Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
File: 2fGfBczyIhOYRpwL6N3ATOFOE1o.mft (raw, json)
Hash identifier: SKkeQvMhw0bPEatHNA9Ej2fTC+3v3bSDug3oswALd0c=
Subject key identifier: 6F:BB:B3:2D:95:65:7F:0D:7E:5C:B9:86:D9:41:21:3F:79:3F:E6:C8
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 01A14ACF23A414D570F9FEDE870A3313D2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
Manifest number: 1679
Signing time: Sat 17 Oct 2026 17:00:51 +0000
Manifest this update: Sat 17 Oct 2026 17:00:51 +0000
Manifest next update: Sun 18 Oct 2026 17:00:51 +0000
Files and hashes: 1: 2fGfBczyIhOYRpwL6N3ATOFOE1o.crl (hash: 7VCAjL0uBP8SXAzajd7qGAUoCvA5+PojcLFe6UAgwxM=)
2: D5r66qCGlpT6UM1S2JZDnwLEq_g.roa (hash: AsE96zhoWPvQynJOqug2jdhORzzqgKtcCYsyjnQ29Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cf:23:a4:14:d5:70:f9:fe:de:87:0a:33:13:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Oct 17 17:00:51 2026 GMT
Not After : Oct 18 17:00:51 2026 GMT
Subject: CN=6fbbb32d95657f0d7e5cb986d941213f793fe6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:90:2a:bf:c5:6e:87:c0:8b:a1:9d:c9:86:
c9:55:ed:23:00:39:a0:0f:df:a5:c8:bb:27:96:34:
1a:f7:d7:a6:f0:e4:24:f1:7e:9c:ff:b0:7c:2f:fd:
ce:f0:99:4a:69:43:b3:b9:8b:7c:69:85:b7:3e:dd:
46:be:e4:09:7c:27:0d:bb:b8:c6:ca:cc:55:7b:67:
b8:57:13:7f:87:eb:36:3d:5b:a5:b7:62:54:85:98:
b4:f0:2a:b6:7b:fd:1f:67:2a:5c:f5:f9:85:5a:98:
04:bd:05:fa:ff:4e:18:bf:75:00:28:b9:46:67:8c:
8a:ed:91:0f:d4:06:c1:66:b9:bb:ce:75:14:a9:07:
0c:c4:66:35:a2:ff:95:a2:05:5a:d1:2f:16:bc:e0:
a2:de:21:f6:eb:b0:65:7f:16:61:21:30:fa:3e:99:
62:5a:11:56:8f:a4:1d:d7:85:e1:46:21:fd:ef:65:
df:9c:7f:48:de:5e:33:e8:33:f8:5d:1d:e3:40:8d:
4d:d1:15:ad:72:63:cd:5d:54:dc:de:4e:a9:e2:49:
d2:80:8c:f5:a3:23:2e:fe:8f:b4:f0:c1:3b:b6:50:
9f:e5:1b:a9:7d:c6:18:71:29:22:fb:8b:60:40:01:
ce:3a:ce:56:57:cb:19:3e:93:61:ab:8c:8f:c4:53:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:B3:2D:95:65:7F:0D:7E:5C:B9:86:D9:41:21:3F:79:3F:E6:C8
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:5e:c1:0f:14:d2:19:14:7d:e1:92:23:67:f9:89:f7:95:
16:ea:f1:46:b3:05:8b:b0:1d:ce:e9:eb:8c:28:bc:68:d3:94:
59:53:f9:33:2d:2a:c9:83:77:92:91:13:b8:45:03:c7:5d:04:
c9:7b:97:86:88:8e:03:89:a3:df:4e:19:b6:25:3f:23:33:99:
b6:75:16:ab:39:fa:01:df:97:52:78:5e:ff:3c:85:84:1a:3b:
8d:5c:78:7a:2a:a5:5c:33:9a:49:ee:1d:81:88:fa:dc:c6:a7:
3c:6f:d2:46:7f:50:22:f3:31:28:6f:a0:37:cd:5d:84:26:7d:
3f:06:23:52:eb:52:65:45:0f:ad:3f:97:0d:28:d7:f4:8d:95:
c8:41:bf:1a:3b:97:ee:35:e8:1a:34:ed:19:55:3b:d3:b2:67:
e2:e0:f6:28:3f:cc:e1:80:56:85:73:a1:ea:21:5d:7c:0e:4d:
2c:ca:f7:90:91:61:d4:ce:96:a6:06:9f:b9:e9:61:d2:fc:ae:
f8:fe:fc:f7:73:a6:98:c0:c4:9b:8b:71:e0:45:62:b6:42:0a:
70:87:2e:d3:06:c7:73:de:9e:86:b6:7e:33:63:2b:97:6b:c1:
d3:b0:27:20:7a:51:2e:b7:42:e4:a7:7b:9c:ba:2e:1b:9a:63:
55:6d:a7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKzyOkFNVw+f7ehwozE9LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjE5ZjA1Y2NmMjIyMTM5ODQ2OWMwYmU4ZGRjMDRjZTE0
ZTEzNWEwHhcNMjYxMDE3MTcwMDUxWhcNMjYxMDE4MTcwMDUxWjAzMTEwLwYDVQQD
Eyg2ZmJiYjMyZDk1NjU3ZjBkN2U1Y2I5ODZkOTQxMjEzZjc5M2ZlNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjaQKr/FbofAi6GdyYbJVe0jADmg
D9+lyLsnljQa99em8OQk8X6c/7B8L/3O8JlKaUOzuYt8aYW3Pt1GvuQJfCcNu7jG
ysxVe2e4VxN/h+s2PVult2JUhZi08Cq2e/0fZypc9fmFWpgEvQX6/04Yv3UAKLlG
Z4yK7ZEP1AbBZrm7znUUqQcMxGY1ov+VogVa0S8WvOCi3iH267BlfxZhITD6Ppli
WhFWj6Qd14XhRiH972XfnH9I3l4z6DP4XR3jQI1N0RWtcmPNXVTc3k6p4knSgIz1
oyMu/o+08ME7tlCf5RupfcYYcSki+4tgQAHOOs5WV8sZPpNhq4yPxFNZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+7sy2VZX8Nfly5htlBIT95P+bIMB8GA1UdIwQY
MBaAFNnxnwXM8iITmEacC+jdwEzhThNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZTMyNDYtZmJhNi00ZTFkLTgwODkt
NGZmMzMzMzgzNjFlLzEvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZTMyNDYtZmJhNi00ZTFkLTgwODktNGZmMzMzMzgzNjFl
LzEvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvVewQ8U
0hkUfeGSI2f5ifeVFurxRrMFi7AdzunrjCi8aNOUWVP5My0qyYN3kpETuEUDx10E
yXuXhoiOA4mj304ZtiU/IzOZtnUWqzn6Ad+XUnhe/zyFhBo7jVx4eiqlXDOaSe4d
gYj63ManPG/SRn9QIvMxKG+gN81dhCZ9PwYjUutSZUUPrT+XDSjX9I2VyEG/GjuX
7jXoGjTtGVU707Jn4uD2KD/M4YBWhXOh6iFdfA5NLMr3kJFh1M6Wpgafuelh0vyu
+P7893OmmMDEm4tx4EVitkIKcIcu0wbHc96ehrZ+M2Mrl2vB07AnIHpRLrdC5Kd7
nLouG5pjVW2nuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:21:32 2026 by rpki-client