4e:5c:3d:1a:c4:ed:21:25:56:b1:55:f3:3f:49:
35:a4:73:55:5f:1a:f2:b2:c7:b2:66:49:b0:aa:0b:
8f:05:c2:73:a9:d4:d4:90:88:ec:57:27:97:2c:6d:
b6:f7:41:fc:25:74:8f:5c:7a:0b:d0:1e:ed:28:86:
56:49:0b:d2:cf:0a:72:3d:cf:8e:9f:14:f0:7e:cf:
a6:24:9b:05:11:07:c1:39:c5:3a:f9:a6:bd:bb:5d:
f3:89:82:e3:91:19:89:e7:1c:15:f5:4b:33:5c:fc:
60:1d:22:bd:0d:3d:f6:16:20:c1:df:7a:fd:22:0c:
e7:32:d0:7f:42:71:2d:29:fc:3b:26:aa:ac:24:9f:
a5:ef:71:d8:ef:da:59:30:6b:73:89:50:61:f2:54:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4A:EF:DC:56:94:78:37:27:4E:30:E0:52:D2:B9:CD:60:C6:4B:3F
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1d:2e:ce:87:bf:d0:7f:ae:9c:29:91:fd:89:85:f9:cb:4b:
1f:d3:74:0f:ff:b4:5b:a2:d9:5d:65:fc:a9:b8:fe:b2:e8:0d:
37:7f:46:68:d1:0c:6a:cc:c2:9a:c1:ed:64:dd:de:33:57:24:
15:4f:74:05:49:ca:9f:28:2d:fe:78:36:cc:fc:d0:08:0a:b3:
55:16:9d:72:52:ed:8b:84:e7:88:94:4c:6c:d9:69:a2:d8:09:
2e:ff:7c:68:5f:db:ef:ec:0a:a4:4b:09:8f:36:9b:e1:ca:ee:
37:27:89:55:fa:1f:ab:92:a5:31:b7:16:74:35:b7:e5:59:52:
0b:69:9e:af:f8:02:60:5d:3f:3e:50:55:25:9f:00:ca:1d:4e:
e6:c9:d7:4b:c1:24:bc:94:59:11:3b:b9:96:c5:a1:04:6c:4e:
d9:5b:bc:b7:55:7b:bb:87:eb:e6:73:f2:76:b9:74:5c:ac:86:
e3:0d:d0:d2:e8:31:ce:ad:13:03:5a:87:dd:95:b3:29:b9:9d:
93:b8:0d:ff:fe:32:02:2a:23:53:0c:66:0c:77:bb:7d:50:c9:
10:7d:88:52:9b:0e:b4:f9:2f:c2:b1:1e:c5:d7:4f:ee:13:67:
55:c6:fe:b3:26:66:57:95:57:6f:ac:a8:23:a6:38:17:3a:5b:
06:7e:dc:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UApJFsZIaPTNc57jJDov5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjYwNzI0MTIwMzQ0WhcNMjYwNzI1MTIwMzQ0WjAzMTEwLwYDVQQD
EygxMDRhZWZkYzU2OTQ3ODM3Mjc0ZTMwZTA1MmQyYjljZDYwYzY0YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLM7R8/+jjkwI8hs9zsp15kn0KfB
iV22c5OyjC+wANmA91499SEaDWCICN4YYvHOcWZPd+H7E2Yy72SxJQzDql7rMZjR
g2z6uE/aadBTLgMM+0aW8Nj7NGDUJdqjb0kYMwsGrlXWcRhMTlw9GsTtISVWsVXz
P0k1pHNVXxrysseyZkmwqguPBcJzqdTUkIjsVyeXLG2290H8JXSPXHoL0B7tKIZW
SQvSzwpyPc+OnxTwfs+mJJsFEQfBOcU6+aa9u13ziYLjkRmJ5xwV9UszXPxgHSK9
DT32FiDB33r9IgznMtB/QnEtKfw7JqqsJJ+l73HY79pZMGtziVBh8lTpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBK79xWlHg3J04w4FLSuc1gxks/MB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApB0uzoe/
0H+unCmR/YmF+ctLH9N0D/+0W6LZXWX8qbj+sugNN39GaNEMaszCmsHtZN3eM1ck
FU90BUnKnygt/ng2zPzQCAqzVRadclLti4TniJRMbNlpotgJLv98aF/b7+wKpEsJ
jzab4cruNyeJVfofq5KlMbcWdDW35VlSC2mer/gCYF0/PlBVJZ8Ayh1O5snXS8Ek
vJRZETu5lsWhBGxO2Vu8t1V7u4fr5nPydrl0XKyG4w3Q0ugxzq0TA1qH3ZWzKbmd
k7gN//4yAiojUwxmDHe7fVDJEH2IUpsOtPkvwrEexddP7hNnVcb+syZmV5VXb6yo
I6Y4FzpbBn7c+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:18 2026 by rpki-client