Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: yC6M49iseavXcyr2ilfFy065qgfQI66bygTaunkViKQ=
Subject key identifier: 07:4C:F7:52:A8:7F:74:EC:A1:8E:4D:73:87:AE:83:93:58:B0:D9:3E
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01A13D815904D71BB7A4748EC3679C910BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 03:00:49 +0000
Manifest this update: Thu 15 Oct 2026 03:00:49 +0000
Manifest next update: Fri 16 Oct 2026 03:00:49 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: UopN9WB8cB5u8UDluy4EBA7Tqk1pOrqnCGY0nianN3c=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:59:04:d7:1b:b7:a4:74:8e:c3:67:9c:91:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Oct 15 03:00:49 2026 GMT
Not After : Oct 16 03:00:49 2026 GMT
Subject: CN=074cf752a87f74eca18e4d7387ae839358b0d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:5b:e9:56:68:1f:14:fb:95:e5:1a:29:f0:
d1:d1:46:28:5c:62:2c:2a:8d:49:c0:d0:db:0e:41:
56:13:c1:58:9d:47:e4:ce:51:89:6f:14:39:26:be:
ad:40:21:fa:c3:92:85:d3:62:45:c6:d7:10:bd:30:
8d:8e:c4:95:66:4d:62:64:b3:c6:c2:4e:0b:26:7a:
08:6d:d0:79:40:0e:07:4b:5b:74:45:bc:10:50:60:
c4:92:59:6e:f7:ba:a3:3b:a7:5b:f9:8b:47:4c:65:
70:c0:49:f3:3c:d3:51:a3:ac:a7:3a:cc:d6:4b:e2:
56:3a:63:0a:57:4a:9f:ff:c3:c9:a2:13:5d:53:fb:
1a:8f:fb:90:aa:41:20:a0:20:29:6c:af:f8:9d:9f:
cd:bc:29:bd:69:b8:7c:61:6f:a3:c9:50:95:d1:e1:
6d:6e:c8:a5:b7:bf:42:fe:13:ad:94:68:9b:82:f6:
e6:bb:43:d9:5a:ca:1d:1a:e3:c4:2e:34:e7:39:63:
9c:8d:b6:7a:90:bd:7d:01:45:66:d0:2f:c5:83:3d:
af:77:ab:70:14:35:76:79:82:5f:26:07:91:4f:ca:
c2:21:a9:a9:36:18:aa:85:9e:a9:03:bd:aa:a6:1e:
ff:43:33:8e:44:73:a5:37:5a:27:45:df:4d:b7:dc:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:F7:52:A8:7F:74:EC:A1:8E:4D:73:87:AE:83:93:58:B0:D9:3E
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3a:20:05:96:0e:93:81:6b:c2:72:4d:db:d4:b4:95:62:37:
85:11:be:a4:bc:4d:1f:b8:cf:96:91:c8:72:f1:d1:65:83:d9:
88:12:83:68:cd:71:5f:ec:8a:fc:61:f3:1f:fe:59:53:02:bc:
05:b4:c2:a3:c6:db:ca:4b:4b:aa:c4:d6:93:a4:94:1f:76:5c:
84:ca:93:91:f3:33:5b:01:f7:c0:2a:27:52:cf:ca:f0:d5:a7:
4f:06:60:c1:e4:92:7b:ef:33:ba:64:fa:1d:38:d2:5c:95:42:
5b:47:ec:65:6b:29:03:fb:7f:04:af:88:5c:67:4f:00:3b:4c:
d9:22:3a:d8:eb:79:d7:15:e4:0c:5d:49:16:e9:81:78:b2:a8:
a1:80:a7:2c:d8:0e:e3:1b:6d:64:ed:f6:aa:8f:07:4a:e3:51:
b8:1e:f2:e4:72:2f:fd:ad:2d:a5:98:7c:bc:0a:f7:1c:e6:38:
9f:c1:a7:ae:f2:84:3f:e4:8a:29:e9:a9:43:fd:ba:18:46:5d:
a8:9a:14:c1:9a:a0:20:8c:ae:98:20:bf:a9:2b:f4:c0:1a:cf:
f1:3f:e3:99:55:fe:a4:ff:50:14:8d:78:21:dd:0f:69:32:5f:
75:8e:df:7b:61:08:c5:b2:7d:b1:a1:f1:33:6b:30:c1:f9:8a:
ff:35:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:25 2026 by rpki-client