Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: 8J/bdCMiEUvu2dOpj4iagLlhQMRcnrHWFH3lxBOmPxs=
Subject key identifier: 5A:91:67:79:2B:4E:A8:A4:B6:66:1E:17:C3:9A:AD:31:82:8C:33:B9
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 01A1DE7137DCEEE8C231B443F3D03E471732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 02C0
Signing time: Sun 15 Nov 2026 09:02:04 +0000
Manifest this update: Sun 15 Nov 2026 09:02:04 +0000
Manifest next update: Mon 16 Nov 2026 09:02:04 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: VboelMCsNTDQH+JLOBqXNpS0V+aHUtcqzN9j5WKTcJM=)
2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:37:dc:ee:e8:c2:31:b4:43:f3:d0:3e:47:17:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Nov 15 09:02:04 2026 GMT
Not After : Nov 16 09:02:04 2026 GMT
Subject: CN=5a9167792b4ea8a4b6661e17c39aad31828c33b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:6a:34:2b:d3:a9:ab:ab:ad:46:88:33:24:
32:46:0d:73:63:8b:2a:8b:2b:ee:4d:a1:da:a9:6d:
1b:02:f3:0e:b1:9b:72:bf:c6:8a:c8:d7:44:15:ae:
ac:31:a8:8a:ad:b1:13:00:81:38:0a:0f:cc:df:f5:
1c:30:ea:82:c2:a9:ff:e2:13:f6:df:1d:bf:c7:39:
31:31:ef:b5:f7:b5:5a:c3:c4:29:9b:86:4d:98:95:
65:2d:7d:46:be:b1:ec:65:bf:d1:da:72:61:31:a2:
12:18:bb:fa:43:6c:a8:54:12:3e:2a:11:7e:7a:37:
d0:17:a4:8e:f8:d4:6e:62:92:11:fe:59:b1:86:b3:
0f:0c:a9:3f:24:c4:d3:23:cf:c8:d7:3c:91:7e:17:
a6:dd:5c:b4:88:8b:9d:1b:1c:a5:e0:6d:07:43:de:
8b:00:0b:c0:e9:09:e7:62:15:bb:6c:35:d6:a3:2b:
e3:c2:35:ed:82:bb:58:e1:9a:68:ab:29:9f:7f:3e:
37:2b:2e:dd:67:f0:5d:ba:27:4a:04:70:78:7d:74:
99:ac:76:9b:60:f8:f5:72:37:fc:6e:2e:2f:d1:c3:
74:bb:c2:02:9d:e4:44:8f:d7:5d:fa:a1:77:b7:63:
44:a4:af:24:8a:b0:58:94:9a:86:c7:30:01:84:79:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:67:79:2B:4E:A8:A4:B6:66:1E:17:C3:9A:AD:31:82:8C:33:B9
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:e4:a9:ae:4f:98:37:3f:dd:96:aa:c6:c1:6a:9b:33:13:
e8:22:77:d6:52:e6:20:03:d5:74:4e:7c:d4:09:d7:ba:be:31:
98:c0:ac:c2:28:7a:57:5c:99:1d:c2:9f:30:1a:de:64:98:50:
9a:b2:46:98:18:72:37:cc:f2:f9:61:e7:8a:19:01:c9:41:6c:
02:f1:c9:82:ec:bd:60:fb:96:0c:8f:d9:44:2e:7e:a0:73:f1:
7a:8e:65:f5:79:dc:1a:72:70:25:a1:b9:f7:96:cd:82:a5:6e:
d9:a7:4b:6d:18:f9:82:8d:39:05:7d:0a:82:e3:47:5e:a4:7b:
35:60:38:3e:09:11:c4:54:4a:c0:c3:99:67:4b:f0:34:ae:5c:
c5:22:2b:e8:60:a8:97:c5:20:b1:85:05:b6:02:ab:9e:a8:fe:
17:e4:74:10:5a:d6:73:e5:2b:b1:fb:c9:2f:d1:c0:8c:4e:44:
b6:9a:86:7e:6c:2c:96:ec:66:65:56:8c:4b:31:54:c0:1a:7a:
fd:32:e2:d7:5b:26:97:2f:c6:28:89:8b:1b:2c:b2:fe:03:7e:
f2:4f:cf:f9:d9:fd:d7:73:c7:02:5d:60:90:5c:7f:07:fe:4d:
6d:e6:00:a3:bb:fe:5e:05:c9:8a:b0:32:92:44:f4:2e:8a:4c:
c5:60:7a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecTfc7ujCMbRD89A+RxcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzBlMWJjOGVlZGQ5NDc4NjEwYjFhZmYwOTMwZjQwMzQ3
NTI2ZTUwHhcNMjYxMTE1MDkwMjA0WhcNMjYxMTE2MDkwMjA0WjAzMTEwLwYDVQQD
Eyg1YTkxNjc3OTJiNGVhOGE0YjY2NjFlMTdjMzlhYWQzMTgyOGMzM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknVqNCvTqaurrUaIMyQyRg1zY4sq
iyvuTaHaqW0bAvMOsZtyv8aKyNdEFa6sMaiKrbETAIE4Cg/M3/UcMOqCwqn/4hP2
3x2/xzkxMe+197Vaw8Qpm4ZNmJVlLX1GvrHsZb/R2nJhMaISGLv6Q2yoVBI+KhF+
ejfQF6SO+NRuYpIR/lmxhrMPDKk/JMTTI8/I1zyRfhem3Vy0iIudGxyl4G0HQ96L
AAvA6QnnYhW7bDXWoyvjwjXtgrtY4Zpoqymffz43Ky7dZ/BduidKBHB4fXSZrHab
YPj1cjf8bi4v0cN0u8ICneREj9dd+qF3t2NEpK8kirBYlJqGxzABhHlhjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqRZ3krTqiktmYeF8OarTGCjDO5MB8GA1UdIwQY
MBaAFEpw4byO7dlHhhCxr/CTD0A0dSblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUt
YWE5Yjg3M2Q3Zjk2LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUtYWE5Yjg3M2Q3Zjk2
LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMjkqa5P
mDc/3ZaqxsFqmzMT6CJ31lLmIAPVdE581AnXur4xmMCswih6V1yZHcKfMBreZJhQ
mrJGmBhyN8zy+WHnihkByUFsAvHJguy9YPuWDI/ZRC5+oHPxeo5l9XncGnJwJaG5
95bNgqVu2adLbRj5go05BX0KguNHXqR7NWA4PgkRxFRKwMOZZ0vwNK5cxSIr6GCo
l8UgsYUFtgKrnqj+F+R0EFrWc+UrsfvJL9HAjE5EtpqGfmwsluxmZVaMSzFUwBp6
/TLi11smly/GKImLGyyy/gN+8k/P+dn913PHAl1gkFx/B/5NbeYAo7v+XgXJirAy
kkT0LopMxWB6MA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:38:30 2026 by rpki-client