Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: rZf4tp6xxcfjx3EyqwUlisINv+OcFJhrTcemOcr6Wco=
Subject key identifier: BE:16:D0:C0:1F:47:CE:D7:6F:26:72:64:B9:37:49:FA:13:DB:A9:F0
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019E1D22683EC2EBCBFFB6D637EFF37A3278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 03A3
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: Iohr1+T5FEwRkVLEXa/okBxTuwbIfpZWlT143azGync=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:68:3e:c2:eb:cb:ff:b6:d6:37:ef:f3:7a:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=be16d0c01f47ced76f267264b93749fa13dba9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:8f:a3:24:3b:2f:fb:2d:12:d7:29:77:bb:
07:ab:7d:1f:4f:69:e1:37:e5:3f:b3:32:89:86:84:
39:22:48:de:8d:c0:dd:58:b4:e9:b5:43:1a:37:a2:
35:22:87:88:92:64:4a:5e:7d:16:7b:9c:1f:d7:57:
39:85:e5:7c:b8:d6:a8:27:f0:14:e3:ea:f0:b3:3e:
fe:14:87:36:b4:02:e7:50:9a:de:a6:59:6f:dc:bb:
e0:55:f4:cb:39:3a:30:2a:24:0e:2c:b1:00:b8:26:
29:a8:b0:82:a7:07:c5:56:c9:f5:c3:7b:c7:69:88:
f1:db:b2:44:6f:b5:f9:1d:38:39:40:6a:23:5e:57:
91:e5:a0:73:de:72:e6:15:77:54:61:c9:b9:7e:69:
da:ec:4a:06:05:ec:f9:04:b5:d1:f4:94:7c:ab:8e:
d6:b2:8e:2a:f6:82:8a:43:0e:1c:50:b1:4d:ff:f5:
7d:69:ba:e8:d7:07:2c:46:27:47:fa:be:22:99:8b:
58:48:13:fd:02:ba:6a:14:a8:e5:49:10:70:9f:ed:
38:f8:79:dd:0d:33:88:6d:a3:bc:c5:32:f1:85:ee:
05:60:d5:96:e3:2c:3b:1f:c7:7e:df:22:15:fa:6e:
b2:cb:67:4b:d0:ce:a9:fc:3e:97:fa:d8:64:ec:16:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:D0:C0:1F:47:CE:D7:6F:26:72:64:B9:37:49:FA:13:DB:A9:F0
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:99:e1:e0:3e:5c:20:db:e5:32:64:d1:aa:17:e9:7b:b9:19:
b9:5c:11:fe:43:71:4d:e3:11:4b:89:80:00:a9:32:29:fd:a3:
45:0a:02:48:27:59:63:aa:b9:a8:fa:7b:31:01:55:37:c3:25:
7d:3b:7e:4d:9a:ff:cf:3c:da:c1:b5:24:ff:2d:fb:90:56:45:
4b:36:b5:22:ba:c8:e0:77:46:39:dd:5d:ab:4c:41:ec:c8:c6:
18:bf:fe:3a:60:df:33:aa:43:c8:ed:8a:5f:c3:9a:79:f1:0d:
03:de:bd:0f:07:e3:e2:26:c2:a7:14:64:37:1e:d0:fa:85:1a:
cb:03:b8:63:ec:3f:b6:87:64:c8:2f:b9:03:8c:35:45:a4:5f:
0c:a9:62:7e:af:ca:38:43:66:01:de:24:f6:a8:bb:3f:82:45:
a3:19:79:41:79:11:2a:23:d5:99:df:72:6e:52:3f:e8:83:a5:
f6:f8:9d:10:8a:ab:bd:62:93:98:d6:06:ad:ab:50:22:94:cd:
e7:ee:5f:12:9b:a2:7a:4f:63:97:03:a7:97:b8:c6:92:4b:85:
2c:9a:30:dd:f0:6a:78:55:1f:e4:a3:ce:d0:b6:8d:36:56:63:
7e:ec:83:69:e6:bd:0c:6f:0a:f6:15:4f:20:e1:a6:87:eb:7b:
3a:b0:60:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dImg+wuvL/7bWN+/zejJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjYwNTEyMTcwMDU0WhcNMjYwNTEzMTcwMDU0WjAzMTEwLwYDVQQD
EyhiZTE2ZDBjMDFmNDdjZWQ3NmYyNjcyNjRiOTM3NDlmYTEzZGJhOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqqPoyQ7L/stEtcpd7sHq30fT2nh
N+U/szKJhoQ5IkjejcDdWLTptUMaN6I1IoeIkmRKXn0We5wf11c5heV8uNaoJ/AU
4+rwsz7+FIc2tALnUJrepllv3LvgVfTLOTowKiQOLLEAuCYpqLCCpwfFVsn1w3vH
aYjx27JEb7X5HTg5QGojXleR5aBz3nLmFXdUYcm5fmna7EoGBez5BLXR9JR8q47W
so4q9oKKQw4cULFN//V9abro1wcsRidH+r4imYtYSBP9ArpqFKjlSRBwn+04+Hnd
DTOIbaO8xTLxhe4FYNWW4yw7H8d+3yIV+m6yy2dL0M6p/D6X+thk7BYLFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4W0MAfR87XbyZyZLk3SfoT26nwMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvpnh4D5c
INvlMmTRqhfpe7kZuVwR/kNxTeMRS4mAAKkyKf2jRQoCSCdZY6q5qPp7MQFVN8Ml
fTt+TZr/zzzawbUk/y37kFZFSza1IrrI4HdGOd1dq0xB7MjGGL/+OmDfM6pDyO2K
X8OaefENA969Dwfj4ibCpxRkNx7Q+oUaywO4Y+w/todkyC+5A4w1RaRfDKlifq/K
OENmAd4k9qi7P4JFoxl5QXkRKiPVmd9yblI/6IOl9vidEIqrvWKTmNYGratQIpTN
5+5fEpuiek9jlwOnl7jGkkuFLJow3fBqeFUf5KPO0LaNNlZjfuyDaea9DG8K9hVP
IOGmh+t7OrBgRA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:57 2026 by rpki-client