Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: PzO+2HYjUd6M+mM4+YuTWjNQndL5s3HTqAp8Bz/1ke8=
Subject key identifier: B3:AA:6D:E3:D4:46:4A:6C:96:43:1B:1F:8D:FC:E0:93:C8:D2:26:88
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 01A1DEDEAE46A4A560E784C885225F7088F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 11:01:37 +0000
Manifest this update: Sun 15 Nov 2026 11:01:37 +0000
Manifest next update: Mon 16 Nov 2026 11:01:37 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: OGP3I6gzmY/1CLFjYnToYljK6QfQM6TAI1jq9s2Bt1E=)
2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:ae:46:a4:a5:60:e7:84:c8:85:22:5f:70:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Nov 15 11:01:37 2026 GMT
Not After : Nov 16 11:01:37 2026 GMT
Subject: CN=b3aa6de3d4464a6c96431b1f8dfce093c8d22688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:98:9f:52:3c:2c:4d:08:3f:84:48:1d:bd:
c1:b2:8b:2b:a8:b3:7d:7a:e2:e4:e5:fd:a0:68:08:
82:5c:03:a3:9a:20:74:22:aa:31:ea:d7:1e:b1:a5:
3e:02:d8:f7:2f:49:df:41:0f:70:e1:7f:ea:39:95:
ba:2d:b3:28:14:ff:84:ff:f4:51:2d:43:d9:fb:ea:
3d:53:57:ee:c7:d3:6b:57:ca:6c:41:66:ad:b0:45:
fc:5c:65:5b:0d:ee:b2:3c:db:1b:aa:50:8a:76:79:
41:67:ec:6e:ee:5d:7e:c4:fc:9c:48:b3:4c:8c:7e:
90:20:cb:16:ad:5f:c2:9b:ee:22:21:52:15:68:c4:
bd:fd:a5:a0:1b:54:b6:b2:f2:40:c8:c3:35:02:a5:
cc:8b:ea:0a:e4:2c:a3:c0:37:5d:15:9c:1e:bb:64:
7f:f4:64:d7:da:be:b9:90:10:1e:d9:05:9c:98:b3:
21:24:04:3f:62:27:3b:57:47:73:2c:28:fd:ff:f7:
6e:e7:ba:7a:46:4d:d5:56:6f:71:97:64:87:95:3d:
99:7a:32:53:66:15:f1:2a:51:52:2a:6c:2d:db:14:
37:a3:7c:f3:90:65:17:57:2d:0a:87:cb:e0:31:5b:
f3:58:92:20:7d:dd:cf:05:7c:0c:c5:66:2d:ab:66:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:6D:E3:D4:46:4A:6C:96:43:1B:1F:8D:FC:E0:93:C8:D2:26:88
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:f3:6c:55:f1:44:51:df:8d:62:15:68:c9:c2:95:ed:1c:
82:0a:66:ac:51:b6:c5:0d:79:08:ed:d9:e3:8c:b2:83:bf:45:
d6:3e:e7:ba:25:21:1f:af:1b:e2:6a:e7:c1:0f:f7:ea:5a:36:
ff:2f:7c:87:63:3a:b7:df:96:8e:b1:65:48:30:6e:1a:b9:87:
a8:d0:41:ec:d0:2b:59:55:da:bd:d9:8e:89:d1:0a:a0:f8:d2:
6f:9b:61:29:bb:31:93:f1:bd:09:ec:b4:38:5d:0a:ab:38:3e:
a7:ab:3e:58:90:a0:8e:29:ee:66:4c:19:fe:fa:b4:5b:2e:03:
49:c4:94:39:51:51:74:07:1a:56:49:25:6b:35:22:e5:b5:6e:
81:5e:52:42:d9:df:0a:6a:2d:4c:57:13:8b:99:00:dc:80:bf:
93:35:fe:3b:24:9e:a1:30:1d:66:db:62:26:22:dc:ea:17:40:
19:96:0e:bf:30:07:f5:41:3f:23:83:4e:01:ba:e9:3a:20:b6:
1a:29:58:ae:c6:fb:dc:6f:34:a5:a3:7c:5e:cb:2e:94:79:0f:
5d:96:f1:17:c5:bd:ce:f5:3c:c3:fe:9b:97:16:86:23:27:8b:
25:b9:8f:be:2c:e2:e9:81:cd:3f:c6:49:d3:21:bb:5a:95:52:
87:ab:42:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3q5GpKVg54TIhSJfcIjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZDdhMGIwMDEwMmEyODQxNmUzMDkzYjU3NjVhMGIyNzc1
NWNjZjMwHhcNMjYxMTE1MTEwMTM3WhcNMjYxMTE2MTEwMTM3WjAzMTEwLwYDVQQD
EyhiM2FhNmRlM2Q0NDY0YTZjOTY0MzFiMWY4ZGZjZTA5M2M4ZDIyNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6aYn1I8LE0IP4RIHb3BsosrqLN9
euLk5f2gaAiCXAOjmiB0Iqox6tcesaU+Atj3L0nfQQ9w4X/qOZW6LbMoFP+E//RR
LUPZ++o9U1fux9NrV8psQWatsEX8XGVbDe6yPNsbqlCKdnlBZ+xu7l1+xPycSLNM
jH6QIMsWrV/Cm+4iIVIVaMS9/aWgG1S2svJAyMM1AqXMi+oK5CyjwDddFZweu2R/
9GTX2r65kBAe2QWcmLMhJAQ/Yic7V0dzLCj9//du57p6Rk3VVm9xl2SHlT2ZejJT
ZhXxKlFSKmwt2xQ3o3zzkGUXVy0Kh8vgMVvzWJIgfd3PBXwMxWYtq2b30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOqbePURkpslkMbH4384JPI0iaIMB8GA1UdIwQY
MBaAFNrXoLABAqKEFuMJO1dloLJ3VczzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMmNiMTYtOWMxNi00MGIxLWFjOGMt
OTU5ZGMyMWU5MjkzLzEvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMmNiMTYtOWMxNi00MGIxLWFjOGMtOTU5ZGMyMWU5Mjkz
LzEvMnRlZ3NBRUNvb1FXNHdrN1YyV2dzbmRWelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAvzbFXx
RFHfjWIVaMnCle0cggpmrFG2xQ15CO3Z44yyg79F1j7nuiUhH68b4mrnwQ/36lo2
/y98h2M6t9+WjrFlSDBuGrmHqNBB7NArWVXavdmOidEKoPjSb5thKbsxk/G9Cey0
OF0Kqzg+p6s+WJCgjinuZkwZ/vq0Wy4DScSUOVFRdAcaVkklazUi5bVugV5SQtnf
CmotTFcTi5kA3IC/kzX+OySeoTAdZttiJiLc6hdAGZYOvzAH9UE/I4NOAbrpOiC2
GilYrsb73G80paN8XssulHkPXZbxF8W9zvU8w/6blxaGIyeLJbmPvizi6YHNP8ZJ
0yG7WpVSh6tCkg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:03:15 2026 by rpki-client