Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: U5Y3JuF5/W9YOa4aQ/nkFx2Z2ufLbA4tfUtRp88TWyE=
Subject key identifier: C1:6F:C2:F7:3F:84:4C:53:8A:BD:D2:20:A9:D2:66:6C:94:19:F9:34
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 01A1DA947AAED1DCFA49C8C3335866EC5629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0D44
Signing time: Sat 14 Nov 2026 15:02:06 +0000
Manifest this update: Sat 14 Nov 2026 15:02:06 +0000
Manifest next update: Sun 15 Nov 2026 15:02:06 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: aQGj4c8pzxXaLDlWOKH+5gl+E1k94QAn6i3hpTSQrJ0=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:7a:ae:d1:dc:fa:49:c8:c3:33:58:66:ec:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Nov 14 15:02:06 2026 GMT
Not After : Nov 15 15:02:06 2026 GMT
Subject: CN=c16fc2f73f844c538abdd220a9d2666c9419f934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:4b:5d:6c:80:56:47:ea:c1:31:e0:9d:e3:
79:65:87:e4:42:d3:2d:1d:c8:f8:5f:1b:ad:49:2e:
29:7f:5b:49:68:8b:1b:42:30:c7:e9:df:4e:9c:ef:
0a:27:4b:17:05:23:50:f4:13:0f:42:f6:16:6d:28:
7b:8f:65:85:c0:e0:a4:1e:8e:1d:ed:31:4c:f8:9b:
11:d8:64:61:ee:81:78:ec:4d:d2:b1:ca:53:7d:44:
35:a7:42:05:aa:e8:a8:a3:f2:48:4b:c7:59:96:21:
ae:24:ce:c6:a5:dd:56:7a:2b:3c:89:24:64:77:00:
d0:ee:0f:7b:d8:16:5c:0b:76:62:91:d8:9a:00:fb:
cf:3c:c9:34:f3:cc:ff:38:82:78:60:2b:68:a4:61:
11:71:aa:7e:04:86:65:d9:64:c3:17:81:88:c6:a1:
36:63:af:1a:d8:16:2f:f7:e3:60:35:64:71:69:1c:
85:13:cd:12:7a:58:fe:6e:bc:08:92:64:1e:8b:2c:
4c:28:ec:b2:57:2c:9c:0f:84:a9:57:15:4f:ef:9b:
1a:40:ee:f6:14:30:1f:d3:5f:b7:b0:1f:53:73:ce:
55:c3:82:03:91:fc:d3:4c:54:b7:8a:b3:23:8b:c5:
54:39:80:97:fd:09:d7:6a:b3:5d:fc:44:60:12:4a:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6F:C2:F7:3F:84:4C:53:8A:BD:D2:20:A9:D2:66:6C:94:19:F9:34
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d5:fd:06:1e:ff:61:84:b3:9b:b5:07:d5:af:fd:a7:7f:d1:
d2:ba:be:4c:43:d0:c7:23:81:ad:dd:ff:95:1f:e1:5f:0f:48:
97:0f:87:ed:af:37:91:1b:8c:b0:48:ff:2d:24:1b:b6:39:89:
a4:bd:74:c6:b2:17:26:59:03:a2:4e:e2:ab:c7:04:6c:66:04:
f4:4c:6b:87:a3:3e:36:7f:f6:72:49:58:bd:a0:84:d4:38:54:
47:6c:8e:b3:f7:95:9c:45:c6:9c:e3:6f:6c:3c:ff:16:f6:e6:
62:13:6c:22:d7:84:a4:cb:33:bd:b0:a9:1b:b5:33:f4:e4:48:
85:f8:3d:1a:1d:b0:cb:f9:41:f6:11:f0:8a:b7:37:9c:8c:b8:
2a:be:64:a6:1c:50:38:d5:46:23:ba:1f:e1:c8:57:85:5f:e3:
4f:fd:97:87:f1:58:2f:4a:56:37:3f:47:61:11:6c:2b:16:c6:
01:1e:cc:99:42:ad:66:25:0e:46:fa:34:c3:d3:29:38:ef:a1:
25:75:c5:78:cd:73:c2:51:e2:4b:69:2a:cc:e0:4b:f2:d8:58:
9f:fe:93:0d:d7:4f:46:bf:01:85:1c:35:51:c0:5b:97:6d:9a:
d7:7f:da:6f:92:1c:13:e4:18:07:5f:d7:f3:04:fd:b2:89:80:
97:30:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:06 2026 by rpki-client