Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
File: 2q99feqywLmZjuJntfO25TEEA-E.mft (raw, json)
Hash identifier: l8Fv4mI123Ef7WJo/bwF7jv61649zeTxs6X+qwm9Kbw=
Subject key identifier: 00:6C:76:B7:63:56:F0:F4:E0:D9:53:37:9A:5C:7D:70:0C:A6:A4:34
Authority key identifier: DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
Certificate issuer: /CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Certificate serial: 01A17DE16E2CB3723D8E81A97C606C235F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:28 +0000
Manifest this update: Tue 27 Oct 2026 15:01:28 +0000
Manifest next update: Wed 28 Oct 2026 15:01:28 +0000
Files and hashes: 1: 2q99feqywLmZjuJntfO25TEEA-E.crl (hash: QotJ65OLus5rnuDWlig1GwkPxBlgyzorg8LhRrjW4aw=)
2: 7RGCArg6zHYj0Iou9jA7oVTdAb4.roa (hash: mGoXGOaisyNwd8zq8IefJ6jzjpEEa9vteqG8Ej7ZF/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:6e:2c:b3:72:3d:8e:81:a9:7c:60:6c:23:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Validity
Not Before: Oct 27 15:01:28 2026 GMT
Not After : Oct 28 15:01:28 2026 GMT
Subject: CN=006c76b76356f0f4e0d953379a5c7d700ca6a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:8e:6d:72:f5:2d:e3:02:02:e0:8f:e4:3f:
49:36:4e:d4:ff:9e:60:1e:3c:3f:f1:e5:9f:f8:61:
05:11:8d:a1:c0:04:2a:2c:7a:20:04:67:8c:c0:2c:
cf:a6:03:25:98:b5:2e:56:35:53:f1:1e:65:9c:97:
65:44:23:5d:18:e4:64:2d:70:42:25:d1:f4:86:16:
3b:db:9f:b8:78:6d:ad:39:1d:cb:0b:c5:7c:7a:38:
b2:bf:67:fc:38:63:4b:52:e9:a4:4f:60:66:bf:06:
e5:b8:17:8f:07:24:d9:09:73:3c:3e:7e:32:42:8c:
a4:11:32:51:2c:75:5b:69:f8:28:1c:3e:c8:47:51:
ad:94:e7:1b:4c:15:c1:b8:5a:4e:85:e3:69:c9:c7:
e8:38:5a:87:9a:af:1e:ba:9f:66:42:94:bf:87:e1:
c4:13:7b:1e:c4:14:af:92:38:91:26:74:56:e8:6b:
b0:c2:13:b7:75:b3:f7:74:51:4b:51:5e:21:38:0d:
65:72:26:19:be:bf:73:b2:2f:bc:97:2e:01:25:9c:
cd:25:eb:80:f9:d8:c4:af:b6:9b:7c:e4:7b:66:fd:
d8:09:8d:b0:2b:93:71:2c:93:d7:90:c8:0a:07:00:
22:af:75:dc:6f:f6:c8:ce:dc:25:33:43:7f:58:fb:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:76:B7:63:56:F0:F4:E0:D9:53:37:9A:5C:7D:70:0C:A6:A4:34
X509v3 Authority Key Identifier:
keyid:DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:1e:09:5f:f6:21:38:cd:a9:7b:72:f7:84:6b:d9:72:60:
07:21:09:c3:bc:3b:61:90:ef:a0:8b:2a:35:a9:64:24:18:97:
85:3b:2f:52:8a:9d:7f:4c:53:35:7c:8f:b2:9e:b4:75:82:43:
8e:81:85:b1:92:3a:a1:b8:0b:66:78:27:b1:6e:a4:6f:20:d9:
03:49:db:81:0a:68:a8:97:99:aa:e6:19:07:53:f7:f1:fb:92:
3c:a9:50:8e:3a:d4:8d:b0:aa:6c:59:9d:0f:25:44:59:12:72:
3d:1c:d9:ff:d6:c6:4a:9f:1d:19:70:9e:80:74:05:de:66:a3:
61:a2:81:c9:94:62:fe:61:e7:f6:f8:2b:d4:9f:96:c7:61:a3:
1a:eb:7b:86:b4:29:30:db:6f:0e:22:e2:e3:8d:d7:1c:fd:41:
ce:47:1a:9c:86:c7:a5:6d:eb:e3:35:d2:77:5f:39:96:eb:3d:
61:5b:55:7a:5d:94:04:a4:2a:01:98:ae:f5:c8:7d:07:49:06:
d6:2f:7e:3a:b2:90:5a:90:2c:37:f6:dd:96:1c:d2:50:b9:84:
48:69:22:f4:01:11:5b:c0:4b:96:64:aa:70:9a:69:40:52:26:
10:d8:c7:53:f9:bc:8d:45:8b:25:0e:7d:1f:9b:48:8a:64:76:
10:da:86:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94W4ss3I9joGpfGBsI19tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWY3ZDdkZWFiMmMwYjk5OThlZTI2N2I1ZjNiNmU1MzEw
NDAzZTEwHhcNMjYxMDI3MTUwMTI4WhcNMjYxMDI4MTUwMTI4WjAzMTEwLwYDVQQD
EygwMDZjNzZiNzYzNTZmMGY0ZTBkOTUzMzc5YTVjN2Q3MDBjYTZhNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L2ObXL1LeMCAuCP5D9JNk7U/55g
Hjw/8eWf+GEFEY2hwAQqLHogBGeMwCzPpgMlmLUuVjVT8R5lnJdlRCNdGORkLXBC
JdH0hhY725+4eG2tOR3LC8V8ejiyv2f8OGNLUumkT2BmvwbluBePByTZCXM8Pn4y
QoykETJRLHVbafgoHD7IR1GtlOcbTBXBuFpOheNpycfoOFqHmq8eup9mQpS/h+HE
E3sexBSvkjiRJnRW6GuwwhO3dbP3dFFLUV4hOA1lciYZvr9zsi+8ly4BJZzNJeuA
+djEr7abfOR7Zv3YCY2wK5NxLJPXkMgKBwAir3Xcb/bIztwlM0N/WPsANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABsdrdjVvD04NlTN5pcfXAMpqQ0MB8GA1UdIwQY
MBaAFNqvfX3qssC5mY7iZ7XztuUxBAPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwQeCV/2
ITjNqXty94Rr2XJgByEJw7w7YZDvoIsqNalkJBiXhTsvUoqdf0xTNXyPsp60dYJD
joGFsZI6obgLZngnsW6kbyDZA0nbgQpoqJeZquYZB1P38fuSPKlQjjrUjbCqbFmd
DyVEWRJyPRzZ/9bGSp8dGXCegHQF3majYaKByZRi/mHn9vgr1J+Wx2GjGut7hrQp
MNtvDiLi443XHP1BzkcanIbHpW3r4zXSd185lus9YVtVel2UBKQqAZiu9ch9B0kG
1i9+OrKQWpAsN/bdlhzSULmESGki9AERW8BLlmSqcJppQFImENjHU/m8jUWLJQ59
H5tIimR2ENqGSA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:54 2026 by rpki-client