Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: Y6oirOKqPfRlqjtQed93RlF+Yks33Q9hSM/hh6y02yg=
Subject key identifier: 64:43:0B:BF:9B:26:9B:0E:8A:BC:6C:D3:CF:44:15:EC:83:21:3D:16
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 01A1E05F8825D7A9853A9F584B83A4F1232F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0CFE
Signing time: Sun 15 Nov 2026 18:01:59 +0000
Manifest this update: Sun 15 Nov 2026 18:01:59 +0000
Manifest next update: Mon 16 Nov 2026 18:01:59 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: NJtrSZPUQxao4CDXslzmMAQ5kpodWS+emqgVGozH0yo=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:88:25:d7:a9:85:3a:9f:58:4b:83:a4:f1:23:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Nov 15 18:01:59 2026 GMT
Not After : Nov 16 18:01:59 2026 GMT
Subject: CN=64430bbf9b269b0e8abc6cd3cf4415ec83213d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:2f:25:c4:ba:b7:d8:1c:99:91:80:4f:a1:
b3:f2:4a:62:47:d1:85:30:61:54:d9:2f:24:f3:c8:
ef:cf:19:7f:ff:03:40:41:d1:ae:5a:a7:cf:73:0b:
0b:b2:96:50:79:d3:2b:72:9e:90:a7:f1:36:60:81:
ea:41:d2:03:b9:59:27:23:f1:c5:d6:99:0d:18:85:
46:a2:94:d6:f3:42:c7:48:f2:3a:33:e8:6d:59:d5:
4b:ac:1c:94:be:91:0e:4c:64:33:ef:22:85:66:40:
76:63:76:f0:a8:d9:67:64:e3:25:0f:69:f9:d9:42:
ce:fb:ef:45:19:bb:bb:34:a9:c1:e3:50:58:59:e2:
a7:4c:bc:6a:3e:3c:b4:16:59:75:40:67:de:fc:16:
7a:b6:40:e8:68:ae:59:bf:41:98:fd:bd:34:af:81:
3e:07:71:f3:02:d5:2c:6c:ac:b3:03:17:36:47:9e:
2c:52:39:e8:e9:9c:6e:d5:5e:2d:1d:e6:a6:1b:f2:
b9:76:ec:98:86:e0:09:69:b3:a8:65:5d:98:e4:91:
f1:79:06:24:b2:cd:f6:6f:2b:5f:90:bc:79:2b:88:
44:68:3d:7b:4e:27:cf:b0:63:53:4a:e1:c5:db:17:
32:62:db:41:1a:d8:bb:dd:19:c6:83:aa:f9:7d:22:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:43:0B:BF:9B:26:9B:0E:8A:BC:6C:D3:CF:44:15:EC:83:21:3D:16
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:73:3a:89:94:2c:3d:d8:a1:69:b9:c1:6b:60:eb:1d:7d:
e4:ae:dc:c8:80:b1:40:7b:9b:0e:44:bd:42:b2:65:8a:d7:d2:
e1:84:48:28:a5:a3:6f:33:c2:9b:46:3b:7a:02:0a:0c:68:5b:
ff:a7:de:4f:ca:c9:b0:b0:e4:fb:ef:46:8b:6a:84:17:d3:b5:
0f:dd:19:29:1f:c3:59:56:b6:0b:ff:61:7c:e8:cb:2d:4a:7a:
1f:e6:00:cc:28:fa:11:59:fc:eb:57:e1:84:ce:7d:03:b5:36:
bb:33:ed:4f:45:4e:fc:ac:cc:e2:48:a7:de:fd:3a:dd:c7:4e:
c4:1f:d1:24:d5:c0:ae:da:84:27:46:b4:5e:4c:29:1d:25:ca:
7e:0e:a0:3c:c2:83:0d:15:07:6f:9b:8e:5a:c7:1a:bc:91:01:
2b:45:49:7f:b7:dc:42:28:bc:50:7a:ff:cd:62:9e:39:4a:bf:
3c:c3:7b:c8:36:e1:19:8f:20:a6:cf:53:5f:a7:0a:54:f0:f9:
7e:cb:33:d6:2d:61:67:c6:b0:da:3c:c0:71:3c:58:b6:28:e1:
36:48:d9:0b:2c:9f:c8:07:b6:04:d6:e0:0c:d8:b1:80:d1:dc:
81:fd:92:7d:ac:26:d0:06:02:e0:9e:af:ae:b5:87:02:d4:ec:
ee:5a:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:37 2026 by rpki-client