Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: T90DfHAkmUXm/esol29baNNX2LVYw5TG0Wt15vXZpfA=
Subject key identifier: B6:00:12:15:F1:64:29:7A:C0:54:D4:78:2E:8A:95:F7:AD:30:E9:B4
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 01A1DDCC62C9DEF95F4C8A049728D96474D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 06:02:01 +0000
Manifest this update: Sun 15 Nov 2026 06:02:01 +0000
Manifest next update: Mon 16 Nov 2026 06:02:01 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 8FR20yGw03m1oQh6PWDNMX/+bygW3GNPeKQr5vbTmpQ=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:62:c9:de:f9:5f:4c:8a:04:97:28:d9:64:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Nov 15 06:02:01 2026 GMT
Not After : Nov 16 06:02:01 2026 GMT
Subject: CN=b6001215f164297ac054d4782e8a95f7ad30e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:f5:97:b4:15:c4:ac:ef:7c:be:ff:a1:47:
85:39:2f:cb:59:56:95:6e:60:99:5f:db:64:f5:76:
c3:f5:10:7d:0f:ba:77:4f:8a:02:a1:c6:9d:6a:59:
01:48:08:3e:d2:44:7f:76:15:1d:a5:2c:50:00:4f:
05:36:6d:09:b6:59:36:d7:20:f7:e7:cb:0c:82:a3:
75:ae:93:92:90:19:ee:4f:47:43:79:14:8c:75:8a:
6e:3a:e2:17:70:92:cc:89:f5:f0:db:35:73:c9:9e:
b4:08:4c:4f:54:0f:38:6f:f5:40:4b:7d:39:9f:e7:
b2:49:23:37:c8:c5:3e:53:d4:ba:b7:ae:c5:96:2b:
cf:1e:bf:91:d7:df:1a:8b:24:79:ac:00:87:3e:0a:
8f:df:70:59:f3:f1:5b:53:3a:1a:59:91:31:9f:a4:
9e:98:ac:4b:61:e7:16:7f:1a:c0:ed:d4:48:2a:9c:
0d:2d:b4:3b:ab:4a:2e:cc:17:f3:14:ac:de:c7:41:
df:67:21:0a:cd:4a:97:10:c9:cf:99:c0:77:4b:17:
1f:85:44:e4:77:63:58:87:1f:e1:2d:a7:32:17:a3:
f9:7a:23:e0:df:3f:9f:6b:5a:8c:c5:10:b8:70:a9:
27:e0:28:dc:b0:1e:07:3d:cc:20:3d:bf:4d:f5:b4:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:12:15:F1:64:29:7A:C0:54:D4:78:2E:8A:95:F7:AD:30:E9:B4
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:d7:c6:8b:7e:09:18:45:a3:02:93:63:b5:26:0a:72:d2:
50:59:d4:a5:f5:63:fe:4b:ac:50:a9:13:11:8f:1c:78:57:1a:
94:5e:d2:1f:5b:bb:57:3d:66:39:a5:36:ec:04:36:a0:35:74:
a9:ff:01:09:61:bd:f8:d0:4b:40:e6:b7:69:46:f5:d8:80:28:
50:92:ce:06:95:1b:f8:60:14:fb:05:df:d6:f1:ea:a9:26:96:
27:fc:1c:54:32:e6:36:85:ff:ed:c5:6d:d6:f5:09:e0:bb:bb:
a6:d0:82:a7:0b:d1:a1:b7:60:2e:9c:43:ac:71:cd:fc:2f:c5:
0a:63:4f:67:ae:05:9f:c8:01:73:aa:d0:a6:3b:5a:32:84:c0:
81:c0:35:e6:38:69:64:fe:f2:82:6c:ae:2b:57:cc:bb:de:e6:
cb:3f:c8:52:4c:22:5f:36:75:c1:42:7e:0b:e4:a0:70:ee:0e:
a0:ee:3b:98:4c:84:36:f5:8c:5f:09:6e:98:ab:57:f2:71:1c:
a8:70:0b:49:67:fe:7b:3b:9e:d1:22:34:3a:c0:15:0e:bd:18:
f5:b9:b8:40:a3:a1:3a:d2:b0:51:07:ac:f9:e2:9e:e3:f7:56:
22:1e:01:23:4a:66:a7:d7:0e:6a:64:28:07:0e:01:1f:68:04:
31:65:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:28 2026 by rpki-client