Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: A0kSwadx0Td8gBO4a0FAu5mJ3PN9orF/geA3l1/sodk=
Subject key identifier: 27:C7:FD:98:37:0F:55:54:78:66:34:E5:32:F3:1E:30:29:7C:50:B4
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019D28164EF5DE5F57B97915FFB9C7B3ACC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: Q6PdwJxgi3MD6rMctVKvRJAu17eKmLVoLe1gtP0Lzos=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4e:f5:de:5f:57:b9:79:15:ff:b9:c7:b3:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=27c7fd98370f5554786634e532f31e30297c50b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:cc:d6:3d:7b:03:82:e6:26:85:bc:e6:a4:
1e:32:7a:00:3c:74:d8:f3:e0:99:4b:1f:02:af:7a:
28:25:c2:dc:8d:3f:87:94:f3:4e:4d:c4:e0:83:b7:
25:33:28:39:0b:99:e2:36:77:03:8c:8c:a1:a5:b8:
f5:58:ac:bf:a3:c0:ee:78:5e:66:69:78:bc:37:bf:
46:17:86:19:98:90:52:19:99:34:0b:b1:5a:ce:1b:
d1:3a:e8:f5:d0:f4:81:85:de:71:fd:92:b0:4e:ab:
86:f3:4c:fa:c5:72:e9:b8:2f:55:bb:50:70:b1:5e:
40:2b:a6:42:d3:69:7f:e6:ed:2b:0c:39:d5:11:05:
3b:e3:c3:ae:9a:92:0e:5c:6c:67:00:26:50:8b:07:
a6:0f:51:c5:07:54:ba:fa:fb:0e:86:21:05:f5:c2:
ab:b1:2c:29:7c:90:f7:53:a6:e7:57:2d:10:7f:f7:
ee:8b:c4:61:59:ae:73:01:e6:e4:8b:b5:18:40:00:
65:3f:9a:0c:ee:2b:cd:3f:00:a2:77:e5:aa:ef:df:
d0:36:dc:5b:9b:b7:a1:67:8f:91:8d:70:24:5c:d0:
93:ab:2a:57:a4:4e:58:8b:48:41:5f:58:69:2f:80:
cb:64:1d:d0:be:05:0f:c3:12:97:12:80:0c:d3:26:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:FD:98:37:0F:55:54:78:66:34:E5:32:F3:1E:30:29:7C:50:B4
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:8d:87:2c:3d:63:fd:ba:1a:0c:81:91:12:b6:27:4d:c9:
cf:bc:8a:6a:a3:ba:49:e8:2e:0c:de:fc:f5:34:61:a2:4b:02:
97:0c:8b:cc:f3:a0:6b:d2:2d:69:d7:cc:29:a1:f9:1a:aa:df:
48:6e:84:2e:d0:fe:21:97:09:c7:62:88:e6:12:9c:b1:3d:bc:
28:2b:3d:18:c9:ec:12:e3:ce:3c:17:ff:52:8f:ba:5f:20:10:
80:7c:a6:e7:8d:8e:e1:8c:6b:2b:d2:9b:87:36:6f:d8:8f:c7:
75:f5:08:00:4f:1c:dc:82:b7:c2:9b:86:fa:9f:41:6c:0e:e5:
72:3c:21:c2:90:1a:70:89:14:c3:bf:0e:08:1f:d9:09:d2:16:
ae:d1:b2:b4:f5:80:e0:1f:25:04:7f:c5:62:fd:3f:74:1f:f3:
40:73:a1:37:59:88:e2:d0:b4:0e:16:3b:69:84:b1:f7:cb:0e:
fe:df:17:af:7c:5f:cc:12:82:c2:6f:35:2f:8e:a4:b6:a6:1d:
90:e1:0c:8f:c1:29:03:00:a0:a8:12:cf:29:6d:a1:f5:79:87:
ef:97:21:ea:92:38:97:32:06:88:86:e2:4b:9c:ae:47:d7:d5:
fc:a9:d5:6a:0b:74:0f:39:1e:ea:1b:56:51:ee:70:dd:fc:2f:
03:15:c4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFk713l9XuXkV/7nHs6zBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjYwMzI2MDMwMDQzWhcNMjYwMzI3MDMwMDQzWjAzMTEwLwYDVQQD
EygyN2M3ZmQ5ODM3MGY1NTU0Nzg2NjM0ZTUzMmYzMWUzMDI5N2M1MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9LM1j17A4LmJoW85qQeMnoAPHTY
8+CZSx8Cr3ooJcLcjT+HlPNOTcTgg7clMyg5C5niNncDjIyhpbj1WKy/o8DueF5m
aXi8N79GF4YZmJBSGZk0C7FazhvROuj10PSBhd5x/ZKwTquG80z6xXLpuC9Vu1Bw
sV5AK6ZC02l/5u0rDDnVEQU748OumpIOXGxnACZQiwemD1HFB1S6+vsOhiEF9cKr
sSwpfJD3U6bnVy0Qf/fui8RhWa5zAebki7UYQABlP5oM7ivNPwCid+Wq79/QNtxb
m7ehZ4+RjXAkXNCTqypXpE5Yi0hBX1hpL4DLZB3QvgUPwxKXEoAM0yZaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfH/Zg3D1VUeGY05TLzHjApfFC0MB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoSNhyw9
Y/26GgyBkRK2J03Jz7yKaqO6SeguDN789TRhoksClwyLzPOga9ItadfMKaH5Gqrf
SG6ELtD+IZcJx2KI5hKcsT28KCs9GMnsEuPOPBf/Uo+6XyAQgHym542O4YxrK9Kb
hzZv2I/HdfUIAE8c3IK3wpuG+p9BbA7lcjwhwpAacIkUw78OCB/ZCdIWrtGytPWA
4B8lBH/FYv0/dB/zQHOhN1mI4tC0DhY7aYSx98sO/t8Xr3xfzBKCwm81L46ktqYd
kOEMj8EpAwCgqBLPKW2h9XmH75ch6pI4lzIGiIbiS5yuR9fV/KnVagt0Dzke6htW
Ue5w3fwvAxXElA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:48 2026 by rpki-client