Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
File: D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft (raw, json)
Hash identifier: RAX3/ooDiq6hTIlDr0LhGw8f5f0cTh7+kUEhlINWMNU=
Subject key identifier: 2F:E1:B3:6F:52:A2:58:37:A0:72:F0:D1:F1:7E:7D:E2:19:0D:D4:95
Authority key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Certificate issuer: /CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Certificate serial: 01A14014BC43E08C54164B51A658FBDC99A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
Manifest number: 011F
Signing time: Thu 15 Oct 2026 15:01:02 +0000
Manifest this update: Thu 15 Oct 2026 15:01:02 +0000
Manifest next update: Fri 16 Oct 2026 15:01:02 +0000
Files and hashes: 1: 2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa (hash: 4bgTyI2sRmPi6hIWWdFcnzZt2fLQPiRH1Jt4gV4iEG0=)
2: D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl (hash: jICCqNlcKFeHkU5oWiL/LDUSZLyz0ZBVEbYlPhTLERc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:bc:43:e0:8c:54:16:4b:51:a6:58:fb:dc:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Validity
Not Before: Oct 15 15:01:02 2026 GMT
Not After : Oct 16 15:01:02 2026 GMT
Subject: CN=2fe1b36f52a25837a072f0d1f17e7de2190dd495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:64:ed:c7:30:7f:c8:ca:0e:b1:bd:fb:be:
65:1a:4c:7e:d1:3f:91:64:1f:0f:bd:c0:7b:df:6e:
72:40:36:15:7c:85:37:09:9d:ad:c1:67:a2:5f:49:
1c:df:68:df:5d:de:5e:a4:af:5b:2b:38:87:60:07:
f3:5c:fd:d9:56:1a:6b:c5:21:e2:fd:3b:3c:01:7a:
a7:0c:52:8e:2d:25:00:ca:1a:48:5c:3f:ce:55:14:
05:cd:8f:1d:da:bd:60:48:e0:ca:62:fd:cb:1c:38:
93:07:7d:11:13:8c:77:ec:d4:af:07:f7:cf:e4:a1:
e8:b2:7e:e9:1e:3a:4d:cb:97:41:6b:e6:f4:60:27:
89:a7:f8:87:aa:6d:1a:6c:b9:72:f9:55:ae:36:6a:
45:85:5e:9b:4f:8b:85:4c:b2:fc:61:18:17:32:02:
c8:54:53:b0:66:07:59:b3:4a:71:8c:dc:26:e5:f7:
43:d2:85:24:0c:7e:31:c3:49:e5:1a:34:2f:5f:2a:
3f:a3:71:7b:54:1c:b1:e3:30:b2:66:d5:dc:16:51:
a1:07:d3:9d:ca:94:d6:f2:0c:81:b7:7b:68:cd:37:
1f:b6:bd:1f:ad:b7:4d:07:87:8b:4d:82:c9:8b:a6:
0f:88:23:d3:7f:aa:ec:ab:82:f7:51:45:29:2b:00:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:B3:6F:52:A2:58:37:A0:72:F0:D1:F1:7E:7D:E2:19:0D:D4:95
X509v3 Authority Key Identifier:
keyid:0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:d2:f5:bd:2c:7d:8b:f4:b8:0b:8e:38:7a:93:f8:fb:ba:
a4:2d:45:02:08:c2:b2:f2:2c:24:76:19:f3:ea:84:9b:bd:4f:
63:70:fb:38:47:80:e8:30:d4:58:05:1f:47:c4:a7:c6:6d:25:
3c:f0:9a:e6:5f:fc:8c:22:6e:6d:06:36:b4:ad:23:7c:cb:a4:
84:6e:12:7e:e4:b1:6b:24:76:e8:24:f0:a4:12:32:17:18:ee:
ec:78:14:26:26:80:98:79:68:0a:23:96:11:da:8d:3c:57:74:
e1:6a:db:fb:d8:65:61:ba:d9:81:63:c0:58:7d:a8:d1:4f:30:
40:ad:f5:9b:c4:7d:ec:b7:14:51:5e:8b:78:41:9f:9f:d0:03:
39:9f:03:af:20:e2:7f:1a:44:a4:9c:be:ce:e9:5c:6b:76:8e:
d5:da:30:3d:96:bd:54:3c:d2:c6:3c:38:41:e4:47:c7:40:03:
af:27:74:03:18:d3:d2:71:33:07:0b:95:f4:fb:ef:86:61:30:
fb:0e:eb:89:e2:b1:65:25:ea:38:46:0a:30:d0:72:d4:57:fb:
00:3e:f0:af:3f:31:5e:5f:11:76:22:63:4c:1c:3a:2b:2a:ac:
c6:ad:60:56:87:36:4a:f7:08:bc:a3:43:40:24:a1:91:16:68:
3a:be:cc:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFLxD4IxUFktRplj73JmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYTdjN2Q4NjE3MjY3NWY3OGU5NTU0YWQ2NzM1NGNlYmYx
OGQyOTAwHhcNMjYxMDE1MTUwMTAyWhcNMjYxMDE2MTUwMTAyWjAzMTEwLwYDVQQD
EygyZmUxYjM2ZjUyYTI1ODM3YTA3MmYwZDFmMTdlN2RlMjE5MGRkNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeNk7ccwf8jKDrG9+75lGkx+0T+R
ZB8PvcB7325yQDYVfIU3CZ2twWeiX0kc32jfXd5epK9bKziHYAfzXP3ZVhprxSHi
/Ts8AXqnDFKOLSUAyhpIXD/OVRQFzY8d2r1gSODKYv3LHDiTB30RE4x37NSvB/fP
5KHosn7pHjpNy5dBa+b0YCeJp/iHqm0abLly+VWuNmpFhV6bT4uFTLL8YRgXMgLI
VFOwZgdZs0pxjNwm5fdD0oUkDH4xw0nlGjQvXyo/o3F7VByx4zCyZtXcFlGhB9Od
ypTW8gyBt3tozTcftr0frbdNB4eLTYLJi6YPiCPTf6rsq4L3UUUpKwCcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/hs29Solg3oHLw0fF+feIZDdSVMB8GA1UdIwQY
MBaAFA+nx9hhcmdfeOlVStZzVM6/GNKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZmSDJHRnlaMTk0NlZWSzFuTlV6cjhZMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvRDZmSDJHRnlaMTk0NlZWSzFuTlV6cjhZMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvRDZmSDJHRnlaMTk0NlZWSzFuTlV6cjhZMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgPS9b0s
fYv0uAuOOHqT+Pu6pC1FAgjCsvIsJHYZ8+qEm71PY3D7OEeA6DDUWAUfR8Snxm0l
PPCa5l/8jCJubQY2tK0jfMukhG4SfuSxayR26CTwpBIyFxju7HgUJiaAmHloCiOW
EdqNPFd04Wrb+9hlYbrZgWPAWH2o0U8wQK31m8R97LcUUV6LeEGfn9ADOZ8DryDi
fxpEpJy+zulca3aO1dowPZa9VDzSxjw4QeRHx0ADryd0AxjT0nEzBwuV9PvvhmEw
+w7rieKxZSXqOEYKMNBy1Ff7AD7wrz8xXl8RdiJjTBw6Kyqsxq1gVoc2SvcIvKND
QCShkRZoOr7M9Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:20 2026 by rpki-client