Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: CjBUEnFkYyT9L4aZQih5LxpgMI2VO8ivTdtIdEsw41Y=
Subject key identifier: 5E:42:C5:87:C8:75:BD:4A:DF:F8:77:50:B4:79:47:A3:CE:E2:AF:6F
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01A1D9EF4D1A5C86CE01BFF9FE2F772102CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1AF9
Signing time: Sat 14 Nov 2026 12:01:41 +0000
Manifest this update: Sat 14 Nov 2026 12:01:41 +0000
Manifest next update: Sun 15 Nov 2026 12:01:41 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: v0siFdDw+r7uE1zrp0jirRwvvkUr+xaPgFXdcOm458g=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:4d:1a:5c:86:ce:01:bf:f9:fe:2f:77:21:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Nov 14 12:01:41 2026 GMT
Not After : Nov 15 12:01:41 2026 GMT
Subject: CN=5e42c587c875bd4adff87750b47947a3cee2af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:94:f7:a6:a8:7e:06:02:44:e3:83:5f:ae:
b5:33:44:84:f0:f5:dd:7f:6e:c1:6a:67:35:c9:6b:
4a:23:3d:03:d6:b4:db:62:80:d8:2d:ac:5c:28:9f:
23:4e:e2:d3:85:d5:a1:e1:a0:fc:7c:1b:b8:b2:84:
e5:2c:bf:b4:21:51:ed:4f:de:09:53:82:71:91:f9:
86:59:ed:04:03:8e:b0:96:e3:9f:aa:b1:6b:b7:71:
55:df:1d:e0:1d:35:4c:97:d1:c6:86:1d:1f:08:43:
96:5c:a6:bc:72:0a:c7:a4:51:0f:99:de:08:d0:fe:
67:53:c3:9d:ec:fb:5e:b6:57:a9:9d:23:60:a7:6f:
54:23:27:b0:a1:69:85:c8:25:e4:7a:36:44:1c:38:
19:ad:13:93:e9:89:18:1d:c7:35:54:10:e1:fb:46:
c5:d2:fa:27:b6:4f:3a:d5:0e:65:27:ea:56:0d:58:
47:a1:ef:80:2b:4a:aa:ec:be:f3:d3:0a:c5:fb:b9:
0d:0d:29:0d:e1:2e:bb:aa:5f:a6:8e:63:8b:9f:c7:
89:bf:88:57:1d:68:4e:7d:5e:f1:a0:ab:15:f8:d8:
ed:4b:57:1d:a4:f9:78:b4:f2:66:14:ac:61:de:be:
dc:7f:bd:ff:a4:f8:67:ad:de:c6:68:4e:2a:9b:55:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:42:C5:87:C8:75:BD:4A:DF:F8:77:50:B4:79:47:A3:CE:E2:AF:6F
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:d4:67:11:a8:7f:40:c3:d0:79:77:2e:af:95:62:21:25:
d5:8d:2a:bc:4c:6a:8a:46:fc:26:55:7e:fc:7e:ab:75:89:2f:
ed:08:7a:27:c8:db:ae:9b:f1:ee:76:b4:10:9a:e5:6e:24:f4:
91:22:f5:52:4f:59:0f:32:55:76:d0:03:1f:66:41:ed:d1:a9:
96:de:da:85:b0:4c:ad:99:6c:6e:f2:c0:ec:de:7c:75:c4:31:
15:40:6b:09:66:ad:cb:8b:70:67:bd:d3:cf:f3:5c:02:38:67:
59:4a:c2:d9:88:94:9a:fa:e1:b1:ba:bb:5c:1c:da:c4:5c:48:
a6:7f:36:49:a3:ac:21:e6:09:08:02:ea:e9:ed:e6:86:fb:08:
64:0d:d9:02:fc:43:7d:f3:5f:41:e7:00:96:f9:54:3d:2a:d7:
62:48:33:91:e6:2e:55:6f:94:e2:1c:cf:33:77:7e:98:47:55:
b2:d0:67:e3:43:29:6a:5d:d9:2e:63:87:88:f3:23:10:07:4a:
7e:c9:e3:24:ee:06:d0:bf:c4:fb:fe:1a:33:0e:a9:61:92:e5:
d1:f3:98:b8:28:3e:fa:9b:26:cf:13:75:07:f3:53:d8:3e:01:
8b:e5:8d:95:53:27:97:2d:ed:56:dc:e5:9f:a8:52:0b:35:a8:
6e:47:6c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZ700aXIbOAb/5/i93IQLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjYxMTE0MTIwMTQxWhcNMjYxMTE1MTIwMTQxWjAzMTEwLwYDVQQD
Eyg1ZTQyYzU4N2M4NzViZDRhZGZmODc3NTBiNDc5NDdhM2NlZTJhZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2+U96aofgYCROODX661M0SE8PXd
f27Bamc1yWtKIz0D1rTbYoDYLaxcKJ8jTuLThdWh4aD8fBu4soTlLL+0IVHtT94J
U4JxkfmGWe0EA46wluOfqrFrt3FV3x3gHTVMl9HGhh0fCEOWXKa8cgrHpFEPmd4I
0P5nU8Od7PtetlepnSNgp29UIyewoWmFyCXkejZEHDgZrROT6YkYHcc1VBDh+0bF
0vontk861Q5lJ+pWDVhHoe+AK0qq7L7z0wrF+7kNDSkN4S67ql+mjmOLn8eJv4hX
HWhOfV7xoKsV+NjtS1cdpPl4tPJmFKxh3r7cf73/pPhnrd7GaE4qm1X7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5CxYfIdb1K3/h3ULR5R6PO4q9vMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTfUZxGo
f0DD0Hl3Lq+VYiEl1Y0qvExqikb8JlV+/H6rdYkv7Qh6J8jbrpvx7na0EJrlbiT0
kSL1Uk9ZDzJVdtADH2ZB7dGplt7ahbBMrZlsbvLA7N58dcQxFUBrCWaty4twZ73T
z/NcAjhnWUrC2YiUmvrhsbq7XBzaxFxIpn82SaOsIeYJCALq6e3mhvsIZA3ZAvxD
ffNfQecAlvlUPSrXYkgzkeYuVW+U4hzPM3d+mEdVstBn40Mpal3ZLmOHiPMjEAdK
fsnjJO4G0L/E+/4aMw6pYZLl0fOYuCg++psmzxN1B/NT2D4Bi+WNlVMnly3tVtzl
n6hSCzWobkdsBQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:56 2026 by rpki-client