Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: bzTINGwItMedKWlziASIpPJFWuT3Ad1tIHoPhCO+udk=
Subject key identifier: 48:39:F7:2E:1D:86:23:6B:AC:9E:4A:51:7F:40:64:4A:4A:96:4E:C3
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019CAA219218F0C15D055948985A833E19B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 11BF
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: YX8GFdQwqf0yTXWC5u5lL3v4CjoThKMl98mknGgqZDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:92:18:f0:c1:5d:05:59:48:98:5a:83:3e:19:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=4839f72e1d86236bac9e4a517f40644a4a964ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:02:5b:bf:85:f4:a5:3e:e2:28:2b:99:22:
e2:72:0d:f0:52:b3:25:00:f2:c8:2f:62:03:85:9f:
3b:02:3b:b9:04:1e:0a:18:de:35:c1:52:0c:b3:ba:
3c:45:41:bf:aa:18:ab:e9:b1:ec:86:23:5e:ab:45:
c2:50:89:22:f0:9c:dc:bc:a2:6c:68:08:1d:45:96:
e9:bf:ed:28:c4:dc:3d:ba:2b:11:77:de:c7:95:27:
91:6d:40:5f:16:76:9a:ae:83:e9:f1:54:15:41:09:
c0:67:e3:51:9c:7b:d0:9c:83:3d:4a:eb:85:c7:18:
cd:e4:48:65:78:a0:cd:4b:75:cc:af:b3:2e:2f:58:
b1:e5:8f:5f:26:45:91:9f:97:c7:ab:18:b5:23:e0:
89:ee:4c:16:64:70:97:af:9a:32:60:c3:37:1f:e4:
63:47:c3:4c:75:d1:3d:2a:5d:49:f3:17:be:6b:5f:
69:e9:f2:12:ed:1b:b7:d0:c4:11:de:e1:9f:88:c3:
69:b6:76:88:7d:88:8d:c9:b7:e5:87:39:51:6d:85:
e1:b9:91:d9:ac:0a:f5:37:60:a3:07:4c:e4:41:7d:
d5:1c:e7:b4:ed:3b:1c:c6:07:d7:f0:34:df:cd:4f:
2e:f8:6e:a2:de:4f:f4:9b:d4:e1:38:56:58:b4:d3:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:F7:2E:1D:86:23:6B:AC:9E:4A:51:7F:40:64:4A:4A:96:4E:C3
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:76:01:ec:7d:f7:64:b4:38:3f:80:ba:70:78:66:58:cf:
ad:e4:0d:4b:af:a1:3f:b1:45:e1:c2:59:73:46:2e:fb:d8:1c:
92:99:27:97:09:e2:66:00:7b:51:e6:49:1c:74:41:de:2f:6e:
7d:8a:8f:36:50:3a:fa:d7:59:9b:2a:93:14:4e:ea:b9:03:ca:
e1:07:14:0d:c9:d3:2b:aa:15:df:b1:ca:8e:d8:9d:46:b1:62:
b6:71:17:11:6a:fb:75:53:47:19:31:cf:7a:21:81:91:36:ad:
8f:c7:69:5f:04:8e:a9:2c:5e:ce:38:8f:88:f4:53:87:ef:34:
ab:3a:fa:5b:28:26:7a:4d:5e:35:e2:e0:c5:82:75:3a:d7:b9:
9c:7f:9e:d6:52:2f:d7:fa:eb:0f:1a:1a:94:6c:2d:da:4a:ad:
2c:d9:dd:7c:f3:5b:d8:38:9b:58:b5:30:a2:06:1c:8a:e8:a4:
cb:13:78:f9:52:a7:3f:af:58:9c:b5:9c:39:9d:7e:6c:d2:d0:
71:07:c0:3d:15:df:0d:87:b8:93:c7:81:43:0a:5a:ee:8a:5b:
ca:e4:52:a5:16:ba:97:18:6c:4a:d4:b6:5a:b8:a4:d7:fb:df:
51:df:68:3e:45:16:98:88:4d:60:52:8b:45:20:9b:14:a0:dd:
73:22:c5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZIY8MFdBVlImFqDPhm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjYwMzAxMTYwMDUyWhcNMjYwMzAyMTYwMDUyWjAzMTEwLwYDVQQD
Eyg0ODM5ZjcyZTFkODYyMzZiYWM5ZTRhNTE3ZjQwNjQ0YTRhOTY0ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1koCW7+F9KU+4igrmSLicg3wUrMl
APLIL2IDhZ87Aju5BB4KGN41wVIMs7o8RUG/qhir6bHshiNeq0XCUIki8JzcvKJs
aAgdRZbpv+0oxNw9uisRd97HlSeRbUBfFnaaroPp8VQVQQnAZ+NRnHvQnIM9SuuF
xxjN5EhleKDNS3XMr7MuL1ix5Y9fJkWRn5fHqxi1I+CJ7kwWZHCXr5oyYMM3H+Rj
R8NMddE9Kl1J8xe+a19p6fIS7Ru30MQR3uGfiMNptnaIfYiNybflhzlRbYXhuZHZ
rAr1N2CjB0zkQX3VHOe07TscxgfX8DTfzU8u+G6i3k/0m9ThOFZYtNOEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg59y4dhiNrrJ5KUX9AZEpKlk7DMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQp2Aex9
92S0OD+AunB4ZljPreQNS6+hP7FF4cJZc0Yu+9gckpknlwniZgB7UeZJHHRB3i9u
fYqPNlA6+tdZmyqTFE7quQPK4QcUDcnTK6oV37HKjtidRrFitnEXEWr7dVNHGTHP
eiGBkTatj8dpXwSOqSxezjiPiPRTh+80qzr6Wygmek1eNeLgxYJ1Ote5nH+e1lIv
1/rrDxoalGwt2kqtLNndfPNb2DibWLUwogYciuikyxN4+VKnP69YnLWcOZ1+bNLQ
cQfAPRXfDYe4k8eBQwpa7opbyuRSpRa6lxhsStS2Wrik1/vfUd9oPkUWmIhNYFKL
RSCbFKDdcyLFgw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:51 2026 by rpki-client