Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: FJmcoXg9UboJqlQUxo7sDMazue0eBexlo/uD4wfVx6c=
Subject key identifier: C1:A1:4E:AE:6B:02:17:11:CB:A0:68:E2:A0:3D:27:6A:FC:88:F7:B3
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 019D27048D4A6A7FDE411B6BA2DA02842DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 1104
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: xnNL87ickvUsI4CSWM3eq+nX10U2+VxsuazgBBN/N9k=)
2: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (hash: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8d:4a:6a:7f:de:41:1b:6b:a2:da:02:84:2d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=c1a14eae6b021711cba068e2a03d276afc88f7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:6c:3f:29:5b:63:0a:d1:cb:79:8a:c2:cb:
3b:c3:75:ee:da:85:77:dc:1a:3f:0a:98:9a:e6:03:
a7:7f:4d:31:a8:f8:99:2f:63:fc:03:9d:f1:f5:48:
24:ad:80:43:0c:e7:ae:28:a5:ea:f2:13:09:ad:4a:
28:6e:60:5d:f9:95:ee:c7:44:9e:59:67:5c:a4:08:
5d:7b:e4:bd:be:a3:98:de:d0:f9:05:8f:d0:3c:36:
69:58:39:39:50:a1:1c:cc:8a:ce:18:69:95:80:f1:
62:9e:ae:e6:9c:5c:ea:72:16:fc:60:22:24:0e:de:
75:71:e2:3d:66:70:08:9d:28:a5:be:6a:5e:5e:97:
3c:b8:b8:ce:fc:81:43:e9:35:93:94:6c:20:1e:a3:
87:12:c5:2d:57:ed:74:67:6c:b8:ed:6a:25:af:67:
69:5a:28:e9:43:ea:03:c8:21:19:ed:83:b2:27:85:
62:53:4f:16:c4:5a:4b:7b:f4:5e:4f:9f:52:c1:22:
00:d0:35:65:8f:1c:17:ad:4d:18:e3:73:ed:13:c9:
d5:fa:cc:1d:f3:f5:30:be:57:30:17:fa:62:ef:49:
e1:0c:68:fc:9d:32:d1:26:51:d7:50:bf:66:30:55:
23:97:63:f8:40:52:0d:ad:99:7b:c9:aa:4e:e9:e0:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:4E:AE:6B:02:17:11:CB:A0:68:E2:A0:3D:27:6A:FC:88:F7:B3
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ad:a7:0d:47:81:a3:1e:79:9e:ee:1d:30:5b:42:b5:20:2b:
15:7a:ea:49:3a:29:ad:f3:e1:4c:48:78:16:06:e5:96:1c:b0:
10:17:87:63:a0:65:11:88:73:7f:aa:ad:37:a0:b0:e1:d8:30:
43:67:d1:2c:f7:2c:1b:db:77:0d:a2:cf:57:82:2e:ca:76:a1:
07:b0:60:57:13:1e:93:db:7a:74:fc:30:18:8e:f2:8c:28:c1:
ab:83:10:49:ef:6f:96:f3:bb:11:4c:8f:32:eb:13:56:04:ef:
d9:dc:b7:7c:10:8a:fb:52:d9:f6:ff:a1:79:78:63:cf:8d:45:
0a:ee:76:b2:e2:63:42:21:93:37:83:f9:17:40:af:d5:0e:88:
11:b6:68:55:44:b2:58:1f:a0:13:a5:07:e0:90:69:a4:68:e9:
09:3e:56:d9:94:c7:b4:56:ac:85:47:6b:c0:b0:b5:76:8f:34:
8f:45:fd:92:28:9e:e8:dc:b1:06:b1:4a:e7:85:c7:de:8b:c5:
61:11:1e:97:43:41:93:a1:63:7d:1d:da:48:1d:f7:2c:3b:0e:
ba:50:9d:53:6f:ed:d8:6a:e3:92:41:db:4c:ed:e2:00:ca:82:
09:04:b3:18:eb:45:af:fc:d5:f5:1a:93:e4:fb:b0:49:aa:f5:
32:f0:11:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBI1Kan/eQRtrotoChC3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjYwMzI1MjIwMTQyWhcNMjYwMzI2MjIwMTQyWjAzMTEwLwYDVQQD
EyhjMWExNGVhZTZiMDIxNzExY2JhMDY4ZTJhMDNkMjc2YWZjODhmN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mFsPylbYwrRy3mKwss7w3Xu2oV3
3Bo/Cpia5gOnf00xqPiZL2P8A53x9UgkrYBDDOeuKKXq8hMJrUoobmBd+ZXux0Se
WWdcpAhde+S9vqOY3tD5BY/QPDZpWDk5UKEczIrOGGmVgPFinq7mnFzqchb8YCIk
Dt51ceI9ZnAInSilvmpeXpc8uLjO/IFD6TWTlGwgHqOHEsUtV+10Z2y47Wolr2dp
WijpQ+oDyCEZ7YOyJ4ViU08WxFpLe/ReT59SwSIA0DVljxwXrU0Y43PtE8nV+swd
8/UwvlcwF/pi70nhDGj8nTLRJlHXUL9mMFUjl2P4QFINrZl7yapO6eCMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGhTq5rAhcRy6Bo4qA9J2r8iPezMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb62nDUeB
ox55nu4dMFtCtSArFXrqSToprfPhTEh4FgbllhywEBeHY6BlEYhzf6qtN6Cw4dgw
Q2fRLPcsG9t3DaLPV4IuynahB7BgVxMek9t6dPwwGI7yjCjBq4MQSe9vlvO7EUyP
MusTVgTv2dy3fBCK+1LZ9v+heXhjz41FCu52suJjQiGTN4P5F0Cv1Q6IEbZoVUSy
WB+gE6UH4JBppGjpCT5W2ZTHtFashUdrwLC1do80j0X9kiie6NyxBrFK54XH3ovF
YREel0NBk6FjfR3aSB33LDsOulCdU2/t2GrjkkHbTO3iAMqCCQSzGOtFr/zV9RqT
5PuwSar1MvARLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:19 2026 by rpki-client