
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File: c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier: ti+1sLhAoVYDGLe6AmR/kIIJYALnHtMA9IQWjpS59+M=
Subject key identifier: FE:B7:27:FD:25:75:7F:CE:D0:D5:F4:FA:80:62:F6:F5:8B:35:EE:FD
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer: /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial: 01A1E05EA89A2A580870A7F48DF26BBB461F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:02 +0000
Manifest this update: Sun 15 Nov 2026 18:01:02 +0000
Manifest next update: Mon 16 Nov 2026 18:01:02 +0000
Files and hashes: 1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: CpGRAXn0zPzVxKfqwO7Ith262aYy7SY7D0xh4edBEsM=)
2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:a8:9a:2a:58:08:70:a7:f4:8d:f2:6b:bb:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Validity
Not Before: Nov 15 18:01:02 2026 GMT
Not After : Nov 16 18:01:02 2026 GMT
Subject: CN=feb727fd25757fced0d5f4fa8062f6f58b35eefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:3e:31:ef:32:13:fe:92:31:97:68:b1:8b:
ce:84:f3:ef:f4:e4:32:c7:39:ad:fb:e2:51:5c:5d:
28:21:09:8e:fc:aa:6e:f1:9c:76:48:aa:e1:e9:63:
ce:da:7e:34:e8:61:99:20:0a:86:bc:2c:b3:8d:8b:
95:d7:50:a1:ed:e4:52:fc:5f:6f:28:52:f5:39:e4:
23:91:52:1a:a0:40:58:3a:76:00:ff:a6:14:25:30:
36:00:90:44:6d:b8:9a:52:dd:a7:69:57:4f:71:2f:
c9:37:55:62:bc:ce:d7:46:9a:2d:17:2f:2b:26:53:
bc:7a:71:db:ac:94:22:3c:bf:f5:28:c6:1c:09:2c:
78:a7:32:8f:c4:d5:2c:70:4f:c8:cc:72:3d:cc:ac:
3e:cc:38:4b:af:ac:54:1f:a7:2e:19:fc:16:45:e6:
62:51:ef:07:b5:26:a0:e5:d4:27:a1:95:19:80:3f:
41:68:02:5e:83:ab:c4:b2:5d:68:cb:06:45:6d:b2:
f1:56:13:63:e1:44:a9:48:11:69:86:15:57:44:e4:
cc:68:b4:3d:11:f5:ce:42:38:50:68:26:9a:44:fc:
c9:6f:d0:23:4b:0f:0d:0d:0f:69:06:6f:12:ab:00:
e7:ef:aa:56:69:37:0a:8b:e8:e9:65:02:81:88:d7:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B7:27:FD:25:75:7F:CE:D0:D5:F4:FA:80:62:F6:F5:8B:35:EE:FD
X509v3 Authority Key Identifier:
keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c8:1a:b9:2a:e1:5c:6c:67:54:13:08:2b:b0:24:a1:ca:bb:
eb:42:c6:be:2d:a5:7d:89:55:26:f8:1f:4e:34:27:23:de:95:
0e:99:96:fe:81:3f:ea:94:27:1a:eb:32:77:97:a6:8c:be:b4:
13:e7:0d:43:a4:2d:f1:41:86:95:12:16:e7:7a:f9:68:d9:1e:
2d:0b:06:e3:8a:35:3a:a9:c4:e2:96:49:76:d4:ee:74:35:d7:
ed:8f:a3:bf:61:23:08:de:d9:9b:f9:e3:fc:32:ad:86:28:27:
c9:26:bc:c8:36:b7:34:11:32:c5:0f:21:8d:3b:88:49:b0:85:
f9:ab:11:c3:72:2f:32:6f:78:82:3f:1e:03:bd:08:07:fc:5f:
77:d1:4b:41:56:9a:73:2d:de:c0:4f:ae:c5:e2:39:7b:36:ec:
35:24:95:68:8b:c7:da:ec:38:c9:21:76:e8:95:23:f1:32:77:
a5:72:2a:92:db:3c:93:9a:da:60:da:2b:89:11:2d:81:d0:29:
96:c0:eb:2b:7b:a0:d4:c2:90:10:de:65:15:41:23:55:8d:4c:
6d:76:6f:09:40:10:75:4f:9e:40:f3:3f:57:38:ec:1f:a0:ca:
85:48:16:15:5e:1f:2d:9b:96:61:7b:c6:20:b3:4e:9f:6c:d6:
81:1d:65:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgXqiaKlgIcKf0jfJru0YfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY5YjBkYThjYmE4MjMyYmZkN2M3NzEwZjA0NTM3Njc4
ODllOWQwHhcNMjYxMTE1MTgwMTAyWhcNMjYxMTE2MTgwMTAyWjAzMTEwLwYDVQQD
EyhmZWI3MjdmZDI1NzU3ZmNlZDBkNWY0ZmE4MDYyZjZmNThiMzVlZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmM+Me8yE/6SMZdosYvOhPPv9OQy
xzmt++JRXF0oIQmO/Kpu8Zx2SKrh6WPO2n406GGZIAqGvCyzjYuV11Ch7eRS/F9v
KFL1OeQjkVIaoEBYOnYA/6YUJTA2AJBEbbiaUt2naVdPcS/JN1VivM7XRpotFy8r
JlO8enHbrJQiPL/1KMYcCSx4pzKPxNUscE/IzHI9zKw+zDhLr6xUH6cuGfwWReZi
Ue8HtSag5dQnoZUZgD9BaAJeg6vEsl1oywZFbbLxVhNj4USpSBFphhVXROTMaLQ9
EfXOQjhQaCaaRPzJb9AjSw8NDQ9pBm8SqwDn76pWaTcKi+jpZQKBiNf+XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP63J/0ldX/O0NX0+oBi9vWLNe79MB8GA1UdIwQY
MBaAFHP/mw2oy6gjK/18dxDwRTdniJ6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQt
Yjg5ZGM0ZmQ2ZWUwLzEvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQtYjg5ZGM0ZmQ2ZWUw
LzEvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMgauSrh
XGxnVBMIK7Akocq760LGvi2lfYlVJvgfTjQnI96VDpmW/oE/6pQnGusyd5emjL60
E+cNQ6Qt8UGGlRIW53r5aNkeLQsG44o1OqnE4pZJdtTudDXX7Y+jv2EjCN7Zm/nj
/DKthignySa8yDa3NBEyxQ8hjTuISbCF+asRw3IvMm94gj8eA70IB/xfd9FLQVaa
cy3ewE+uxeI5ezbsNSSVaIvH2uw4ySF26JUj8TJ3pXIqkts8k5raYNoriREtgdAp
lsDrK3ug1MKQEN5lFUEjVY1MbXZvCUAQdU+eQPM/VzjsH6DKhUgWFV4fLZuWYXvG
ILNOn2zWgR1lSQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:32 2026 by rpki-client