Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: lbBfRIb98fef19mpKfRIcXXgZPfOUEkmamT2V2jDvA8=
Subject key identifier: 06:C4:21:26:E7:11:07:7F:66:E6:73:64:97:F1:2E:03:B4:3E:E6:F6
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01A14729741B85B424D0CD919856ABD497A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 00:01:01 +0000
Manifest this update: Sat 17 Oct 2026 00:01:01 +0000
Manifest next update: Sun 18 Oct 2026 00:01:01 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: 9LGgQT+XqjhFUCrXe9Y0k5QGYZHS6ILE2P09TS/COms=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:74:1b:85:b4:24:d0:cd:91:98:56:ab:d4:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Oct 17 00:01:01 2026 GMT
Not After : Oct 18 00:01:01 2026 GMT
Subject: CN=06c42126e711077f66e6736497f12e03b43ee6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:41:72:a2:da:50:d0:26:f1:f8:c1:b9:b2:
57:1a:65:14:af:c6:bf:3a:89:27:1e:9c:7e:f5:75:
df:8f:51:19:49:21:77:eb:87:4a:3d:a8:19:a4:59:
c2:f4:b7:44:e2:ab:a1:83:e7:fa:3e:5c:97:3b:8a:
4f:81:7d:c4:51:0e:26:76:6b:bd:d7:4e:7b:48:30:
05:22:ad:72:97:20:4e:4c:4e:09:ae:13:86:9f:d9:
ef:70:b1:71:13:5e:ef:f6:18:23:a0:6b:ff:ee:f8:
26:fb:4c:70:cc:5f:a6:28:2f:66:ca:64:5b:54:da:
d3:c9:16:fd:ec:b4:cd:57:50:fb:87:4b:df:86:54:
18:4d:2a:21:be:3a:88:3a:da:10:8e:b6:c7:30:c5:
5e:55:21:7b:19:19:4b:d0:f3:e8:2f:86:20:fb:c5:
d9:74:77:08:69:99:d4:ad:7e:e6:c8:45:65:91:25:
87:2a:9c:e3:b4:3c:cc:eb:69:7d:fd:27:0f:84:2b:
13:fb:b7:c6:4d:2a:e2:30:27:83:f9:a4:8c:d7:ac:
16:e4:f6:be:f8:a1:cc:3d:d0:2a:af:24:19:45:29:
68:9d:71:87:d0:fc:0c:fc:00:a8:48:6e:4b:05:2a:
57:ff:89:c4:c4:6a:96:0e:2d:f0:32:74:ee:e2:1e:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:21:26:E7:11:07:7F:66:E6:73:64:97:F1:2E:03:B4:3E:E6:F6
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:32:f0:f2:64:fb:55:f7:bc:f4:55:e5:70:3b:e3:f5:37:
b5:07:23:75:48:b6:ec:0a:15:f7:0a:8c:ed:53:ad:2b:7c:c0:
13:30:e7:01:33:b4:ab:82:24:8b:cd:7b:be:5e:a0:82:16:f8:
df:fd:9c:9d:50:2d:6e:03:66:b7:2a:7a:21:ad:af:bb:22:90:
12:5b:a1:df:87:18:a0:ed:77:f2:d1:f6:45:04:25:fb:ea:50:
b1:a1:3c:63:30:19:29:fe:d5:51:f8:ac:77:f8:14:f2:d5:de:
87:32:38:c2:e1:c4:d9:78:ff:78:60:b8:e0:2c:5b:34:cc:9a:
d5:f4:e4:48:5d:d3:3f:c1:ba:7c:f6:5f:4c:89:52:da:bb:59:
9b:d8:aa:3b:cb:c1:20:54:0a:3c:6b:57:a1:43:61:c0:cc:4a:
ba:42:cc:d0:58:c2:93:8a:bd:56:db:a7:9b:46:93:e0:5a:04:
3a:e0:a3:34:c4:7b:2b:08:9b:56:c8:8c:c0:e3:3a:02:5f:af:
bc:8e:48:73:1c:fa:2f:01:c3:2d:0a:98:a0:8f:e0:2a:10:1f:
c4:1b:e3:1a:0e:16:62:05:7a:73:9e:d9:be:f3:13:32:10:5a:
f6:e4:6d:6f:6e:63:39:a7:60:44:18:4b:57:c5:cb:ef:99:c6:
24:ae:68:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHKXQbhbQk0M2RmFar1JemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj
MTdmMzQwHhcNMjYxMDE3MDAwMTAxWhcNMjYxMDE4MDAwMTAxWjAzMTEwLwYDVQQD
EygwNmM0MjEyNmU3MTEwNzdmNjZlNjczNjQ5N2YxMmUwM2I0M2VlNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaFBcqLaUNAm8fjBubJXGmUUr8a/
OoknHpx+9XXfj1EZSSF364dKPagZpFnC9LdE4quhg+f6PlyXO4pPgX3EUQ4mdmu9
1057SDAFIq1ylyBOTE4JrhOGn9nvcLFxE17v9hgjoGv/7vgm+0xwzF+mKC9mymRb
VNrTyRb97LTNV1D7h0vfhlQYTSohvjqIOtoQjrbHMMVeVSF7GRlL0PPoL4Yg+8XZ
dHcIaZnUrX7myEVlkSWHKpzjtDzM62l9/ScPhCsT+7fGTSriMCeD+aSM16wW5Pa+
+KHMPdAqryQZRSlonXGH0PwM/ACoSG5LBSpX/4nExGqWDi3wMnTu4h4stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbEISbnEQd/ZuZzZJfxLgO0Pub2MB8GA1UdIwQY
MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt
YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1
LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLQy8PJk
+1X3vPRV5XA74/U3tQcjdUi27AoV9wqM7VOtK3zAEzDnATO0q4Iki817vl6gghb4
3/2cnVAtbgNmtyp6Ia2vuyKQEluh34cYoO138tH2RQQl++pQsaE8YzAZKf7VUfis
d/gU8tXehzI4wuHE2Xj/eGC44CxbNMya1fTkSF3TP8G6fPZfTIlS2rtZm9iqO8vB
IFQKPGtXoUNhwMxKukLM0FjCk4q9Vtunm0aT4FoEOuCjNMR7KwibVsiMwOM6Al+v
vI5Icxz6LwHDLQqYoI/gKhAfxBvjGg4WYgV6c57ZvvMTMhBa9uRtb25jOadgRBhL
V8XL75nGJK5ovA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:52:31 2026 by rpki-client