Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: pZ/ZsL5k7VJkoYJJBjGll0yqAKjVmSqAie8Xx6pE3LA=
Subject key identifier: F1:E4:BF:2D:17:66:BF:45:08:CD:72:89:DB:E0:C2:C4:FD:E9:3E:0A
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01A0C1438E27E6E9151C128AB790A32AC5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 00:00:25 +0000
Manifest this update: Mon 21 Sep 2026 00:00:25 +0000
Manifest next update: Tue 22 Sep 2026 00:00:25 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: C+UtADnvulfJB5pNgZGd1y1uRD7Yk49xtr3pwhdFLi0=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:8e:27:e6:e9:15:1c:12:8a:b7:90:a3:2a:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Sep 21 00:00:25 2026 GMT
Not After : Sep 22 00:00:25 2026 GMT
Subject: CN=f1e4bf2d1766bf4508cd7289dbe0c2c4fde93e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:7f:fe:9f:5a:ad:6a:fa:bc:45:c5:42:cc:
52:c1:19:e5:ed:b4:8c:f1:49:3a:ee:b8:2e:5e:ae:
fa:9a:d8:30:3f:f7:d5:c1:04:7e:4b:5c:7c:4c:9c:
36:1a:1b:9d:7f:1d:61:79:ae:38:39:76:c2:59:b1:
f7:c7:2c:84:53:f4:66:d0:a6:98:75:21:0c:7e:c9:
22:96:9c:81:9d:4b:66:b2:04:44:23:4d:5f:93:a8:
34:5a:25:47:c1:06:6d:af:81:72:cd:9d:a7:28:a8:
b1:40:86:d4:47:c2:dc:39:77:59:5e:be:8b:df:41:
6a:65:65:47:34:fe:b3:bd:97:e3:e4:ef:e5:78:e1:
38:f7:03:5e:53:fe:3b:90:15:71:eb:a1:bd:8c:d5:
9e:38:5c:2d:da:b0:1c:54:59:b7:b3:f2:1e:fa:95:
9f:bd:4d:bc:3e:93:e6:30:25:4d:12:5c:40:96:ff:
35:ba:cd:06:f9:a2:5b:9a:06:9c:6d:d3:c2:57:b7:
9f:e1:7d:38:8b:e1:2a:02:74:f5:17:b3:b0:ad:86:
75:a8:e5:4c:e6:ca:cb:3b:76:fe:38:15:b7:20:ed:
98:4b:4f:95:e5:72:6f:74:8b:b8:f0:b4:fa:80:36:
2b:08:6f:9c:e3:15:df:f1:c6:b0:9d:b7:41:4d:4c:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:BF:2D:17:66:BF:45:08:CD:72:89:DB:E0:C2:C4:FD:E9:3E:0A
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:37:aa:99:d7:7f:a3:dd:8f:21:90:61:24:21:68:ac:0a:
41:6d:d6:d9:2c:6e:04:84:fb:6f:3a:46:88:3e:b2:b7:ab:1b:
56:0c:fb:70:7f:a4:e8:eb:a6:cd:f2:c4:57:1b:31:ed:c1:23:
9f:67:dd:71:fa:b9:fb:f2:cb:65:5d:9c:41:fb:05:a5:17:24:
59:6d:9a:c5:34:cc:13:c5:c4:8b:f5:d0:8a:7c:ce:e1:e8:f9:
c5:7d:5e:03:25:6e:99:e9:5c:68:f3:ff:4d:4f:8e:5e:40:6b:
c2:a4:ed:6a:39:ed:ca:3a:2e:05:fc:cc:01:b2:a9:cd:52:e2:
e2:53:32:3e:f2:8d:8a:55:4a:99:df:1c:43:0f:d1:27:7a:e8:
89:e0:ee:f7:12:9a:33:f2:f7:aa:a6:35:14:58:f6:e8:08:5c:
43:b1:46:8c:dd:18:64:a4:c6:11:07:93:97:8b:d7:0b:4e:5b:
c5:cd:fc:a4:3c:f7:eb:67:9c:ed:dc:db:f5:93:e4:a7:79:c9:
fa:bb:06:95:8a:15:c5:63:0d:bd:24:d3:5d:71:ca:6d:fc:2c:
45:b4:98:60:f6:c7:53:7e:20:1a:93:16:5a:6f:55:e3:92:96:
99:07:89:a1:59:d7:e7:2a:92:a2:10:42:5a:9c:ad:58:63:22:
d2:77:e5:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBQ44n5ukVHBKKt5CjKsXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjYwOTIxMDAwMDI1WhcNMjYwOTIyMDAwMDI1WjAzMTEwLwYDVQQD
EyhmMWU0YmYyZDE3NjZiZjQ1MDhjZDcyODlkYmUwYzJjNGZkZTkzZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ct//p9arWr6vEXFQsxSwRnl7bSM
8Uk67rguXq76mtgwP/fVwQR+S1x8TJw2Ghudfx1hea44OXbCWbH3xyyEU/Rm0KaY
dSEMfskilpyBnUtmsgREI01fk6g0WiVHwQZtr4FyzZ2nKKixQIbUR8LcOXdZXr6L
30FqZWVHNP6zvZfj5O/leOE49wNeU/47kBVx66G9jNWeOFwt2rAcVFm3s/Ie+pWf
vU28PpPmMCVNElxAlv81us0G+aJbmgacbdPCV7ef4X04i+EqAnT1F7OwrYZ1qOVM
5srLO3b+OBW3IO2YS0+V5XJvdIu48LT6gDYrCG+c4xXf8cawnbdBTUw9NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHkvy0XZr9FCM1yidvgwsT96T4KMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq83qpnX
f6PdjyGQYSQhaKwKQW3W2SxuBIT7bzpGiD6yt6sbVgz7cH+k6OumzfLEVxsx7cEj
n2fdcfq5+/LLZV2cQfsFpRckWW2axTTME8XEi/XQinzO4ej5xX1eAyVumelcaPP/
TU+OXkBrwqTtajntyjouBfzMAbKpzVLi4lMyPvKNilVKmd8cQw/RJ3roieDu9xKa
M/L3qqY1FFj26AhcQ7FGjN0YZKTGEQeTl4vXC05bxc38pDz362ec7dzb9ZPkp3nJ
+rsGlYoVxWMNvSTTXXHKbfwsRbSYYPbHU34gGpMWWm9V45KWmQeJoVnX5yqSohBC
WpytWGMi0nflpg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:39:12 2026 by rpki-client