Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
File: 2gKPaUMDSrdg84rkIJFU4iVciek.mft (raw, json)
Hash identifier: 2qKA+/lMFupx1kpavBUYqd47C31BzUxr6ElKsV+OODM=
Subject key identifier: 61:F1:27:EC:10:E3:39:F9:EC:08:64:07:A4:9E:7A:55:B9:5B:D3:E0
Authority key identifier: DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Certificate issuer: /CN=da028f6943034ab760f38ae4209154e2255c89e9
Certificate serial: 01A13F0250481742650B70BA81F60230F676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
Manifest number: 0A05
Signing time: Thu 15 Oct 2026 10:01:18 +0000
Manifest this update: Thu 15 Oct 2026 10:01:18 +0000
Manifest next update: Fri 16 Oct 2026 10:01:18 +0000
Files and hashes: 1: 2gKPaUMDSrdg84rkIJFU4iVciek.crl (hash: +NV3iVYhmMO/WyE4FbdHiiqFVz8nawVR0gKBCz0f2F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:50:48:17:42:65:0b:70:ba:81:f6:02:30:f6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da028f6943034ab760f38ae4209154e2255c89e9
Validity
Not Before: Oct 15 10:01:18 2026 GMT
Not After : Oct 16 10:01:18 2026 GMT
Subject: CN=61f127ec10e339f9ec086407a49e7a55b95bd3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:06:67:12:ce:b1:f4:1b:5d:06:3f:2d:c9:
83:e7:c6:34:5b:ec:4a:07:45:57:66:ed:52:a4:d5:
e4:1e:8b:81:30:03:2f:87:6f:9e:49:58:06:47:45:
f3:1c:76:5c:f2:5a:15:80:5b:45:2a:0a:4c:3c:ca:
9f:ce:2b:fd:49:e9:6d:3d:a8:bb:f7:66:58:ba:d0:
5c:a5:24:25:af:db:c6:18:22:23:f3:be:6e:33:07:
34:a5:7e:89:9c:94:da:97:c8:75:b2:0e:4e:17:f3:
d3:93:5e:ea:2c:b3:80:eb:c2:8c:ed:15:b5:c9:ed:
61:ef:ea:81:09:ab:e6:fa:fd:c9:85:af:e4:f2:6d:
9b:27:9a:38:78:8d:15:34:77:75:9c:9f:ed:9b:7f:
55:72:da:7c:4d:16:e8:72:e5:d6:c9:c5:e9:cf:d4:
5b:8d:0c:02:d9:13:60:02:78:2f:9f:98:98:11:89:
ff:4d:fc:68:20:35:74:fe:1f:21:4d:c2:a0:49:fe:
4f:c6:69:6c:ba:ff:02:7d:77:47:c4:6f:00:6c:24:
7a:90:5d:4e:31:d6:22:fe:e3:a7:97:fe:74:3e:e9:
2c:67:62:30:6e:01:7f:d0:b6:eb:f1:16:87:82:3f:
ca:9f:de:ae:30:31:13:08:0b:ad:b4:51:61:db:8a:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:27:EC:10:E3:39:F9:EC:08:64:07:A4:9E:7A:55:B9:5B:D3:E0
X509v3 Authority Key Identifier:
keyid:DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:77:36:94:75:29:b9:df:4c:b4:11:72:8a:fa:55:e3:91:04:
9c:28:f4:e1:f2:fc:80:74:e0:ba:b5:92:b5:97:6a:ff:70:d9:
66:44:f5:56:41:b2:d8:82:8a:51:48:69:00:bf:ce:c8:5e:66:
21:60:54:f8:8e:f2:dd:36:75:12:4b:7d:61:46:2d:31:2a:5d:
20:1d:12:6c:77:4a:19:df:43:cc:01:0b:d9:53:18:2f:ee:e4:
94:7f:8e:7a:8d:db:36:fe:ae:27:f2:8a:6e:92:6d:a7:11:56:
71:d8:d7:ed:e9:43:28:ce:07:93:16:76:c3:73:09:b3:e5:d0:
c2:05:a3:62:fe:18:e4:9a:c1:5c:93:97:6f:6d:3d:c9:73:06:
ce:68:79:a8:b5:5e:68:1e:30:76:38:19:ee:00:73:cb:2b:75:
78:8a:b5:6d:86:35:cc:6c:47:e4:de:24:50:8d:9e:16:69:4d:
41:db:8d:a5:83:6a:5e:72:90:2e:e6:32:ae:cf:c4:4d:55:47:
b1:b2:3f:cb:23:c7:9c:2e:c0:1f:20:3c:0f:83:ca:6f:f0:ea:
04:3e:b6:4a:4c:a1:21:93:98:0a:14:de:cf:b5:10:e1:7a:97:
dd:e8:b6:a1:33:eb:1b:20:bc:97:0b:2f:0d:9b:47:da:79:84:
c1:8a:af:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AlBIF0JlC3C6gfYCMPZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDI4ZjY5NDMwMzRhYjc2MGYzOGFlNDIwOTE1NGUyMjU1
Yzg5ZTkwHhcNMjYxMDE1MTAwMTE4WhcNMjYxMDE2MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2MWYxMjdlYzEwZTMzOWY5ZWMwODY0MDdhNDllN2E1NWI5NWJkM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo4GZxLOsfQbXQY/LcmD58Y0W+xK
B0VXZu1SpNXkHouBMAMvh2+eSVgGR0XzHHZc8loVgFtFKgpMPMqfziv9SeltPai7
92ZYutBcpSQlr9vGGCIj875uMwc0pX6JnJTal8h1sg5OF/PTk17qLLOA68KM7RW1
ye1h7+qBCavm+v3Jha/k8m2bJ5o4eI0VNHd1nJ/tm39Vctp8TRbocuXWycXpz9Rb
jQwC2RNgAngvn5iYEYn/TfxoIDV0/h8hTcKgSf5Pxmlsuv8CfXdHxG8AbCR6kF1O
MdYi/uOnl/50PuksZ2IwbgF/0Lbr8RaHgj/Kn96uMDETCAuttFFh24p/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHxJ+wQ4zn57AhkB6SeelW5W9PgMB8GA1UdIwQY
MBaAFNoCj2lDA0q3YPOK5CCRVOIlXInpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdLUGFVTURTcmRnODRya0lKRlU0aVZjaWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lYWZhNjEtN2ZlOS00YjE2LWJjOWIt
ZjZmM2MyNTc5YzYwLzEvMmdLUGFVTURTcmRnODRya0lKRlU0aVZjaWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lYWZhNjEtN2ZlOS00YjE2LWJjOWItZjZmM2MyNTc5YzYw
LzEvMmdLUGFVTURTcmRnODRya0lKRlU0aVZjaWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1nc2lHUp
ud9MtBFyivpV45EEnCj04fL8gHTgurWStZdq/3DZZkT1VkGy2IKKUUhpAL/OyF5m
IWBU+I7y3TZ1Ekt9YUYtMSpdIB0SbHdKGd9DzAEL2VMYL+7klH+Oeo3bNv6uJ/KK
bpJtpxFWcdjX7elDKM4HkxZ2w3MJs+XQwgWjYv4Y5JrBXJOXb209yXMGzmh5qLVe
aB4wdjgZ7gBzyyt1eIq1bYY1zGxH5N4kUI2eFmlNQduNpYNqXnKQLuYyrs/ETVVH
sbI/yyPHnC7AHyA8D4PKb/DqBD62SkyhIZOYChTez7UQ4XqX3ei2oTPrGyC8lwsv
DZtH2nmEwYqvVw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:51 2026 by rpki-client