Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: cbpDJpcHt3W5+8pf19Gd7MkR+7oHAGzigr86G1hzdBo=
Subject key identifier: B5:32:B9:31:F5:B5:15:0C:6D:81:38:1F:F1:DC:98:29:B6:C4:52:22
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 01A14082FBA49D5310003B80C24C87EA6A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 1869
Signing time: Thu 15 Oct 2026 17:01:28 +0000
Manifest this update: Thu 15 Oct 2026 17:01:28 +0000
Manifest next update: Fri 16 Oct 2026 17:01:28 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: 1nUBWzHryfAf5+Qglug1AbqiYiYeYYKryKiobhzMef4=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:fb:a4:9d:53:10:00:3b:80:c2:4c:87:ea:6a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Oct 15 17:01:28 2026 GMT
Not After : Oct 16 17:01:28 2026 GMT
Subject: CN=b532b931f5b5150c6d81381ff1dc9829b6c45222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c3:c6:04:a0:74:ab:64:ac:60:2e:02:34:2c:
e8:98:44:47:90:7b:6d:a8:c4:83:d2:60:fa:d1:a9:
56:53:c5:65:f8:8e:75:ac:ed:86:8b:37:0e:ae:cc:
8e:88:b2:81:e3:a5:1c:bf:18:aa:86:39:b0:8e:37:
d6:c9:83:17:a0:4b:35:92:08:d6:12:eb:66:ac:be:
3c:a6:92:a4:00:80:4a:9c:41:bb:96:5b:86:18:9d:
af:15:75:9b:27:78:f7:87:67:3e:2d:c8:ad:d2:84:
58:a3:24:7d:82:77:62:71:77:65:c5:81:c2:10:76:
ac:bf:db:23:dc:cf:b8:94:bb:6f:5b:27:34:24:6c:
21:4c:9f:90:f7:53:6c:91:05:e8:85:2a:65:d1:28:
bd:d3:2f:34:e2:0e:39:81:55:06:3f:40:2a:d8:30:
19:eb:95:ad:59:4b:21:09:c2:42:f4:c0:4f:82:86:
bd:ac:20:96:bc:ac:5e:d6:cf:ad:21:ec:1a:8b:07:
2a:25:2e:d8:65:ea:38:0b:f4:91:d7:9d:1a:63:29:
20:7e:b3:c7:e9:77:f5:c2:24:d5:40:67:5d:69:a9:
d7:f5:3a:10:9e:20:df:ae:8f:28:be:16:3f:23:0f:
bc:70:a6:b7:74:d8:03:24:d7:a8:34:e1:be:a8:55:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:B9:31:F5:B5:15:0C:6D:81:38:1F:F1:DC:98:29:B6:C4:52:22
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3d:e2:d7:e6:63:2b:1b:9e:69:fd:4c:6a:9b:7b:d3:f4:f0:
d6:1a:2e:76:6e:6c:6c:c4:c2:4a:55:59:f9:a3:a6:b4:22:07:
eb:2f:d4:f7:81:1a:47:3d:fe:f1:f8:87:6a:a8:76:cf:e2:6d:
14:4d:a9:cc:04:97:f7:c8:f4:0c:73:e0:54:ad:7c:75:f6:31:
77:31:fa:61:fe:3c:d2:f5:05:94:30:9d:e6:85:ba:62:b7:00:
a3:30:b4:6c:07:0f:b9:2f:4d:c4:ae:63:45:75:24:27:43:a7:
ef:b0:74:31:36:03:2a:ed:b4:58:aa:34:c7:78:95:35:2f:a6:
ec:d1:01:c5:eb:d5:41:74:38:b4:53:a6:f4:61:7c:63:86:38:
f9:58:93:24:94:27:41:d6:3f:5f:41:5f:fc:bd:84:8b:49:2b:
30:21:91:16:43:33:ee:26:da:ce:ad:3b:8a:58:eb:2a:db:e8:
45:40:8b:02:58:36:a3:5a:e0:26:c9:6d:b6:90:aa:34:9b:9f:
86:70:84:3d:66:de:0c:c9:bc:2c:f9:0d:64:f2:24:c7:64:d7:
d0:c3:22:14:4f:a1:9c:23:cb:5f:c8:b9:a3:8d:65:85:dd:a5:
47:5a:5c:08:7d:f9:6c:a6:06:a7:af:8b:2f:f3:49:22:bc:25:
40:e8:a4:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgvuknVMQADuAwkyH6mpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTRlN2E2YmU5N2NlYzZmNWJjMWE2NzhhNzZlYTZkMTYx
OWMzMDYwHhcNMjYxMDE1MTcwMTI4WhcNMjYxMDE2MTcwMTI4WjAzMTEwLwYDVQQD
EyhiNTMyYjkzMWY1YjUxNTBjNmQ4MTM4MWZmMWRjOTgyOWI2YzQ1MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MPGBKB0q2SsYC4CNCzomERHkHtt
qMSD0mD60alWU8Vl+I51rO2GizcOrsyOiLKB46UcvxiqhjmwjjfWyYMXoEs1kgjW
EutmrL48ppKkAIBKnEG7lluGGJ2vFXWbJ3j3h2c+Lcit0oRYoyR9gndicXdlxYHC
EHasv9sj3M+4lLtvWyc0JGwhTJ+Q91NskQXohSpl0Si90y804g45gVUGP0Aq2DAZ
65WtWUshCcJC9MBPgoa9rCCWvKxe1s+tIewaiwcqJS7YZeo4C/SR150aYykgfrPH
6Xf1wiTVQGddaanX9ToQniDfro8ovhY/Iw+8cKa3dNgDJNeoNOG+qFUWjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUyuTH1tRUMbYE4H/HcmCm2xFIiMB8GA1UdIwQY
MBaAFNsU56a+l87G9bwaZ4p26m0WGcMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAt
MTFmOTFkMDczOWM5LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAtMTFmOTFkMDczOWM5
LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqz3i1+Zj
Kxueaf1Mapt70/Tw1houdm5sbMTCSlVZ+aOmtCIH6y/U94EaRz3+8fiHaqh2z+Jt
FE2pzASX98j0DHPgVK18dfYxdzH6Yf480vUFlDCd5oW6YrcAozC0bAcPuS9NxK5j
RXUkJ0On77B0MTYDKu20WKo0x3iVNS+m7NEBxevVQXQ4tFOm9GF8Y4Y4+ViTJJQn
QdY/X0Ff/L2Ei0krMCGRFkMz7ibazq07iljrKtvoRUCLAlg2o1rgJslttpCqNJuf
hnCEPWbeDMm8LPkNZPIkx2TX0MMiFE+hnCPLX8i5o41lhd2lR1pcCH35bKYGp6+L
L/NJIrwlQOikPg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:10 2026 by rpki-client