Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: ISCrRUKYFOfOSeUdNVV8FOmA5Go+umggu1qkJmnOdEM=
Subject key identifier: D9:52:61:C6:DA:35:BD:03:81:98:53:B4:C4:22:E2:98:29:98:5C:E4
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 01A140F09EFC68F71BBCC9A57AA4C6750E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 0B64
Signing time: Thu 15 Oct 2026 19:01:13 +0000
Manifest this update: Thu 15 Oct 2026 19:01:13 +0000
Manifest next update: Fri 16 Oct 2026 19:01:13 +0000
Files and hashes: 1: 6WscQ8tiDx9m3v4sx_CKg9wEEnE.roa (hash: QpRl5gulsjXB/beShhOtBcm8ekjd5kSr4bAzu9gdErs=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: AGK2NTsfp5ROHz1CCqHezc+9Np5Zwp9/85NVpVqgLYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:9e:fc:68:f7:1b:bc:c9:a5:7a:a4:c6:75:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Oct 15 19:01:13 2026 GMT
Not After : Oct 16 19:01:13 2026 GMT
Subject: CN=d95261c6da35bd03819853b4c422e29829985ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:5e:63:0d:23:e2:37:4c:9b:47:6b:dc:3f:
e9:7e:fb:26:7c:08:c2:77:8f:39:40:63:c7:c7:30:
2d:87:15:f4:d6:9e:0a:28:be:e4:ed:fd:15:8c:98:
fb:11:82:09:08:0b:1a:9d:e1:43:16:44:43:aa:68:
22:80:12:09:b8:c8:20:fb:86:0e:6c:f3:3d:a0:3d:
d6:aa:b5:60:ae:80:fc:43:81:21:4a:2b:29:2a:74:
f4:98:69:22:68:76:23:be:c7:2d:3e:38:6a:bf:72:
30:5c:00:12:a0:a0:db:d0:8d:ee:44:43:20:29:32:
56:e3:44:c4:ae:0d:2d:96:70:59:2e:79:54:ea:5d:
30:93:a9:e6:67:6f:a2:de:f3:85:4f:7f:75:bf:8f:
e5:6f:75:ab:56:66:46:e9:95:48:54:a3:bf:47:c5:
13:08:67:83:77:e8:e4:3f:dd:a1:3b:72:16:89:0c:
7a:c4:7e:53:08:41:b4:71:28:57:8d:fa:03:f8:97:
34:a6:18:6e:3c:35:1d:24:e1:d3:1f:ed:03:15:5d:
d3:4b:cd:ad:2d:e4:38:85:ba:f0:07:1f:ee:fa:57:
30:74:08:13:77:dd:43:98:05:1e:d8:d6:e8:a9:26:
5d:18:58:e8:25:21:b1:9c:aa:c7:06:33:1a:0d:03:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:52:61:C6:DA:35:BD:03:81:98:53:B4:C4:22:E2:98:29:98:5C:E4
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:31:17:a4:59:ce:b1:c4:fa:2a:c3:d7:c4:08:64:c9:38:
da:96:04:ea:e9:97:e4:14:ec:3f:a3:7a:1d:74:a7:c4:be:1c:
11:7f:14:8b:ba:0c:71:59:b9:5a:cb:75:fb:f8:e6:88:b7:90:
af:d5:fe:3b:9c:cc:43:dc:9c:7f:41:ac:b9:63:85:b4:59:1d:
46:25:6d:96:97:a5:92:e4:02:20:3e:3d:fc:ba:e9:5b:c7:e4:
14:e1:2b:20:b3:ed:ed:6e:bc:de:a7:e8:a4:3f:5c:1a:49:5b:
49:c4:f4:cf:15:bc:8f:3a:fa:bd:a3:55:7a:ad:cf:e3:cd:08:
72:19:ce:48:ff:e5:4c:c4:6f:0b:1f:45:82:8c:f4:e5:3e:20:
8f:fa:8e:3e:fd:41:2f:1d:02:47:63:60:e1:84:20:d6:f2:b0:
b8:c1:c4:7f:f9:d8:69:1e:ec:c5:96:7d:9f:44:1f:de:a7:5b:
77:63:f0:ba:ed:5f:b5:95:c5:29:15:77:ee:d2:05:42:b6:e9:
8d:e3:ef:9a:a8:29:43:c8:c1:09:85:ad:fe:77:57:d9:c4:1d:
f8:00:e6:47:02:96:e1:93:c0:a8:c7:d0:88:2c:0e:f4:94:d8:
db:0e:e0:92:9c:d2:ee:39:34:5f:0a:d6:43:f3:d6:dd:2a:5d:
d2:2d:cd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8J78aPcbvMmleqTGdQ5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk
MjlmMTYwHhcNMjYxMDE1MTkwMTEzWhcNMjYxMDE2MTkwMTEzWjAzMTEwLwYDVQQD
EyhkOTUyNjFjNmRhMzViZDAzODE5ODUzYjRjNDIyZTI5ODI5OTg1Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u9eYw0j4jdMm0dr3D/pfvsmfAjC
d485QGPHxzAthxX01p4KKL7k7f0VjJj7EYIJCAsaneFDFkRDqmgigBIJuMgg+4YO
bPM9oD3WqrVgroD8Q4EhSispKnT0mGkiaHYjvsctPjhqv3IwXAASoKDb0I3uREMg
KTJW40TErg0tlnBZLnlU6l0wk6nmZ2+i3vOFT391v4/lb3WrVmZG6ZVIVKO/R8UT
CGeDd+jkP92hO3IWiQx6xH5TCEG0cShXjfoD+Jc0phhuPDUdJOHTH+0DFV3TS82t
LeQ4hbrwBx/u+lcwdAgTd91DmAUe2NboqSZdGFjoJSGxnKrHBjMaDQOPgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlSYcbaNb0DgZhTtMQi4pgpmFzkMB8GA1UdIwQY
MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt
ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy
LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3UxF6RZ
zrHE+irD18QIZMk42pYE6umX5BTsP6N6HXSnxL4cEX8Ui7oMcVm5Wst1+/jmiLeQ
r9X+O5zMQ9ycf0GsuWOFtFkdRiVtlpelkuQCID49/LrpW8fkFOErILPt7W683qfo
pD9cGklbScT0zxW8jzr6vaNVeq3P480IchnOSP/lTMRvCx9Fgoz05T4gj/qOPv1B
Lx0CR2Ng4YQg1vKwuMHEf/nYaR7sxZZ9n0Qf3qdbd2Pwuu1ftZXFKRV37tIFQrbp
jePvmqgpQ8jBCYWt/ndX2cQd+ADmRwKW4ZPAqMfQiCwO9JTY2w7gkpzS7jk0XwrW
Q/PW3Spd0i3NbQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:26 2026 by rpki-client