Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: KnItmtdVHb3eC2JNtGfDk6D9mrTIOYiH8HV1lkrgfVQ=
Subject key identifier: 6D:B1:6E:7E:1B:58:FE:6A:61:10:1C:15:87:95:49:44:36:5B:10:D8
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 01A16D5AF0F81C4A8B72490058A5466AD527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0A14
Signing time: Sat 24 Oct 2026 10:00:38 +0000
Manifest this update: Sat 24 Oct 2026 10:00:38 +0000
Manifest next update: Sun 25 Oct 2026 10:00:38 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: v5uWclXEbWAn+gR1FVV8G76e255sELEnq9FQ6PeDzAY=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5a:f0:f8:1c:4a:8b:72:49:00:58:a5:46:6a:d5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Oct 24 10:00:38 2026 GMT
Not After : Oct 25 10:00:38 2026 GMT
Subject: CN=6db16e7e1b58fe6a61101c1587954944365b10d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:83:a5:e8:26:12:f6:fe:3b:54:de:01:84:
db:ee:82:54:bc:af:c9:52:41:d4:3c:67:be:f6:43:
23:f6:f9:90:16:0d:42:e4:2a:2e:6b:5e:73:e6:d6:
c8:a7:6b:ff:39:ef:ad:a3:d5:52:91:7b:39:bb:08:
71:36:a5:c9:ac:27:2a:aa:f3:fd:ff:e1:03:03:e0:
32:86:fd:34:ba:93:cd:7e:d8:a4:91:c2:e2:2a:e4:
1c:c1:16:a6:c7:9b:13:c2:c5:3c:c9:6f:99:1a:31:
29:53:a8:5c:73:47:b2:5f:b2:04:bc:c5:2f:2e:5b:
9c:8c:75:6b:18:71:75:60:34:7f:41:e4:9d:ea:df:
81:fa:82:41:78:d6:f2:87:f4:b9:e7:29:cd:7a:72:
74:04:1c:b1:73:7e:df:12:4f:60:b1:29:98:9c:e4:
fc:d1:49:d4:e5:ef:44:ee:29:af:0b:e5:25:a9:fb:
11:50:81:3e:07:e5:ce:17:6a:c9:c2:a1:54:50:da:
36:3a:b0:d7:01:87:2a:d7:9c:d3:4c:ab:d6:69:93:
c8:bd:0f:36:d0:58:93:42:08:22:30:52:2b:b7:1a:
c0:ed:3c:a9:7e:fe:d0:fa:50:f2:37:f7:b4:f2:bb:
23:da:dc:bc:9f:a8:5a:a8:fb:05:e2:bc:41:6e:7f:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:6E:7E:1B:58:FE:6A:61:10:1C:15:87:95:49:44:36:5B:10:D8
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:53:5e:85:3d:1d:87:3a:c4:2e:82:ad:3a:a6:95:64:65:
95:ed:a8:fc:ae:c7:04:b0:0f:c6:53:7e:db:42:9e:b4:19:4a:
af:6d:6e:a1:64:3a:e5:09:8c:42:a0:4d:3b:31:0d:bf:3c:ea:
a3:82:42:e1:e1:09:6e:21:69:2b:14:26:7d:5c:f3:78:16:42:
11:db:a4:fa:cf:5c:a9:92:e5:30:5c:1b:43:ca:2b:d8:54:61:
63:bc:db:90:4a:e9:16:8a:44:3d:bd:df:60:d5:23:37:fa:50:
2b:cf:d3:1e:3a:b4:b8:d2:c3:69:d8:7f:94:55:62:2b:6e:fb:
b5:34:28:c4:eb:3b:46:64:7d:65:b2:57:1c:6b:47:dd:59:ec:
a0:ee:6a:10:0a:fc:dd:5c:09:3f:58:d2:3c:d2:66:dd:a6:da:
27:4d:8c:99:49:a5:af:6f:6c:0f:8c:23:86:20:11:62:63:03:
d3:17:68:22:c2:62:6b:5b:d2:b9:a8:51:a2:16:f5:59:38:81:
3b:10:76:1e:2d:92:4c:66:9e:5a:64:d8:43:22:e1:86:75:54:
74:47:b4:16:b7:47:1d:d3:5e:bc:6a:ea:6d:e0:c8:5c:83:dc:
dd:ec:7e:90:b8:5a:39:68:0d:04:81:65:b4:92:cd:ef:f9:bd:
d7:62:41:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFtWvD4HEqLckkAWKVGatUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjYxMDI0MTAwMDM4WhcNMjYxMDI1MTAwMDM4WjAzMTEwLwYDVQQD
Eyg2ZGIxNmU3ZTFiNThmZTZhNjExMDFjMTU4Nzk1NDk0NDM2NWIxMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8SDpegmEvb+O1TeAYTb7oJUvK/J
UkHUPGe+9kMj9vmQFg1C5Coua15z5tbIp2v/Oe+to9VSkXs5uwhxNqXJrCcqqvP9
/+EDA+Ayhv00upPNftikkcLiKuQcwRamx5sTwsU8yW+ZGjEpU6hcc0eyX7IEvMUv
LlucjHVrGHF1YDR/QeSd6t+B+oJBeNbyh/S55ynNenJ0BByxc37fEk9gsSmYnOT8
0UnU5e9E7imvC+UlqfsRUIE+B+XOF2rJwqFUUNo2OrDXAYcq15zTTKvWaZPIvQ82
0FiTQggiMFIrtxrA7Typfv7Q+lDyN/e08rsj2ty8n6haqPsF4rxBbn+89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2xbn4bWP5qYRAcFYeVSUQ2WxDYMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+BTXoU9
HYc6xC6CrTqmlWRlle2o/K7HBLAPxlN+20KetBlKr21uoWQ65QmMQqBNOzENvzzq
o4JC4eEJbiFpKxQmfVzzeBZCEduk+s9cqZLlMFwbQ8or2FRhY7zbkErpFopEPb3f
YNUjN/pQK8/THjq0uNLDadh/lFViK277tTQoxOs7RmR9ZbJXHGtH3VnsoO5qEAr8
3VwJP1jSPNJm3abaJ02MmUmlr29sD4wjhiARYmMD0xdoIsJia1vSuahRohb1WTiB
OxB2Hi2STGaeWmTYQyLhhnVUdEe0FrdHHdNevGrqbeDIXIPc3ex+kLhaOWgNBIFl
tJLN7/m912JBMg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:09 2026 by rpki-client