Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: 5RO6KOnKyjzf1Y3XweBBbiealBabDiYqut5M4UalpFU=
Subject key identifier: FF:FB:5D:1E:CF:16:F0:E5:C5:99:97:BD:0C:C8:3B:21:02:3D:6B:A4
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019D2772827777C976BBF2C7C43ABBCB39F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: zFnGcujqIELhZNOX6p+ZPEOhrOFk38qy4y/T2JpWE/M=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:82:77:77:c9:76:bb:f2:c7:c4:3a:bb:cb:39:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=fffb5d1ecf16f0e5c59997bd0cc83b21023d6ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:ab:cc:c3:e5:5c:39:16:cc:01:af:0d:b7:
72:64:14:2b:9c:8a:ba:0b:19:37:08:78:ba:83:83:
0f:6d:28:48:45:c0:7e:16:b0:1e:79:ab:a1:c8:b3:
d4:1e:bd:8d:be:dc:7c:62:6f:61:de:eb:2d:40:45:
0f:d6:2c:a5:98:b9:03:65:f6:bd:2a:47:40:8c:dd:
6e:05:20:34:5a:41:3e:ee:6d:9f:41:5e:c9:c0:b1:
36:26:ae:20:f1:3a:b8:d2:83:10:5f:ac:24:30:45:
b8:74:8c:90:d6:40:72:6e:9d:94:ff:bd:ed:3b:cf:
b2:5f:96:12:ad:6b:56:44:78:c1:ca:33:11:80:9a:
36:44:8f:37:d7:32:fd:6e:5c:f9:31:b9:ed:8b:13:
96:e1:d6:2e:79:70:40:1c:ae:f6:c5:8e:4b:6d:af:
57:42:78:8f:46:1c:df:c0:82:ab:70:4c:54:fc:71:
5d:e2:d3:1b:cb:4f:52:f2:0c:69:0c:c6:7d:32:24:
bc:f9:d0:d7:35:1d:65:fe:39:c6:bb:14:b6:9e:30:
66:01:6c:5b:3f:0a:56:9c:88:13:a4:38:91:10:93:
ad:36:f3:c3:12:1b:14:43:09:b7:d6:3e:34:f2:1a:
95:a8:96:9c:4a:9e:21:b8:39:d4:d3:b5:2e:56:c3:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:5D:1E:CF:16:F0:E5:C5:99:97:BD:0C:C8:3B:21:02:3D:6B:A4
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:1c:e4:7d:7d:d1:47:21:00:eb:85:73:2c:94:de:0a:5f:
e7:ed:ba:cb:9e:0f:a7:b6:8a:91:85:ec:7e:99:19:56:80:21:
c5:8b:3c:d6:7c:7e:15:9e:b6:13:4d:65:12:cc:94:57:54:e8:
1b:09:d7:bb:74:de:85:aa:e3:91:c5:93:21:74:cf:60:79:bb:
a0:79:36:2e:43:3f:13:88:58:0b:d8:30:5d:83:14:76:0b:90:
e5:5a:3e:33:cf:5c:6e:7e:d0:f9:34:b0:07:82:eb:01:8f:25:
77:e4:be:8e:ec:b2:a3:22:fb:a5:ea:30:ff:b6:78:64:89:cc:
88:66:8d:1c:f7:73:5a:34:cf:96:81:b4:60:3b:c6:4c:e8:97:
52:06:f5:e7:c3:b5:0b:ab:ca:8e:56:d1:e7:58:1e:9e:50:23:
ad:28:57:0e:d9:47:76:a6:c8:b4:1d:b1:cf:b2:ae:50:2f:46:
a9:a1:13:37:0f:d8:a9:fa:de:03:e4:bf:e1:2c:a1:65:3f:86:
39:29:7b:36:be:03:6f:b2:55:35:7d:26:6a:6a:3e:c9:ca:8d:
d1:0b:12:7f:9c:1b:b4:a0:40:fe:8e:2b:7c:a0:79:7c:36:0b:
78:1c:56:27:fb:7b:58:75:32:ff:ab:f7:ba:d3:1b:01:07:0c:
63:2f:6e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoJ3d8l2u/LHxDq7yzn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm
N2VjODEwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD
EyhmZmZiNWQxZWNmMTZmMGU1YzU5OTk3YmQwY2M4M2IyMTAyM2Q2YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4OrzMPlXDkWzAGvDbdyZBQrnIq6
Cxk3CHi6g4MPbShIRcB+FrAeeauhyLPUHr2Nvtx8Ym9h3ustQEUP1iylmLkDZfa9
KkdAjN1uBSA0WkE+7m2fQV7JwLE2Jq4g8Tq40oMQX6wkMEW4dIyQ1kBybp2U/73t
O8+yX5YSrWtWRHjByjMRgJo2RI831zL9blz5MbntixOW4dYueXBAHK72xY5Lba9X
QniPRhzfwIKrcExU/HFd4tMby09S8gxpDMZ9MiS8+dDXNR1l/jnGuxS2njBmAWxb
PwpWnIgTpDiREJOtNvPDEhsUQwm31j408hqVqJacSp4huDnU07UuVsO3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/7XR7PFvDlxZmXvQzIOyECPWukMB8GA1UdIwQY
MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt
MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw
LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyAc5H19
0UchAOuFcyyU3gpf5+26y54Pp7aKkYXsfpkZVoAhxYs81nx+FZ62E01lEsyUV1To
GwnXu3TeharjkcWTIXTPYHm7oHk2LkM/E4hYC9gwXYMUdguQ5Vo+M89cbn7Q+TSw
B4LrAY8ld+S+juyyoyL7peow/7Z4ZInMiGaNHPdzWjTPloG0YDvGTOiXUgb158O1
C6vKjlbR51genlAjrShXDtlHdqbItB2xz7KuUC9GqaETNw/YqfreA+S/4SyhZT+G
OSl7Nr4Db7JVNX0mamo+ycqN0QsSf5wbtKBA/o4rfKB5fDYLeBxWJ/t7WHUy/6v3
utMbAQcMYy9ulg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:31 2026 by rpki-client