Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: jEk0wgudMlMN36nsFNztQyK0rBXx+Z+cFg+oARqrNCc=
Subject key identifier: C5:13:01:F7:89:43:94:50:DC:CF:D9:80:3B:D4:6C:00:E5:79:93:6D
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01A13ECBC6EB42AECC6D590E64DD789F1712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 11E9
Signing time: Thu 15 Oct 2026 09:01:44 +0000
Manifest this update: Thu 15 Oct 2026 09:01:44 +0000
Manifest next update: Fri 16 Oct 2026 09:01:44 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: vsLOHA6VSs+ERnOLscBcs1YJrsrnhAUuqP0/N+76Ghk=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:c6:eb:42:ae:cc:6d:59:0e:64:dd:78:9f:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Oct 15 09:01:44 2026 GMT
Not After : Oct 16 09:01:44 2026 GMT
Subject: CN=c51301f789439450dccfd9803bd46c00e579936d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:33:ba:3e:0c:02:fe:b8:8f:b7:d1:ec:1d:
18:f1:f3:5a:3d:df:95:dc:bd:64:ca:06:06:8a:0b:
7c:0d:c4:f5:3e:7c:5b:cc:df:8c:dd:79:d2:97:39:
7e:01:82:5a:ff:db:d9:d6:10:df:55:12:8d:48:eb:
33:e3:b4:08:f2:3b:f3:46:15:68:73:cd:ba:e7:7a:
63:b3:b4:5b:f5:53:8a:79:e2:fa:f3:a2:8c:ce:5c:
5f:b8:ff:e9:0c:e5:c9:e0:38:26:a7:8b:e8:67:bc:
2e:e9:1b:24:0e:06:c5:11:b1:69:d9:e8:50:e0:ef:
14:be:72:bd:fa:aa:6e:e6:c5:33:53:7a:10:d5:2f:
c0:5e:45:7e:8c:45:4c:06:2f:4e:cc:52:6c:f0:85:
0f:51:a8:3d:2d:bd:4d:8a:49:3e:41:5a:d2:a5:13:
9c:ec:21:83:d3:aa:69:bd:3c:fb:b9:34:9d:24:20:
0e:79:02:b4:ff:97:cc:8c:8e:87:0b:b9:3f:ad:f7:
1f:e3:26:50:7d:f8:3a:3c:e4:32:3e:00:8a:75:48:
e0:1d:db:1e:b0:ed:d0:27:39:6b:09:97:22:a6:cc:
62:a2:69:14:20:a6:b9:8d:0b:f8:73:4a:d9:37:bc:
b5:b2:d0:c7:2b:da:98:bf:34:50:70:1d:69:53:b4:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:01:F7:89:43:94:50:DC:CF:D9:80:3B:D4:6C:00:E5:79:93:6D
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c5:db:7b:1d:93:c6:82:c7:92:a8:19:3b:f0:d3:d0:70:1e:
d2:6f:b2:58:d6:ab:14:fc:26:22:5b:cd:3e:a5:66:33:fb:da:
35:33:d5:6e:a7:92:16:7b:c2:d4:3f:da:e0:31:3d:ae:92:09:
c7:57:a5:bb:a7:a5:cd:ca:e6:4a:8f:01:cb:1a:9f:89:6e:39:
18:a5:e2:f1:cf:d0:c9:4d:88:cd:33:73:01:ab:ba:9d:d2:d4:
78:b2:16:37:b7:bd:52:bb:47:24:bd:f4:e1:a7:f1:de:41:46:
fc:7e:95:f3:f6:ef:4a:26:a3:2b:c3:6b:b9:ea:ea:1f:ae:e7:
fe:73:c6:15:fa:33:fb:7f:f8:79:10:d0:c3:31:2d:05:66:a8:
40:f8:2e:45:ff:ab:ce:d8:34:18:f0:49:6c:28:4e:9e:cb:45:
36:bf:2b:a6:38:41:ea:d5:d2:13:06:13:3f:ec:ae:ce:ed:f3:
a2:cd:3a:49:3a:16:7d:75:33:6d:01:19:3f:e8:3d:70:75:01:
3b:59:95:a4:02:9c:2c:ce:82:33:76:49:2b:f4:29:fa:b2:ce:
ca:95:bf:36:37:0a:07:57:cf:82:d8:45:43:24:a8:df:f7:4b:
71:e5:f9:6f:bd:4b:bc:7d:a9:d5:09:04:98:08:2c:d0:b2:96:
0c:ae:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:09 2026 by rpki-client