Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: VGNtOem2/o5TpoHnJJ/PJUVpkikJ2asN8xZRG1Lx4CE=
Subject key identifier: 58:2C:9A:A0:B2:62:E5:CD:87:F2:B9:87:C4:7C:F5:56:5C:7D:32:DD
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019D27A894006DAA2963988997883A463012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0CB7
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: s2qVyT3vEj9+/WzC0X3FF2oiCqpTJhiQkTdbXkVx7Vs=)
2: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
3: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
4: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:94:00:6d:aa:29:63:98:89:97:88:3a:46:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=582c9aa0b262e5cd87f2b987c47cf5565c7d32dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:41:ac:7e:ca:82:f9:44:6c:cf:1c:b8:c9:
14:ab:72:92:66:42:f0:36:07:97:ef:50:3b:e4:dc:
20:c1:09:f0:63:17:46:37:36:04:98:bc:3a:b8:9c:
aa:c3:87:bb:4e:d9:f3:f4:99:13:1d:1f:19:c0:43:
3b:1f:19:6f:9e:fd:95:ae:f1:15:ed:1d:59:88:22:
88:0d:3b:2a:81:22:6f:fb:de:58:b4:ca:2f:d4:a7:
7e:a1:12:4d:23:ea:57:44:83:e2:86:41:03:d1:ab:
0e:b6:26:f9:27:ec:50:7a:5b:ed:4d:1c:9c:c3:21:
3b:06:61:8f:a5:70:05:67:6d:49:99:a0:51:ee:d2:
98:d6:a1:90:bc:ee:f8:3b:37:d2:43:d2:7e:18:05:
c1:06:ed:7d:f6:19:7e:f2:9f:16:48:03:3c:f1:d3:
1f:d9:d7:1c:87:6f:f7:f4:a9:14:95:1d:1f:fa:08:
d3:d7:a4:34:9c:8e:be:60:c6:8d:9a:51:43:26:7c:
18:a2:69:0b:d8:e4:54:7c:10:cd:2a:3d:cd:fa:41:
17:4d:32:dd:4b:c2:ce:a9:60:ce:42:f2:62:90:04:
47:33:75:ec:b4:c8:79:4d:72:17:66:f0:53:b8:29:
37:7f:1f:85:b5:01:e4:af:3f:7b:2b:5e:56:1c:52:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:9A:A0:B2:62:E5:CD:87:F2:B9:87:C4:7C:F5:56:5C:7D:32:DD
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:ca:c7:ec:e1:34:28:25:17:7e:14:a7:b6:14:6e:1f:de:
8e:0f:9f:e9:bf:8e:30:2c:87:fd:52:36:7e:76:0b:6e:e9:bc:
ed:ec:58:32:af:bf:df:96:43:44:f0:a1:8e:da:38:1c:05:b5:
d9:c7:c9:ed:6d:27:8d:41:be:65:f3:2d:b0:7d:9c:a7:1c:2e:
6c:26:92:49:07:3b:2a:32:ab:e6:11:b6:6a:e5:dd:7a:02:a5:
f4:19:56:95:08:f3:71:95:af:a1:4e:4b:05:57:ab:d5:88:87:
cd:8a:3c:25:b7:86:f0:22:83:35:c9:27:42:55:17:65:72:c4:
58:62:8e:a3:0f:09:e4:b6:e2:54:bc:0e:06:bf:de:bb:3a:ef:
4c:82:6e:2b:a3:15:1e:09:0f:48:7a:64:40:6a:a6:26:79:c4:
eb:a6:b9:19:27:2d:60:9a:17:d1:96:75:b7:8c:f7:24:e7:7d:
34:fc:74:0f:77:95:ee:0d:2c:fe:a1:78:68:84:7b:39:4e:dc:
49:80:51:51:90:4e:3c:d5:55:67:2a:1f:c1:eb:1e:e3:60:bd:
01:c9:02:ad:98:3a:4a:f1:22:0c:8a:b1:ee:49:5b:69:4e:f2:
90:67:b1:c6:e7:6c:63:d4:af:b2:2d:0c:0c:7f:3d:0e:2c:e1:
60:e9:0d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJQAbaopY5iJl4g6RjASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj
ZTNmNmUwHhcNMjYwMzI2MDEwMDUyWhcNMjYwMzI3MDEwMDUyWjAzMTEwLwYDVQQD
Eyg1ODJjOWFhMGIyNjJlNWNkODdmMmI5ODdjNDdjZjU1NjVjN2QzMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlBrH7KgvlEbM8cuMkUq3KSZkLw
NgeX71A75NwgwQnwYxdGNzYEmLw6uJyqw4e7Ttnz9JkTHR8ZwEM7Hxlvnv2VrvEV
7R1ZiCKIDTsqgSJv+95YtMov1Kd+oRJNI+pXRIPihkED0asOtib5J+xQelvtTRyc
wyE7BmGPpXAFZ21JmaBR7tKY1qGQvO74OzfSQ9J+GAXBBu199hl+8p8WSAM88dMf
2dcch2/39KkUlR0f+gjT16Q0nI6+YMaNmlFDJnwYomkL2ORUfBDNKj3N+kEXTTLd
S8LOqWDOQvJikARHM3XstMh5TXIXZvBTuCk3fx+FtQHkrz97K15WHFJH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgsmqCyYuXNh/K5h8R89VZcfTLdMB8GA1UdIwQY
MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt
MDVkNThmMGNiODhjLzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj
LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlnKx+zh
NCglF34Up7YUbh/ejg+f6b+OMCyH/VI2fnYLbum87exYMq+/35ZDRPChjto4HAW1
2cfJ7W0njUG+ZfMtsH2cpxwubCaSSQc7KjKr5hG2auXdegKl9BlWlQjzcZWvoU5L
BVer1YiHzYo8JbeG8CKDNcknQlUXZXLEWGKOow8J5LbiVLwOBr/euzrvTIJuK6MV
HgkPSHpkQGqmJnnE66a5GSctYJoX0ZZ1t4z3JOd9NPx0D3eV7g0s/qF4aIR7OU7c
SYBRUZBOPNVVZyofwese42C9AckCrZg6SvEiDIqx7klbaU7ykGexxudsY9Svsi0M
DH89DizhYOkN2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:42 2026 by rpki-client