Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: nhRiE77LYZ/BSWKaX6pRIBcZOzVVGGu5SoSapNRajKU=
Subject key identifier: F0:FC:AD:14:3A:DB:0B:58:C5:C6:9C:4F:76:03:13:5A:C5:81:43:AA
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019D2961A36A083A283669AC1309A5870767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 154E
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: WcVNT7O8ym/0RvFTwMDw3uOYrsVeiQNqbgoZSo2OsDY=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a3:6a:08:3a:28:36:69:ac:13:09:a5:87:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=f0fcad143adb0b58c5c69c4f7603135ac58143aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:a7:fe:18:8c:fe:03:7a:93:aa:80:8a:4e:
e1:80:64:c0:ae:11:78:20:15:94:b1:90:45:3c:ca:
5d:2c:0d:a2:53:9d:90:53:7d:cf:68:a6:22:9f:1e:
b8:e8:19:76:44:4d:f3:76:67:21:e6:23:49:ac:b1:
48:9d:3b:aa:e8:f3:2f:c0:31:bf:1d:13:ab:6d:36:
cf:15:3e:d4:5c:c3:64:ee:cd:e3:91:46:3c:1b:e8:
40:76:2a:a6:5d:04:aa:b2:8f:1e:9a:81:33:9b:72:
54:3b:42:8b:29:7b:10:23:bd:c7:9f:fc:c3:d8:86:
2b:e8:a7:d5:55:3d:37:7f:14:14:cd:c6:6e:d6:c9:
1f:54:32:bc:a2:92:38:42:1f:8c:a1:0d:9c:4d:46:
0d:e0:bf:95:4a:71:30:d3:a7:16:94:ff:73:27:59:
81:4a:9e:c9:16:f3:c7:a2:fa:39:0e:67:6b:9f:d7:
ec:d5:21:24:a0:82:b2:92:c7:46:3c:90:ee:7e:8c:
32:5a:f4:9a:25:90:22:36:03:04:52:00:ab:9a:db:
d8:e2:11:57:c3:ae:1f:8f:82:55:5c:50:b2:06:0f:
04:90:ab:0a:4d:34:e1:53:9b:b3:1e:99:91:cb:df:
22:ba:7b:2b:12:b2:49:b9:0a:34:ad:31:db:70:85:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:AD:14:3A:DB:0B:58:C5:C6:9C:4F:76:03:13:5A:C5:81:43:AA
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:7a:f4:ae:9a:4a:5c:2d:64:f9:56:3d:68:82:0e:c3:91:
75:cd:da:b4:90:2d:de:c4:67:ea:49:f9:66:e0:30:34:6d:08:
bb:c9:9c:b1:1b:3b:c0:10:56:ee:62:c2:7a:2e:d4:5e:d2:a9:
ad:fd:ce:52:69:14:ec:0c:54:0f:d0:7a:98:b4:0a:30:4f:0b:
d6:f8:52:7d:98:91:19:c6:8b:9d:7a:18:b5:6f:b2:bf:d3:c0:
9f:c6:8d:bb:35:99:9d:05:e9:b7:0b:0d:a8:9f:b5:a4:01:0c:
46:30:55:e0:76:6a:bb:92:58:03:63:2f:23:7f:f6:d9:93:48:
36:f1:11:11:30:ad:9d:37:81:71:44:10:b6:3a:70:51:50:8c:
df:c8:42:b7:e0:e3:16:dc:fc:e9:69:ad:7b:41:40:7e:58:b2:
dd:07:4e:14:47:6c:e8:a3:9a:2d:55:ec:de:07:e7:da:50:95:
70:f9:0e:2a:75:75:1a:18:f4:5f:79:f9:cb:3b:3b:b4:6e:2a:
5b:fc:f4:e9:b7:33:06:1c:c2:43:60:28:55:1e:74:3b:05:18:
38:05:ea:e0:e1:31:30:46:9d:82:51:c7:79:74:ed:e2:95:4b:
e2:03:96:21:bf:d1:df:6a:af:6d:ec:d3:df:e2:e3:34:01:47:
1b:a2:a3:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYaNqCDooNmmsEwmlhwdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwMzI2MDkwMjM3WhcNMjYwMzI3MDkwMjM3WjAzMTEwLwYDVQQD
EyhmMGZjYWQxNDNhZGIwYjU4YzVjNjljNGY3NjAzMTM1YWM1ODE0M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3un/hiM/gN6k6qAik7hgGTArhF4
IBWUsZBFPMpdLA2iU52QU33PaKYinx646Bl2RE3zdmch5iNJrLFInTuq6PMvwDG/
HROrbTbPFT7UXMNk7s3jkUY8G+hAdiqmXQSqso8emoEzm3JUO0KLKXsQI73Hn/zD
2IYr6KfVVT03fxQUzcZu1skfVDK8opI4Qh+MoQ2cTUYN4L+VSnEw06cWlP9zJ1mB
Sp7JFvPHovo5Dmdrn9fs1SEkoIKyksdGPJDufowyWvSaJZAiNgMEUgCrmtvY4hFX
w64fj4JVXFCyBg8EkKsKTTThU5uzHpmRy98iunsrErJJuQo0rTHbcIXBLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD8rRQ62wtYxcacT3YDE1rFgUOqMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVx69K6a
SlwtZPlWPWiCDsORdc3atJAt3sRn6kn5ZuAwNG0Iu8mcsRs7wBBW7mLCei7UXtKp
rf3OUmkU7AxUD9B6mLQKME8L1vhSfZiRGcaLnXoYtW+yv9PAn8aNuzWZnQXptwsN
qJ+1pAEMRjBV4HZqu5JYA2MvI3/22ZNINvERETCtnTeBcUQQtjpwUVCM38hCt+Dj
Ftz86Wmte0FAfliy3QdOFEds6KOaLVXs3gfn2lCVcPkOKnV1Ghj0X3n5yzs7tG4q
W/z06bczBhzCQ2AoVR50OwUYOAXq4OExMEadglHHeXTt4pVL4gOWIb/R32qvbezT
3+LjNAFHG6KjRw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:03 2026 by rpki-client