Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: IbHZtyCkHyKTP+tHjHNvpVWjuWaCS6cQDfVF37FTe28=
Subject key identifier: 47:60:6F:4E:77:0C:31:3B:EB:9D:78:1B:25:1E:75:B2:9D:1C:60:4D
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 01A13FA7A2785FC84195E95DB33988A0966A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 1323
Signing time: Thu 15 Oct 2026 13:01:53 +0000
Manifest this update: Thu 15 Oct 2026 13:01:53 +0000
Manifest next update: Fri 16 Oct 2026 13:01:53 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: Wjnb5uUv1HexXakWhCupx/8DY3sPN3jx0fN7r9mTf0g=)
2: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (hash: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:a2:78:5f:c8:41:95:e9:5d:b3:39:88:a0:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Oct 15 13:01:53 2026 GMT
Not After : Oct 16 13:01:53 2026 GMT
Subject: CN=47606f4e770c313beb9d781b251e75b29d1c604d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:41:ab:ad:0f:4f:62:b6:b3:71:29:9a:c1:
de:61:7d:06:fd:02:94:f5:d5:76:f8:c7:04:d5:b2:
b4:89:07:38:66:e9:af:24:b5:6f:b6:3a:24:da:8a:
0d:23:4f:68:29:74:0c:79:2d:82:30:0d:2d:e2:a0:
fc:6c:05:5c:ae:9d:e2:73:fb:46:18:bf:dc:a3:c2:
4b:6d:49:14:6e:4a:72:7c:b6:e5:7c:eb:71:c6:7d:
29:fb:3f:72:22:c5:b8:9a:18:43:a3:d3:de:9c:6b:
a9:a9:9d:79:32:07:71:2e:9b:9a:35:bb:eb:e3:fa:
1a:bf:1c:c6:b7:c7:5a:86:3b:ba:e3:81:9d:f8:c2:
9b:05:d6:a4:aa:ed:4e:c3:b4:bd:14:aa:32:3e:4f:
6e:10:08:d0:39:e3:22:4b:05:68:99:84:27:75:84:
1a:4f:9c:c1:eb:ff:d2:5e:9e:87:04:37:43:6b:e9:
11:1f:3a:1c:58:71:fd:d6:c5:1c:61:a7:26:7e:8a:
70:f4:3a:2d:3f:43:4c:0a:9c:c3:99:e9:9a:0e:e3:
89:39:22:cb:cd:b1:28:9b:9e:65:ed:d8:88:53:ef:
7e:e3:52:71:59:54:8d:a2:da:c4:94:f5:09:4c:f1:
0f:70:9d:75:d0:c7:32:b9:d8:ae:9a:ed:3d:51:a2:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:6F:4E:77:0C:31:3B:EB:9D:78:1B:25:1E:75:B2:9D:1C:60:4D
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:be:c1:8a:b4:9f:87:1d:67:c3:e3:6e:b8:87:05:5b:c7:
7b:58:1e:eb:70:07:c3:51:fa:69:8f:5f:a2:57:8c:a7:4c:46:
c8:a8:99:6b:1c:3f:df:ab:2c:7b:3c:db:4e:5c:13:ec:2f:fa:
21:5d:29:4d:83:07:92:12:99:34:90:17:33:f1:fd:62:69:cc:
a5:57:c0:09:15:92:a1:d0:ad:ca:86:ed:b6:e0:13:8d:80:3a:
8d:c8:02:5d:75:b9:c7:09:f3:62:10:e2:9d:5e:78:00:9f:81:
d1:4e:4e:24:67:43:ea:4c:d7:7b:35:9c:67:71:c6:c8:75:da:
42:a1:e4:2a:e3:19:45:f6:09:60:29:f4:8a:6e:ba:55:c3:81:
80:55:ac:1a:08:ea:a9:51:9a:8b:9e:dd:4c:ea:46:e8:ca:69:
10:f1:e6:20:f0:06:2f:0b:25:7c:a3:09:db:f8:6e:a7:47:ce:
20:cc:a2:51:f1:ab:d3:8b:d5:af:ce:02:4c:83:17:ac:ea:7c:
cf:ca:e8:f5:f2:15:a1:3d:32:f2:ee:c0:89:52:fe:64:e7:5d:
75:ae:6f:d6:de:a3:54:26:04:87:6e:78:64:e1:59:84:c7:9b:
68:39:f0:dc:77:91:4e:23:58:27:1a:00:1f:88:46:e2:70:b5:
26:d8:57:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p6J4X8hBleldszmIoJZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjYxMDE1MTMwMTUzWhcNMjYxMDE2MTMwMTUzWjAzMTEwLwYDVQQD
Eyg0NzYwNmY0ZTc3MGMzMTNiZWI5ZDc4MWIyNTFlNzViMjlkMWM2MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYVBq60PT2K2s3EpmsHeYX0G/QKU
9dV2+McE1bK0iQc4ZumvJLVvtjok2ooNI09oKXQMeS2CMA0t4qD8bAVcrp3ic/tG
GL/co8JLbUkUbkpyfLblfOtxxn0p+z9yIsW4mhhDo9PenGupqZ15MgdxLpuaNbvr
4/oavxzGt8dahju644Gd+MKbBdakqu1Ow7S9FKoyPk9uEAjQOeMiSwVomYQndYQa
T5zB6//SXp6HBDdDa+kRHzocWHH91sUcYacmfopw9DotP0NMCpzDmemaDuOJOSLL
zbEom55l7diIU+9+41JxWVSNotrElPUJTPEPcJ110Mcyudiumu09UaLEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdgb053DDE76514GyUedbKdHGBNMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhe+wYq0
n4cdZ8PjbriHBVvHe1ge63AHw1H6aY9foleMp0xGyKiZaxw/36ssezzbTlwT7C/6
IV0pTYMHkhKZNJAXM/H9YmnMpVfACRWSodCtyobttuATjYA6jcgCXXW5xwnzYhDi
nV54AJ+B0U5OJGdD6kzXezWcZ3HGyHXaQqHkKuMZRfYJYCn0im66VcOBgFWsGgjq
qVGai57dTOpG6MppEPHmIPAGLwslfKMJ2/hup0fOIMyiUfGr04vVr84CTIMXrOp8
z8ro9fIVoT0y8u7AiVL+ZOddda5v1t6jVCYEh254ZOFZhMebaDnw3HeRTiNYJxoA
H4hG4nC1JthXkQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:57 2026 by rpki-client