Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: kUaSwmgBJCQSTvTMbvCSZ+7f52BjmtoD6SlsksT6lf0=
Subject key identifier: 41:6F:9C:16:67:C4:69:FE:D4:EE:98:34:41:4E:DF:1D:A9:36:2E:D4
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019EBE47FA82947D6F2E8546DFF60C711231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 00:00:48 +0000
Manifest this update: Sat 13 Jun 2026 00:00:48 +0000
Manifest next update: Sun 14 Jun 2026 00:00:48 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: qGncW7JXbX3HNZeodsdY7fevHvsXu89z8qGVpn8UKlg=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:fa:82:94:7d:6f:2e:85:46:df:f6:0c:71:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jun 13 00:00:48 2026 GMT
Not After : Jun 14 00:00:48 2026 GMT
Subject: CN=416f9c1667c469fed4ee9834414edf1da9362ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:f3:3f:ba:c1:90:78:cf:cc:14:dd:d9:63:
86:d8:56:04:1f:33:4d:ae:51:c4:36:c3:87:84:78:
ea:9c:1d:95:12:7d:83:f7:ac:37:0a:8f:7c:3c:d3:
8a:5a:01:77:6b:8b:53:74:9d:d7:26:2a:9e:ea:0c:
64:52:d5:32:2d:b4:f3:f8:00:f8:15:63:fc:5e:db:
91:35:ea:98:34:a9:3d:0a:6b:d5:31:9e:fb:a7:0c:
ec:4a:84:b0:f9:8e:d1:0f:c5:9b:56:7a:5a:d6:1b:
d0:77:c3:f2:6d:c0:b1:5c:8a:1c:6b:f3:e2:41:55:
14:84:ad:68:df:7f:62:59:19:eb:7e:5c:bd:69:7c:
3a:39:ce:27:20:b8:b4:28:33:bb:88:f4:0d:a2:01:
ef:14:e9:b4:73:31:f1:34:18:72:10:dd:f1:54:4e:
50:52:d4:e3:6f:65:55:2b:0e:52:f3:c5:af:6a:1b:
e6:0e:13:53:57:cd:be:95:e2:2f:a6:89:33:18:bb:
ea:ab:e8:06:8e:e5:b2:1f:ab:12:db:41:9f:55:d4:
53:0c:97:94:3c:d7:c2:ee:c4:d2:90:1f:31:48:61:
5b:48:0b:94:e6:bf:12:c3:cd:df:bf:38:09:20:ca:
18:2f:eb:05:ff:96:f4:f7:50:f7:46:f3:dc:95:63:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:9C:16:67:C4:69:FE:D4:EE:98:34:41:4E:DF:1D:A9:36:2E:D4
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:56:56:7c:fb:8a:88:55:32:a9:0a:fc:55:60:53:36:6c:17:
c0:62:dd:55:b5:d6:11:4a:02:f0:84:68:ee:28:ea:0b:ce:e9:
0c:75:dc:e9:60:f6:ec:53:13:5e:9b:b7:b5:dc:6b:c3:12:4f:
22:fb:12:e2:58:d6:ad:f7:29:3b:ea:9e:c7:ca:49:f4:31:3b:
89:21:57:c8:9b:4b:72:39:6c:7e:f9:6e:81:1c:7f:5c:58:58:
16:e6:31:87:50:c3:05:e9:80:41:a9:ef:a1:b8:76:fc:07:39:
f4:46:d6:7c:7a:ce:a8:8c:d0:e8:87:2a:ad:e2:11:df:b6:ef:
ab:7f:2a:cf:4c:85:b0:10:51:04:61:be:6c:6b:d1:6b:e2:b3:
04:d8:f7:d4:7f:20:37:59:60:2f:77:af:e5:bb:05:bd:8a:5d:
d0:cc:cd:99:db:b3:f2:8f:b1:8d:a2:e2:9c:a1:3b:a8:ee:2a:
16:28:00:9f:76:d1:94:08:7b:a0:47:cd:5d:2e:99:27:97:34:
d2:db:e7:01:53:d9:a6:d2:26:0e:13:eb:16:ce:2a:81:dd:61:
95:fe:fd:b0:d7:77:b2:b8:bc:e5:1f:c4:62:5e:d3:7c:b0:51:
2f:ec:be:4d:82:e1:5c:2d:78:91:fd:44:1d:3b:3e:50:32:07:
0b:ce:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R/qClH1vLoVG3/YMcRIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjYwNjEzMDAwMDQ4WhcNMjYwNjE0MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg0MTZmOWMxNjY3YzQ2OWZlZDRlZTk4MzQ0MTRlZGYxZGE5MzYyZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLzP7rBkHjPzBTd2WOG2FYEHzNN
rlHENsOHhHjqnB2VEn2D96w3Co98PNOKWgF3a4tTdJ3XJiqe6gxkUtUyLbTz+AD4
FWP8XtuRNeqYNKk9CmvVMZ77pwzsSoSw+Y7RD8WbVnpa1hvQd8PybcCxXIoca/Pi
QVUUhK1o339iWRnrfly9aXw6Oc4nILi0KDO7iPQNogHvFOm0czHxNBhyEN3xVE5Q
UtTjb2VVKw5S88WvahvmDhNTV82+leIvpokzGLvqq+gGjuWyH6sS20GfVdRTDJeU
PNfC7sTSkB8xSGFbSAuU5r8Sw83fvzgJIMoYL+sF/5b091D3RvPclWPXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFvnBZnxGn+1O6YNEFO3x2pNi7UMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFZWfPuK
iFUyqQr8VWBTNmwXwGLdVbXWEUoC8IRo7ijqC87pDHXc6WD27FMTXpu3tdxrwxJP
IvsS4ljWrfcpO+qex8pJ9DE7iSFXyJtLcjlsfvlugRx/XFhYFuYxh1DDBemAQanv
obh2/Ac59EbWfHrOqIzQ6IcqreIR37bvq38qz0yFsBBRBGG+bGvRa+KzBNj31H8g
N1lgL3ev5bsFvYpd0MzNmduz8o+xjaLinKE7qO4qFigAn3bRlAh7oEfNXS6ZJ5c0
0tvnAVPZptImDhPrFs4qgd1hlf79sNd3sri85R/EYl7TfLBRL+y+TYLhXC14kf1E
HTs+UDIHC855BQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:18 2026 by rpki-client