Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: A4XR4EAV2jTaK4cAG0/3yXDfs1as5CcOgfnOxrIX8o8=
Subject key identifier: 40:5E:68:3E:5D:B9:71:74:D3:59:44:1E:CB:BB:BD:EA:BC:41:3C:6A
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 01A0D23790238D468300194FBBE9E51975BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 13E6
Signing time: Thu 24 Sep 2026 07:00:51 +0000
Manifest this update: Thu 24 Sep 2026 07:00:51 +0000
Manifest next update: Fri 25 Sep 2026 07:00:51 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: N0ENB6daj9UruQ8IZ4NJRURU60f08Sy3CsKZB9HuD9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:90:23:8d:46:83:00:19:4f:bb:e9:e5:19:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Sep 24 07:00:51 2026 GMT
Not After : Sep 25 07:00:51 2026 GMT
Subject: CN=405e683e5db97174d359441ecbbbbdeabc413c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:4a:fd:70:bc:60:64:4e:44:8e:2c:48:b6:
35:82:70:df:9d:e6:30:1a:38:91:e2:55:f7:a3:ba:
7f:3e:3f:eb:55:d0:39:0f:a0:62:51:01:3f:ae:f1:
9a:cd:9a:c3:33:bf:1e:83:81:ea:4a:a4:b6:90:84:
61:11:c0:4a:a9:46:2a:c9:77:8f:73:10:14:ba:86:
da:49:ab:ec:95:b8:2d:54:3d:1d:b5:ec:5f:5f:22:
3e:86:e0:ce:68:9f:2e:51:d7:a4:97:07:db:c9:2d:
5c:fb:a5:d8:bd:6d:5d:6e:4a:06:e2:8e:63:71:18:
67:8b:08:86:9e:76:97:03:e1:46:b1:a2:b7:95:16:
2d:8d:6b:35:21:35:f9:9d:63:3c:d9:43:dd:d8:db:
11:7e:40:bc:19:b0:cb:ec:05:0f:2c:4b:b7:78:7c:
c9:f5:2f:9d:45:7a:ad:93:40:11:e2:c2:40:3d:3e:
62:d2:73:64:c8:e6:0f:16:f7:a7:60:f0:37:75:05:
a2:a8:a2:e1:90:2d:f3:7d:ac:64:6a:a0:c7:aa:17:
03:03:65:a1:ca:fd:ff:0e:81:d9:d3:07:e2:c1:ab:
df:c8:e4:01:1c:ea:46:ce:51:95:10:cb:22:e2:e2:
c6:c8:00:65:b5:17:0b:d8:cd:da:8a:bf:a1:e6:0b:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:68:3E:5D:B9:71:74:D3:59:44:1E:CB:BB:BD:EA:BC:41:3C:6A
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6c:9f:4e:00:ce:f7:55:20:57:75:71:4e:cc:e5:9b:4a:b4:
ad:a1:a3:ae:d3:87:7c:60:90:9f:43:fa:05:97:64:05:00:b4:
3c:e1:5b:1e:23:cf:ff:e6:bc:4a:f4:73:5a:27:6e:e3:ff:54:
1d:91:90:18:67:20:64:71:be:e1:d6:2b:6e:7b:7e:de:fc:c0:
84:62:f7:46:1a:e3:73:22:a3:29:9a:b7:34:52:36:c2:f2:cc:
17:c6:d7:54:a5:56:c6:ff:5b:8d:9a:cc:c0:cf:36:1d:9f:4f:
27:39:b8:6f:34:c9:97:b0:68:5c:bd:b1:02:c7:e0:55:8a:eb:
4c:c7:49:b9:fd:a2:e3:7e:9f:5b:06:83:54:2e:fd:e2:f0:de:
46:a7:29:73:1f:5d:b6:05:70:8d:82:63:10:51:98:86:70:e0:
52:c0:05:61:a7:8f:75:db:77:4e:26:28:bb:b7:9c:b9:06:4f:
de:0b:d2:5f:09:6b:2c:f4:49:bf:f2:6a:bf:64:0f:6a:94:fa:
a7:0a:97:4d:c8:5a:20:09:e6:b4:51:53:7f:77:15:dd:8f:75:
7c:09:a2:23:a6:f9:84:1a:85:4a:84:00:5e:9f:5e:88:7f:0f:
b9:3e:db:55:37:d0:54:6d:3c:fc:69:23:32:7b:53:fd:e5:43:
b8:46:3f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN5AjjUaDABlPu+nlGXW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjYwOTI0MDcwMDUxWhcNMjYwOTI1MDcwMDUxWjAzMTEwLwYDVQQD
Eyg0MDVlNjgzZTVkYjk3MTc0ZDM1OTQ0MWVjYmJiYmRlYWJjNDEzYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51FK/XC8YGRORI4sSLY1gnDfneYw
GjiR4lX3o7p/Pj/rVdA5D6BiUQE/rvGazZrDM78eg4HqSqS2kIRhEcBKqUYqyXeP
cxAUuobaSavslbgtVD0dtexfXyI+huDOaJ8uUdeklwfbyS1c+6XYvW1dbkoG4o5j
cRhniwiGnnaXA+FGsaK3lRYtjWs1ITX5nWM82UPd2NsRfkC8GbDL7AUPLEu3eHzJ
9S+dRXqtk0AR4sJAPT5i0nNkyOYPFvenYPA3dQWiqKLhkC3zfaxkaqDHqhcDA2Wh
yv3/DoHZ0wfiwavfyOQBHOpGzlGVEMsi4uLGyABltRcL2M3air+h5gtJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBeaD5duXF001lEHsu7veq8QTxqMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWyfTgDO
91UgV3VxTszlm0q0raGjrtOHfGCQn0P6BZdkBQC0POFbHiPP/+a8SvRzWidu4/9U
HZGQGGcgZHG+4dYrbnt+3vzAhGL3RhrjcyKjKZq3NFI2wvLMF8bXVKVWxv9bjZrM
wM82HZ9PJzm4bzTJl7BoXL2xAsfgVYrrTMdJuf2i436fWwaDVC794vDeRqcpcx9d
tgVwjYJjEFGYhnDgUsAFYaePddt3TiYou7ecuQZP3gvSXwlrLPRJv/Jqv2QPapT6
pwqXTchaIAnmtFFTf3cV3Y91fAmiI6b5hBqFSoQAXp9eiH8PuT7bVTfQVG08/Gkj
MntT/eVDuEY/OA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:22:32 2026 by rpki-client