Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: VZz+Mr6b9QgC8Gpc8x5qH7xep2awJWaKgPt37b8cawE=
Subject key identifier: 71:46:DB:5A:0D:23:89:37:65:A8:B8:BE:64:19:2D:16:DD:FD:B5:4F
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01A1DEA71AE21111297DDDAF1E779957D216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 1B1B
Signing time: Sun 15 Nov 2026 10:00:55 +0000
Manifest this update: Sun 15 Nov 2026 10:00:55 +0000
Manifest next update: Mon 16 Nov 2026 10:00:55 +0000
Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
2: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: 6qnbT4AgVYLbw9I5Nn0rpDkcIW1guXbkZ+m6I4n4HAY=)
3: DVZz7rsMGVVgSxRyVzYOt5_hjkw.roa (hash: 4sqqNPs5YOYeCorNx8Z4ekZEsrO+YvaH34HN2GL//3Q=)
4: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:1a:e2:11:11:29:7d:dd:af:1e:77:99:57:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Nov 15 10:00:55 2026 GMT
Not After : Nov 16 10:00:55 2026 GMT
Subject: CN=7146db5a0d23893765a8b8be64192d16ddfdb54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:0f:47:da:44:d5:58:f6:e4:02:bc:53:0f:
10:2b:21:4d:47:74:1d:38:9b:e5:55:d2:ff:86:38:
40:ff:9e:8e:02:6a:bd:8a:34:5d:83:d7:36:cd:dd:
ca:38:ee:be:52:20:31:34:1c:60:19:32:38:5d:61:
77:9f:75:e0:f7:3e:3e:1e:b5:bc:d4:1c:fe:22:12:
d6:b2:4d:3a:3d:05:a5:1b:14:34:b3:25:46:fa:4f:
a9:c2:5e:b7:49:f4:92:7e:64:ad:b0:f6:fa:3d:c5:
b1:89:09:bc:5e:a0:56:48:e5:00:c0:8d:78:92:24:
8c:ad:e7:77:eb:db:52:8d:2a:d9:38:ae:55:78:4f:
4f:9a:e7:f2:da:d2:eb:24:85:25:0d:98:1c:d3:16:
49:3d:21:83:ac:8c:b1:29:27:ec:96:0d:72:f6:02:
5b:75:d2:09:ec:e9:ec:ef:02:89:55:a4:44:5d:ca:
1e:6a:b0:1d:4d:8d:5e:8f:be:f3:bb:a1:e1:5f:1f:
d5:d9:a0:3e:5b:97:8e:9a:1d:ba:c3:40:b6:ca:5c:
f8:e5:84:da:d1:7c:ae:24:15:bd:09:db:e7:49:b7:
7f:62:56:51:f7:6c:d4:96:c9:6b:fe:e2:1b:5f:ae:
c0:e1:0a:f6:52:4a:79:42:03:63:bc:81:23:d9:d2:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:DB:5A:0D:23:89:37:65:A8:B8:BE:64:19:2D:16:DD:FD:B5:4F
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:47:33:4d:e4:45:a6:bc:a4:5a:99:2c:5c:eb:01:d7:57:cb:
6d:8f:e2:82:a0:33:85:e6:a5:ca:c4:10:2f:77:51:75:f7:f4:
1e:ee:6f:70:3e:00:c6:64:de:4a:f0:30:10:b7:67:a8:d2:9a:
4d:c3:95:21:29:df:72:3d:2e:38:da:a6:91:23:37:8a:95:55:
d8:b1:46:2d:19:92:36:c0:43:76:b2:52:5b:ac:81:20:b2:5d:
a1:82:5b:59:84:f6:c2:09:0a:d9:23:6d:2b:b9:11:30:3c:48:
7d:45:e3:bc:eb:b8:1c:e7:bd:84:f9:9d:ba:f0:46:3b:fa:58:
0d:91:3c:35:29:6c:d0:00:22:52:c0:00:58:f6:8d:d0:b9:7e:
8d:38:92:7a:02:9d:d6:45:bc:79:d1:31:79:df:4d:ad:f3:67:
55:f9:38:81:50:a5:47:0d:55:44:10:73:f6:6c:b6:ef:a0:af:
4c:70:55:38:fb:aa:aa:06:3f:09:04:b1:b7:8c:ad:a8:e5:b6:
26:74:c5:69:59:1e:41:ee:8e:fd:88:77:6b:e3:dc:51:0b:f9:
df:22:9a:d3:67:83:0f:96:4c:19:25:4f:fc:4e:0e:75:ef:86:
5b:a3:77:59:d6:8f:94:da:bd:a3:32:df:93:c7:61:8d:b7:a1:
13:9a:71:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHepxriEREpfd2vHneZV9IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjYxMTE1MTAwMDU1WhcNMjYxMTE2MTAwMDU1WjAzMTEwLwYDVQQD
Eyg3MTQ2ZGI1YTBkMjM4OTM3NjVhOGI4YmU2NDE5MmQxNmRkZmRiNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiEPR9pE1Vj25AK8Uw8QKyFNR3Qd
OJvlVdL/hjhA/56OAmq9ijRdg9c2zd3KOO6+UiAxNBxgGTI4XWF3n3Xg9z4+HrW8
1Bz+IhLWsk06PQWlGxQ0syVG+k+pwl63SfSSfmStsPb6PcWxiQm8XqBWSOUAwI14
kiSMred369tSjSrZOK5VeE9Pmufy2tLrJIUlDZgc0xZJPSGDrIyxKSfslg1y9gJb
ddIJ7Ons7wKJVaREXcoearAdTY1ej77zu6HhXx/V2aA+W5eOmh26w0C2ylz45YTa
0XyuJBW9CdvnSbd/YlZR92zUlslr/uIbX67A4Qr2Ukp5QgNjvIEj2dJq9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFG21oNI4k3Zai4vmQZLRbd/bVPMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz0czTeRF
prykWpksXOsB11fLbY/igqAzhealysQQL3dRdff0Hu5vcD4AxmTeSvAwELdnqNKa
TcOVISnfcj0uONqmkSM3ipVV2LFGLRmSNsBDdrJSW6yBILJdoYJbWYT2wgkK2SNt
K7kRMDxIfUXjvOu4HOe9hPmduvBGO/pYDZE8NSls0AAiUsAAWPaN0Ll+jTiSegKd
1kW8edExed9NrfNnVfk4gVClRw1VRBBz9my276CvTHBVOPuqqgY/CQSxt4ytqOW2
JnTFaVkeQe6O/Yh3a+PcUQv53yKa02eDD5ZMGSVP/E4Ode+GW6N3WdaPlNq9ozLf
k8dhjbehE5pxFQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:28 2026 by rpki-client