Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: x1hvwEApe+TufMiD21PxW+gL4PhPFI/3aFI+YBJsNKE=
Subject key identifier: 60:F5:DA:5B:47:64:CB:27:5A:AB:2C:F5:92:B1:3D:BF:05:3D:A9:CC
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01A13DB81B5002D160C3193A686FA0087BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0956
Signing time: Thu 15 Oct 2026 04:00:38 +0000
Manifest this update: Thu 15 Oct 2026 04:00:38 +0000
Manifest next update: Fri 16 Oct 2026 04:00:38 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: wMON/R45WHEiSacFSTzMTOumtHMRuxaS9nluf7VLKxA=)
2: _YzfgCtw44lkg9uMHew6EGlq2GQ.roa (hash: N9mDPJNnLWD1opaddAFqBbLOocoDLHKf3viOpQeA0Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:1b:50:02:d1:60:c3:19:3a:68:6f:a0:08:7b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Oct 15 04:00:38 2026 GMT
Not After : Oct 16 04:00:38 2026 GMT
Subject: CN=60f5da5b4764cb275aab2cf592b13dbf053da9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:1b:f1:f7:86:62:a8:9a:09:5b:b0:f5:fc:
07:86:bf:1b:0b:a8:5a:fe:c2:a8:89:90:5a:8b:ef:
c7:cf:7c:16:05:38:44:42:51:a4:c7:45:33:0a:5c:
fa:1d:8f:e4:00:24:eb:19:35:d1:19:0a:1d:e6:7c:
2a:d5:11:1d:23:05:6d:cd:9f:d6:c4:c6:e6:07:e8:
a3:52:d1:42:8b:17:d0:07:53:bf:12:42:23:6d:54:
2e:a8:75:b9:fe:0c:ac:50:71:b8:52:4d:16:a7:77:
e3:07:07:28:d8:2f:b6:33:92:00:43:fd:57:e5:5a:
dc:d5:3c:2f:d5:03:17:27:81:b6:8a:ba:70:55:02:
87:b3:0d:1e:73:53:e3:97:1a:72:07:24:96:19:05:
eb:5b:17:50:9e:6c:51:52:44:c1:84:84:79:16:ce:
ac:a1:7b:99:59:a0:71:af:c7:97:ea:c1:7d:b0:39:
be:9c:2c:16:a9:90:b9:fa:fc:df:3b:49:c6:35:1f:
00:04:5b:0f:19:48:f7:f9:e0:56:5c:98:85:cb:a2:
79:05:cd:2c:18:f3:69:df:ab:e8:0a:f1:b8:f4:97:
a0:cc:cb:c7:5b:0d:bf:3d:b9:45:f9:08:59:86:99:
0a:f9:04:e8:be:ac:7a:4e:e3:38:90:5d:a9:89:47:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:DA:5B:47:64:CB:27:5A:AB:2C:F5:92:B1:3D:BF:05:3D:A9:CC
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4b:33:0e:8a:c8:e1:ff:5b:d0:0d:05:40:16:c7:c0:cf:00:
0f:ba:fc:59:ef:97:16:1b:bc:2a:f2:ac:3c:99:ee:6f:13:cb:
f9:91:b6:b7:a5:91:69:23:58:e6:b4:e8:24:f6:3f:f4:ac:1c:
33:d4:a2:c1:31:a8:a6:18:3b:a6:82:ed:81:91:b6:71:b6:49:
1c:bd:e3:ad:20:50:59:2a:90:3b:84:86:77:fe:c6:1f:71:bd:
36:33:ed:98:51:43:db:b6:91:36:e8:b5:00:48:87:d2:43:b9:
a8:42:37:90:2f:96:96:30:fa:fb:d5:7d:30:fc:83:e2:d6:20:
8c:8d:66:d6:88:d4:f7:f8:fa:bb:31:2e:b3:f6:2c:60:f3:83:
7c:8f:81:df:3a:11:bb:9b:cd:e9:50:22:ce:31:70:16:9a:58:
65:87:e0:96:07:3f:72:f5:3e:52:d6:e4:3a:96:b9:ec:2f:c2:
d0:61:d0:c6:4a:13:43:3f:85:5e:3e:be:24:7d:ff:b5:aa:b8:
61:d3:ed:34:48:68:00:62:04:82:05:bf:05:2e:13:1d:89:c8:
53:79:85:0a:a5:01:17:c3:b8:d5:21:ac:73:06:ff:c8:13:99:
17:f1:f5:3d:8c:9e:0d:e2:b1:f8:f8:7c:73:39:01:5e:5d:ba:
b0:4d:f1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uBtQAtFgwxk6aG+gCHu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1
NWQwMjUwHhcNMjYxMDE1MDQwMDM4WhcNMjYxMDE2MDQwMDM4WjAzMTEwLwYDVQQD
Eyg2MGY1ZGE1YjQ3NjRjYjI3NWFhYjJjZjU5MmIxM2RiZjA1M2RhOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+sb8feGYqiaCVuw9fwHhr8bC6ha
/sKoiZBai+/Hz3wWBThEQlGkx0UzClz6HY/kACTrGTXRGQod5nwq1REdIwVtzZ/W
xMbmB+ijUtFCixfQB1O/EkIjbVQuqHW5/gysUHG4Uk0Wp3fjBwco2C+2M5IAQ/1X
5Vrc1Twv1QMXJ4G2irpwVQKHsw0ec1PjlxpyBySWGQXrWxdQnmxRUkTBhIR5Fs6s
oXuZWaBxr8eX6sF9sDm+nCwWqZC5+vzfO0nGNR8ABFsPGUj3+eBWXJiFy6J5Bc0s
GPNp36voCvG49JegzMvHWw2/PblF+QhZhpkK+QTovqx6TuM4kF2piUdlHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD12ltHZMsnWqss9ZKxPb8FPanMMB8GA1UdIwQY
MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct
YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy
LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0szDorI
4f9b0A0FQBbHwM8AD7r8We+XFhu8KvKsPJnubxPL+ZG2t6WRaSNY5rToJPY/9Kwc
M9SiwTGophg7poLtgZG2cbZJHL3jrSBQWSqQO4SGd/7GH3G9NjPtmFFD27aRNui1
AEiH0kO5qEI3kC+WljD6+9V9MPyD4tYgjI1m1ojU9/j6uzEus/YsYPODfI+B3zoR
u5vN6VAizjFwFppYZYfglgc/cvU+UtbkOpa57C/C0GHQxkoTQz+FXj6+JH3/taq4
YdPtNEhoAGIEggW/BS4THYnIU3mFCqUBF8O41SGscwb/yBOZF/H1PYyeDeKx+Ph8
czkBXl26sE3xyA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:42 2026 by rpki-client