Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: aKwfyL68Izp3OJBRQCswXFEPim/oBB9e+aCr18ZIf1E=
Subject key identifier: 14:92:32:31:AA:37:BC:FE:5B:65:FD:9C:EF:F4:E3:9E:52:8D:B4:97
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 01A1DE3996EEC1B368C9B69BD3F271C9B43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0D03
Signing time: Sun 15 Nov 2026 08:01:18 +0000
Manifest this update: Sun 15 Nov 2026 08:01:18 +0000
Manifest next update: Mon 16 Nov 2026 08:01:18 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: DBAABaMwQv9C7csdgSMRPMsw1+Cm6n+L1SSJD6rgWWY=)
2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:96:ee:c1:b3:68:c9:b6:9b:d3:f2:71:c9:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Nov 15 08:01:18 2026 GMT
Not After : Nov 16 08:01:18 2026 GMT
Subject: CN=14923231aa37bcfe5b65fd9ceff4e39e528db497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:fe:0d:d2:af:a4:b3:54:e4:58:f9:9d:9a:
e5:64:93:c6:98:10:84:ab:07:59:fa:71:f3:86:d2:
f3:f4:0b:bc:95:c8:59:af:7c:c9:b8:c9:d6:c8:3b:
9f:80:0d:90:f0:f7:b4:0f:6b:01:9e:9d:70:88:87:
9c:6a:d7:f1:12:63:9f:09:26:77:2d:37:bd:50:8d:
45:7d:30:3e:e4:68:43:91:b2:ab:20:12:c7:fc:79:
50:d6:d6:ab:55:1a:0a:63:37:7f:e5:3b:01:b4:21:
1d:34:b1:37:63:25:fb:32:7a:f5:45:95:b5:68:6c:
27:c9:31:79:68:dc:6e:85:bf:c6:bd:b3:6f:37:06:
65:f4:72:17:e5:10:10:82:6d:1b:a5:3a:66:9a:1d:
88:df:01:43:6c:af:3e:56:e4:c4:19:08:20:c0:31:
e8:ad:cf:9b:26:9d:39:f7:54:72:42:40:bb:67:22:
13:7c:89:35:66:cd:8a:ec:f3:b1:e5:3f:62:ba:2c:
d8:e4:ed:1d:90:bd:c9:2f:e2:22:e1:3f:1a:bf:70:
6e:db:54:71:19:c0:26:37:18:94:42:7b:25:1f:6e:
9b:be:f8:26:b6:b3:49:7a:ed:f4:02:43:db:09:71:
5c:83:7b:93:0a:31:e3:ba:5c:a9:24:3e:58:c0:7a:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:32:31:AA:37:BC:FE:5B:65:FD:9C:EF:F4:E3:9E:52:8D:B4:97
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e6:c1:89:41:55:89:29:35:d2:be:85:cb:28:4a:ee:cc:4f:
ce:d0:7f:da:24:a1:ac:8c:21:f6:93:bf:19:c0:78:ce:df:c8:
bb:35:15:9c:8a:df:93:6b:5b:3b:1d:83:6c:de:38:7b:ab:84:
67:14:c9:dd:6b:e6:6b:f2:e9:20:56:57:d3:0c:59:1b:c4:ed:
05:ac:37:f4:2f:fd:7a:69:67:88:2b:d7:7e:0f:c4:ef:a3:ec:
c9:1d:29:ff:90:14:e7:2c:42:c2:5b:d9:91:ac:68:e3:ae:2e:
c5:f3:b7:40:d5:0e:6a:8d:4f:d4:0f:8c:a2:29:9c:bd:18:91:
cd:41:76:ed:d8:b7:3a:d7:08:88:c4:ad:b0:cd:45:46:10:44:
eb:e6:9b:45:78:8e:e2:ae:c7:09:d4:bd:65:a3:42:b2:2b:d4:
8d:87:c5:be:60:56:ee:78:6d:a4:83:ff:bd:55:32:d5:85:6b:
74:6f:2c:e0:03:d0:4e:03:5d:51:67:fc:90:bb:6d:8f:fc:00:
a0:26:6b:4e:49:3d:5b:1a:d6:fa:c3:9f:98:17:6e:3a:a1:45:
3d:1a:05:39:80:bf:75:11:68:33:dc:dc:02:1e:77:a6:41:df:
0c:68:24:73:2d:59:77:e5:75:49:cf:df:8b:e7:9f:5c:41:c7:
44:56:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:23 2026 by rpki-client