Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: VOSe1v6Z1o7rHO4E6KbzAq8vsUcBKETkXHIfQTA7/D8=
Subject key identifier: D0:F5:F0:B2:12:E0:39:76:C1:DE:3D:4C:AD:55:EF:43:77:44:76:A1
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019D2703B6AB9EDCBBE76EC2041EAB1DDC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 165B
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: 3pSZ6ai7TpZhS6dBVv/W8p6YW+LsoLHG1aXlr5qZt2o=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b6:ab:9e:dc:bb:e7:6e:c2:04:1e:ab:1d:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=d0f5f0b212e03976c1de3d4cad55ef43774476a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:10:af:9c:17:79:5c:e6:e0:2b:84:a6:bd:
69:c5:fd:02:78:03:9b:97:0a:ef:b3:e4:e7:4c:e1:
c1:fb:93:e4:91:47:82:5e:43:9c:c5:c7:be:5f:f1:
9a:5e:b9:50:a5:93:2d:3c:83:95:ce:53:61:2a:ab:
53:7b:9c:1a:3d:c2:27:4d:0e:be:63:98:16:a0:91:
47:8d:72:76:5a:d5:53:7a:78:81:3d:e9:8a:87:95:
69:66:50:70:d2:21:03:b8:31:8a:80:3e:a3:87:f1:
eb:7e:05:9d:eb:65:ca:80:1f:73:e6:24:30:3a:83:
21:b8:3b:b7:53:2b:3c:d1:06:7a:fa:27:0c:a1:b7:
40:ee:99:5a:73:00:6d:91:71:1c:f0:42:de:28:f4:
ef:d6:5d:13:8d:ca:f0:ac:82:81:4e:37:5f:71:bc:
ee:1b:70:1f:b3:25:2c:ba:19:02:f3:0c:97:ae:bd:
ea:8f:29:42:6b:33:6a:5d:1f:fb:84:b9:ac:99:21:
3d:df:10:f5:98:22:f4:76:73:33:93:19:0e:8a:e8:
d3:2d:b4:14:cb:86:84:e7:12:9d:a1:f9:87:0f:63:
13:3f:80:c4:4b:cd:64:75:1a:32:47:d5:74:cc:bd:
bd:8e:5c:2c:ac:ac:62:25:6b:fe:67:a6:ed:50:4b:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:F0:B2:12:E0:39:76:C1:DE:3D:4C:AD:55:EF:43:77:44:76:A1
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2b:5e:21:9e:65:44:85:d6:1d:c4:14:d8:5a:e6:dd:f3:97:
8c:94:6c:43:cc:9f:db:5a:98:51:cc:b2:a1:c8:be:05:8e:02:
8a:49:fd:84:57:80:95:9f:a8:02:1a:35:c2:ad:0b:36:fe:56:
d8:32:59:7a:d4:1f:78:cf:62:8f:9a:4d:81:3a:91:aa:ea:d9:
a8:52:a0:c7:9e:5a:80:d5:25:b9:80:2d:8a:c3:5e:ff:06:4f:
5d:38:e3:1e:8b:d5:57:da:cb:23:90:3d:e7:b3:f8:59:2a:b5:
e7:fc:46:4e:6e:ca:3e:59:54:f6:5d:f1:d7:41:de:70:6f:85:
7e:80:67:b8:f8:8d:cb:10:b4:1a:a8:b6:bb:82:72:e2:ec:e6:
aa:ce:ed:96:cf:f6:cb:8d:0f:87:08:18:82:6b:15:e7:63:e7:
c9:16:26:82:e4:5e:80:ba:0e:f3:37:10:4f:c6:5a:a0:ba:e0:
fa:0f:47:92:e4:04:9f:02:ce:f0:40:6e:58:94:1b:8c:07:92:
dc:b7:15:da:a5:a0:f1:40:8c:6f:98:d2:ff:5c:6f:c1:a9:fc:
83:50:0e:40:e6:97:46:f5:5e:0c:ef:2e:f0:b8:08:65:2d:36:
2b:fc:29:f2:64:89:39:fd:9e:1f:38:25:32:e1:97:8d:2a:ef:
ca:39:62:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7arnty7527CBB6rHdwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi
ODk1Y2IwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
EyhkMGY1ZjBiMjEyZTAzOTc2YzFkZTNkNGNhZDU1ZWY0Mzc3NDQ3NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVkQr5wXeVzm4CuEpr1pxf0CeAOb
lwrvs+TnTOHB+5PkkUeCXkOcxce+X/GaXrlQpZMtPIOVzlNhKqtTe5waPcInTQ6+
Y5gWoJFHjXJ2WtVTeniBPemKh5VpZlBw0iEDuDGKgD6jh/HrfgWd62XKgB9z5iQw
OoMhuDu3Uys80QZ6+icMobdA7placwBtkXEc8ELeKPTv1l0TjcrwrIKBTjdfcbzu
G3AfsyUsuhkC8wyXrr3qjylCazNqXR/7hLmsmSE93xD1mCL0dnMzkxkOiujTLbQU
y4aE5xKdofmHD2MTP4DES81kdRoyR9V0zL29jlwsrKxiJWv+Z6btUEuruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND18LIS4Dl2wd49TK1V70N3RHahMB8GA1UdIwQY
MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt
ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw
LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiteIZ5l
RIXWHcQU2Frm3fOXjJRsQ8yf21qYUcyyoci+BY4Cikn9hFeAlZ+oAho1wq0LNv5W
2DJZetQfeM9ij5pNgTqRqurZqFKgx55agNUluYAtisNe/wZPXTjjHovVV9rLI5A9
57P4WSq15/xGTm7KPllU9l3x10HecG+FfoBnuPiNyxC0Gqi2u4Jy4uzmqs7tls/2
y40PhwgYgmsV52PnyRYmguRegLoO8zcQT8ZaoLrg+g9HkuQEnwLO8EBuWJQbjAeS
3LcV2qWg8UCMb5jS/1xvwan8g1AOQOaXRvVeDO8u8LgIZS02K/wp8mSJOf2eHzgl
MuGXjSrvyjligg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client