Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: OuSaUaRAXQKB1RGILxadCXvrPSQB/Z0yKq1K6dccIO0=
Subject key identifier: 10:3D:D0:E3:5E:33:85:C8:6D:D7:62:C2:37:A6:D2:22:F7:19:E0:E6
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01A1DCF0257B1172EE2698F8FA2EAB41E2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 02:01:28 +0000
Manifest this update: Sun 15 Nov 2026 02:01:28 +0000
Manifest next update: Mon 16 Nov 2026 02:01:28 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: kwlpWNP2CfgzqEVjx06SV+odgkQ2XIurIZNJ0v3haDo=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:25:7b:11:72:ee:26:98:f8:fa:2e:ab:41:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Nov 15 02:01:28 2026 GMT
Not After : Nov 16 02:01:28 2026 GMT
Subject: CN=103dd0e35e3385c86dd762c237a6d222f719e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:5f:18:04:3e:0b:f3:f5:8b:fd:fc:c8:89:
6f:e9:73:66:72:3f:9a:4a:1e:68:41:ac:20:34:38:
58:31:15:1f:99:9e:59:bf:8c:00:09:c4:21:f9:9d:
6e:a1:29:92:64:bb:f6:5c:a5:77:30:9a:37:c8:bb:
c4:a2:23:a1:d9:66:91:d7:ff:78:62:63:83:83:37:
82:11:4f:dd:92:0c:ff:5c:d3:7b:2c:b5:96:b9:c8:
14:e1:49:5c:1b:eb:35:08:95:dc:18:b3:c1:bc:44:
67:36:7b:6c:be:83:4d:8f:13:81:f1:59:c4:3c:ef:
fd:6d:ac:5c:8d:35:4a:1a:b2:f2:3b:35:18:9a:03:
70:3c:b6:64:b0:2a:39:da:b5:94:c7:3e:5f:9e:15:
60:50:f7:5e:f8:fb:14:d9:21:b1:02:a1:e8:d7:28:
20:31:17:76:83:ee:4b:4d:2a:f3:4b:65:92:83:62:
de:d5:09:47:c9:3d:d2:34:5a:de:07:58:ec:76:35:
20:86:f9:1b:d2:80:f4:a9:53:41:84:c1:82:84:df:
b1:83:d8:b0:14:bf:60:f6:2d:ae:c9:49:ba:9d:9e:
86:4c:d5:0c:17:1f:a0:10:9d:0e:25:9d:58:40:f5:
1a:33:e3:da:81:23:df:23:54:8f:32:bb:f0:3b:79:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:D0:E3:5E:33:85:C8:6D:D7:62:C2:37:A6:D2:22:F7:19:E0:E6
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:b1:6e:5f:42:77:aa:c0:a7:2a:a0:f4:57:58:cf:b1:28:
05:65:f8:42:f6:88:38:08:69:f6:b7:4f:37:a0:9b:f5:73:02:
be:40:5a:a4:6a:d3:79:80:79:4f:9b:80:77:79:9c:28:72:21:
4d:24:26:8d:75:3a:2b:0a:d8:4b:3f:d6:fa:ab:4a:ab:a5:77:
88:8c:1b:42:2e:ef:26:64:9c:47:a5:0c:39:ae:18:9a:98:3a:
24:a8:ab:bd:a1:ec:f1:73:74:86:62:48:f7:1d:d6:16:9e:9e:
01:9f:ca:97:7e:0b:83:16:95:30:43:dd:19:68:10:a5:7f:6e:
dd:61:c7:4e:e5:b0:6f:f6:8c:fb:31:56:d2:0f:2b:07:5d:ba:
5a:1d:7c:d0:0b:31:00:2e:6d:9d:04:21:9e:32:3e:2a:5c:40:
9c:a0:01:ee:1b:08:be:94:1d:99:5b:b5:f1:b1:5f:6d:0a:be:
37:8b:7f:a8:4c:51:dc:6d:b8:d9:98:27:84:7a:fd:1d:c0:62:
3e:c8:8b:72:1e:1c:0c:b1:a3:2b:36:7b:89:25:69:61:de:19:
24:5e:f3:d7:8f:7b:e6:1f:e4:8d:ad:38:a8:73:c9:b5:a3:ef:
09:c5:c1:bc:12:c4:78:7f:04:9c:7b:89:1b:05:79:8e:d5:80:
f3:3d:c9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8CV7EXLuJpj4+i6rQeKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjYxMTE1MDIwMTI4WhcNMjYxMTE2MDIwMTI4WjAzMTEwLwYDVQQD
EygxMDNkZDBlMzVlMzM4NWM4NmRkNzYyYzIzN2E2ZDIyMmY3MTllMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19BfGAQ+C/P1i/38yIlv6XNmcj+a
Sh5oQawgNDhYMRUfmZ5Zv4wACcQh+Z1uoSmSZLv2XKV3MJo3yLvEoiOh2WaR1/94
YmODgzeCEU/dkgz/XNN7LLWWucgU4UlcG+s1CJXcGLPBvERnNntsvoNNjxOB8VnE
PO/9baxcjTVKGrLyOzUYmgNwPLZksCo52rWUxz5fnhVgUPde+PsU2SGxAqHo1ygg
MRd2g+5LTSrzS2WSg2Le1QlHyT3SNFreB1jsdjUghvkb0oD0qVNBhMGChN+xg9iw
FL9g9i2uyUm6nZ6GTNUMFx+gEJ0OJZ1YQPUaM+PagSPfI1SPMrvwO3nztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA90ONeM4XIbddiwjem0iL3GeDmMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnexbl9C
d6rApyqg9FdYz7EoBWX4QvaIOAhp9rdPN6Cb9XMCvkBapGrTeYB5T5uAd3mcKHIh
TSQmjXU6KwrYSz/W+qtKq6V3iIwbQi7vJmScR6UMOa4Ympg6JKirvaHs8XN0hmJI
9x3WFp6eAZ/Kl34LgxaVMEPdGWgQpX9u3WHHTuWwb/aM+zFW0g8rB126Wh180Asx
AC5tnQQhnjI+KlxAnKAB7hsIvpQdmVu18bFfbQq+N4t/qExR3G242ZgnhHr9HcBi
PsiLch4cDLGjKzZ7iSVpYd4ZJF7z14975h/kja04qHPJtaPvCcXBvBLEeH8EnHuJ
GwV5jtWA8z3Jyw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:19 2026 by rpki-client