Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: 2nlp9alroEAqU8osIyGlh0SKQ3pl+uL82X+AFMmUes8=
Subject key identifier: 50:66:D0:D5:EF:44:22:E4:3F:8A:A1:3B:D7:60:92:DF:B0:7A:0D:17
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019CADC7B7ACEDEDC5EA716D2C7FE62C7D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0C11
Signing time: Mon 02 Mar 2026 09:01:12 +0000
Manifest this update: Mon 02 Mar 2026 09:01:12 +0000
Manifest next update: Tue 03 Mar 2026 09:01:12 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: dcjbbo9XT5x3bAmnS7ryOCsPAnDtjwZOW6IQJTE08U4=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b7:ac:ed:ed:c5:ea:71:6d:2c:7f:e6:2c:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Mar 2 09:01:12 2026 GMT
Not After : Mar 3 09:01:12 2026 GMT
Subject: CN=5066d0d5ef4422e43f8aa13bd76092dfb07a0d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:5e:07:d5:90:a9:6a:2e:bd:b8:9e:e6:cf:
fd:81:ff:8e:3f:15:a0:4b:d7:1a:53:55:a2:ba:4a:
9f:00:1d:8c:61:25:76:b1:3c:c4:6b:c4:34:f3:31:
6f:dc:4d:d7:05:21:34:75:50:d6:25:b6:8f:24:51:
11:96:e3:43:46:64:78:bc:b3:ec:46:39:ea:73:82:
b3:d0:8a:32:33:13:b9:2e:bc:0b:0e:59:76:3d:52:
a9:14:7d:99:6d:90:1b:3a:c5:60:19:7a:ad:53:b4:
12:ed:f7:2d:bc:5c:8e:2c:60:ac:aa:71:bc:14:2e:
65:07:05:b1:ad:4a:5c:75:40:c0:1c:7b:82:10:27:
79:a3:79:eb:92:60:b9:de:a0:c7:17:33:04:72:e6:
3f:5f:4f:e2:0f:2e:72:2a:f2:d0:66:be:e2:62:d8:
65:73:01:19:91:b7:e2:21:cc:a1:11:92:b1:9d:ed:
b3:b0:ac:a2:1d:31:53:52:8a:50:87:ce:95:75:bc:
18:06:a0:02:c6:a0:d4:fa:24:f5:cb:ad:e1:88:6d:
af:12:00:4f:4c:74:a1:4c:d5:1a:e6:33:04:c9:ca:
68:d8:6e:55:c9:e0:26:8e:e8:32:77:d2:f8:79:5f:
ef:b3:a6:c8:bc:4e:e0:29:2e:cf:2a:5f:78:9d:c5:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:D0:D5:EF:44:22:E4:3F:8A:A1:3B:D7:60:92:DF:B0:7A:0D:17
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:30:b3:b1:c8:af:60:7c:9a:34:b0:9b:64:f4:de:84:14:
6b:b9:dd:d9:33:7a:c7:bc:25:be:77:4f:f4:7a:21:c6:ef:98:
f3:23:ac:ea:85:3f:f4:e7:95:18:46:1e:6d:4e:55:94:43:ee:
76:e2:fa:8b:c3:af:e2:e0:25:11:f9:d2:49:33:32:f9:b7:9b:
9c:65:76:28:2e:7c:38:54:a2:95:3e:c9:47:39:d5:d2:e0:4e:
72:e7:cf:ee:99:20:66:8b:31:a3:9c:eb:5b:1e:95:8e:86:14:
25:ae:83:3e:8d:d6:87:e9:29:bf:5d:bf:51:9d:88:36:c3:36:
0a:8d:5a:b0:ab:12:31:6b:f6:dd:19:f8:f4:de:4c:b6:f0:8e:
c3:20:a0:22:3a:ab:80:ee:88:3c:e2:fa:51:22:11:ee:57:36:
6f:a5:67:c6:f7:82:e7:7a:8b:70:db:a8:80:c9:4b:bd:4f:cb:
c0:ad:3d:1a:0b:8f:d4:da:18:47:76:b5:e3:00:4f:15:3d:79:
98:9e:07:37:2a:e3:81:aa:f4:76:65:ec:c7:4d:6e:46:6f:d8:
a8:7d:f9:b1:69:e5:aa:50:1d:ae:c5:76:1d:a3:52:26:bc:85:
4a:35:a8:c4:f5:05:e7:9f:10:08:e4:5b:dd:c7:55:ac:f0:41:
20:31:5c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx7es7e3F6nFtLH/mLH1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz
YWU4ZWUwHhcNMjYwMzAyMDkwMTEyWhcNMjYwMzAzMDkwMTEyWjAzMTEwLwYDVQQD
Eyg1MDY2ZDBkNWVmNDQyMmU0M2Y4YWExM2JkNzYwOTJkZmIwN2EwZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VeB9WQqWouvbie5s/9gf+OPxWg
S9caU1WiukqfAB2MYSV2sTzEa8Q08zFv3E3XBSE0dVDWJbaPJFERluNDRmR4vLPs
Rjnqc4Kz0IoyMxO5LrwLDll2PVKpFH2ZbZAbOsVgGXqtU7QS7fctvFyOLGCsqnG8
FC5lBwWxrUpcdUDAHHuCECd5o3nrkmC53qDHFzMEcuY/X0/iDy5yKvLQZr7iYthl
cwEZkbfiIcyhEZKxne2zsKyiHTFTUopQh86VdbwYBqACxqDU+iT1y63hiG2vEgBP
THShTNUa5jMEycpo2G5VyeAmjugyd9L4eV/vs6bIvE7gKS7PKl94ncW8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBm0NXvRCLkP4qhO9dgkt+weg0XMB8GA1UdIwQY
MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt
YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4
LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj8ws7HI
r2B8mjSwm2T03oQUa7nd2TN6x7wlvndP9Hohxu+Y8yOs6oU/9OeVGEYebU5VlEPu
duL6i8Ov4uAlEfnSSTMy+bebnGV2KC58OFSilT7JRznV0uBOcufP7pkgZosxo5zr
Wx6VjoYUJa6DPo3Wh+kpv12/UZ2INsM2Co1asKsSMWv23Rn49N5MtvCOwyCgIjqr
gO6IPOL6USIR7lc2b6VnxveC53qLcNuogMlLvU/LwK09GguP1NoYR3a14wBPFT15
mJ4HNyrjgar0dmXsx01uRm/YqH35sWnlqlAdrsV2HaNSJryFSjWoxPUF558QCORb
3cdVrPBBIDFcGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:29 2026 by rpki-client