Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: FrPKuGmisxpem1XXUgaugYNGz9nfLgYGorhbYtzAXIo=
Subject key identifier: 33:B8:8F:22:90:5F:50:4F:5E:41:A9:7F:1C:60:EC:B8:0D:A3:F1:81
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019D27DF9D4EA196ED6D93D4289195717740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0324
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: ydeb2DkSM1e0R1t9iiNgx9IpkOT+YOULhHBE91HiZW4=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9d:4e:a1:96:ed:6d:93:d4:28:91:95:71:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=33b88f22905f504f5e41a97f1c60ecb80da3f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f5:ba:a2:2d:e6:5b:b4:56:6e:58:71:d0:7e:
2c:e8:93:56:df:e6:6f:ee:5f:33:fb:4b:a5:e1:01:
85:6c:44:aa:1b:db:21:01:98:42:05:78:95:ff:89:
29:12:25:ac:43:78:1a:15:ea:f4:59:0d:78:df:3f:
f5:bd:16:52:86:54:a6:ef:c2:65:09:d9:3a:9e:49:
00:34:ed:47:3c:2f:a5:be:1d:c8:c2:5a:29:9e:30:
dd:46:c5:db:5f:9d:4a:36:4e:65:26:a7:6b:e6:3f:
cd:f1:b0:e1:7b:6b:17:11:aa:99:9a:d6:5c:6e:09:
26:2f:64:83:e3:a6:17:7f:b0:42:14:b4:04:a4:9a:
de:c3:a5:95:52:29:fd:34:12:84:9d:d9:19:24:9b:
89:c5:64:8d:3c:d5:81:19:2e:f4:c6:5a:46:24:83:
5f:14:51:76:be:1c:48:cf:34:76:2c:f4:79:0a:cf:
58:fc:f7:77:35:21:6c:80:89:a7:ab:32:2f:c5:52:
5e:bc:46:b7:e5:aa:7a:43:aa:db:8f:e0:ad:a8:d9:
71:bb:39:47:be:78:d8:1e:bd:4f:ce:d7:f6:a9:4e:
82:25:35:64:7d:fa:c1:55:b9:ea:41:84:be:d6:b3:
22:bc:ca:e7:94:e1:7e:42:5c:91:57:90:7f:d8:4b:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:8F:22:90:5F:50:4F:5E:41:A9:7F:1C:60:EC:B8:0D:A3:F1:81
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:38:71:a2:a8:40:2b:ae:1c:89:13:6b:cf:8c:f7:cc:cc:
7d:2f:0e:06:a6:64:05:9f:53:c4:65:f8:89:11:cc:d0:09:59:
35:7f:d7:bc:fc:0f:75:c2:a3:bb:d3:45:62:cb:75:2c:63:2d:
c5:fa:a8:0b:5e:87:96:d0:cd:45:71:07:cf:a7:8b:a7:1f:f9:
f6:cf:f2:09:f3:50:8b:0e:bc:97:e5:29:c9:84:ee:43:5d:89:
df:74:fe:0a:09:46:51:f8:14:5c:e7:25:68:07:10:22:dd:20:
2f:41:7e:b1:cc:e5:9f:2b:46:30:f9:48:8b:37:0e:71:d5:c4:
f9:36:5b:72:d7:60:82:cf:27:74:72:92:20:2c:96:65:62:ef:
2b:5a:f9:36:ae:8b:a6:41:f6:03:12:f6:17:22:71:9f:fc:7f:
b3:8c:39:0a:88:e8:ec:bd:25:84:f1:04:f1:3e:fd:e8:5c:bb:
18:27:35:22:a0:6d:8a:28:9c:64:c1:3f:3a:72:8a:d3:94:3d:
05:6a:a1:c6:13:f5:95:65:23:78:21:0b:9e:14:45:7d:f3:2b:
6d:81:7f:5b:41:34:04:17:52:56:38:2d:d5:07:5c:07:55:47:
e1:94:1f:07:48:12:ec:a3:74:0f:6f:62:82:31:9d:fa:52:51:
59:98:d9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n351OoZbtbZPUKJGVcXdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjYwMzI2MDIwMDU5WhcNMjYwMzI3MDIwMDU5WjAzMTEwLwYDVQQD
EygzM2I4OGYyMjkwNWY1MDRmNWU0MWE5N2YxYzYwZWNiODBkYTNmMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PW6oi3mW7RWblhx0H4s6JNW3+Zv
7l8z+0ul4QGFbESqG9shAZhCBXiV/4kpEiWsQ3gaFer0WQ143z/1vRZShlSm78Jl
Cdk6nkkANO1HPC+lvh3IwlopnjDdRsXbX51KNk5lJqdr5j/N8bDhe2sXEaqZmtZc
bgkmL2SD46YXf7BCFLQEpJrew6WVUin9NBKEndkZJJuJxWSNPNWBGS70xlpGJINf
FFF2vhxIzzR2LPR5Cs9Y/Pd3NSFsgImnqzIvxVJevEa35ap6Q6rbj+CtqNlxuzlH
vnjYHr1Pztf2qU6CJTVkffrBVbnqQYS+1rMivMrnlOF+QlyRV5B/2Eu2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO4jyKQX1BPXkGpfxxg7LgNo/GBMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHc4caKo
QCuuHIkTa8+M98zMfS8OBqZkBZ9TxGX4iRHM0AlZNX/XvPwPdcKju9NFYst1LGMt
xfqoC16HltDNRXEHz6eLpx/59s/yCfNQiw68l+UpyYTuQ12J33T+CglGUfgUXOcl
aAcQIt0gL0F+sczlnytGMPlIizcOcdXE+TZbctdggs8ndHKSICyWZWLvK1r5Nq6L
pkH2AxL2FyJxn/x/s4w5Cojo7L0lhPEE8T796Fy7GCc1IqBtiiicZME/OnKK05Q9
BWqhxhP1lWUjeCELnhRFffMrbYF/W0E0BBdSVjgt1QdcB1VH4ZQfB0gS7KN0D29i
gjGd+lJRWZjZ5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:59 2026 by rpki-client