Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: 69l3oLBEFHqpidtJH8ZmTNpJGdxoS3iaQdKStbOeH10=
Subject key identifier: DE:E1:78:A6:29:A4:0D:01:A9:0A:2A:16:A7:6A:E8:6F:96:D9:90:47
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019D25BA074751B7211E776C7572987C3EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:00:41 +0000
Manifest this update: Wed 25 Mar 2026 16:00:41 +0000
Manifest next update: Thu 26 Mar 2026 16:00:41 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: lNWwTRo4IKdnJ1nbZbORO8R1j/fhYNABRC9f1k1GgrQ=)
2: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (hash: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:07:47:51:b7:21:1e:77:6c:75:72:98:7c:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Mar 25 16:00:41 2026 GMT
Not After : Mar 26 16:00:41 2026 GMT
Subject: CN=dee178a629a40d01a90a2a16a76ae86f96d99047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:dc:08:b4:37:a5:44:05:ce:e4:2c:d4:16:
63:a2:c0:66:29:76:b9:40:ad:c0:09:3d:94:e8:ad:
a8:cb:4d:ee:97:4d:46:1c:19:7d:3d:f7:06:b1:d5:
82:08:1e:85:92:89:8f:cb:e1:8d:23:1e:fd:12:61:
7f:fa:56:1c:83:87:69:f9:6c:8a:c2:f0:9b:ea:d8:
0d:fa:9a:bf:ef:da:2f:1f:69:ec:a1:db:5e:ff:43:
4f:7e:3c:1b:95:83:b3:89:7d:d9:ed:73:15:16:c8:
fa:18:11:d0:b3:e5:b4:e1:60:1d:49:9e:d9:9d:4f:
b1:ad:07:c9:bd:00:b3:94:28:5d:ed:24:bb:15:51:
26:53:da:cb:25:ea:74:00:2d:11:3d:db:91:d0:ad:
13:ba:bc:45:49:e7:b6:9d:a2:3d:54:6b:e7:dd:30:
56:c7:f8:42:cd:dd:a1:04:e0:e4:1b:37:76:54:17:
b8:25:92:71:ae:93:eb:20:d0:f9:90:77:1d:9d:49:
b9:ba:b2:6b:5b:6a:f8:8c:ae:b8:4a:18:1b:d1:e5:
02:d0:33:3d:4d:73:52:b8:14:61:e4:96:3d:05:3d:
83:db:2d:bf:7d:d6:2a:72:9b:1d:b4:1a:ca:8e:ce:
8b:6c:a7:5e:cb:95:cf:ed:87:ad:b5:03:88:dc:3c:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:78:A6:29:A4:0D:01:A9:0A:2A:16:A7:6A:E8:6F:96:D9:90:47
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:e5:2c:37:64:25:e3:e3:72:73:32:dd:21:48:1f:d4:2e:
db:94:85:01:76:c7:b8:f7:e3:63:a6:9a:f3:bf:34:18:45:3c:
70:90:20:97:4a:4a:f3:40:a7:2b:16:bb:12:8e:15:3d:f9:dd:
4c:3e:26:0d:53:53:fa:8c:a2:42:67:62:03:8a:9d:77:f4:e3:
60:2b:fd:c1:ae:56:19:84:ba:c5:35:53:f8:eb:3e:63:63:56:
2c:bb:0e:01:c3:fe:bb:e5:18:3c:d9:59:49:1a:a7:46:95:dc:
d2:54:f3:d9:37:b0:f0:a2:39:fb:e7:30:21:7f:19:a4:fa:21:
3b:f9:07:25:01:34:d2:5d:cb:98:e8:f3:cc:62:df:46:59:17:
66:ed:49:d0:ed:c8:05:7a:ce:61:8c:bd:9c:d9:b5:07:5b:4c:
fb:c5:38:48:9f:ab:14:5e:fc:ba:01:6e:91:be:d0:36:76:fb:
f4:0f:8e:7b:1c:14:06:16:65:77:9d:f1:9a:93:2e:63:de:90:
61:27:26:22:91:0d:39:23:6a:96:b3:7a:17:5f:88:7d:c3:40:
39:15:54:0e:50:dc:87:fe:f2:b8:bc:05:48:9b:a3:a6:4f:42:
d6:8f:85:b7:30:59:ab:2a:61:64:43:f2:35:bc:56:ec:17:ad:
34:42:ae:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lugdHUbchHndsdXKYfD7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjYwMzI1MTYwMDQxWhcNMjYwMzI2MTYwMDQxWjAzMTEwLwYDVQQD
EyhkZWUxNzhhNjI5YTQwZDAxYTkwYTJhMTZhNzZhZTg2Zjk2ZDk5MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9/cCLQ3pUQFzuQs1BZjosBmKXa5
QK3ACT2U6K2oy03ul01GHBl9PfcGsdWCCB6FkomPy+GNIx79EmF/+lYcg4dp+WyK
wvCb6tgN+pq/79ovH2nsodte/0NPfjwblYOziX3Z7XMVFsj6GBHQs+W04WAdSZ7Z
nU+xrQfJvQCzlChd7SS7FVEmU9rLJep0AC0RPduR0K0TurxFSee2naI9VGvn3TBW
x/hCzd2hBODkGzd2VBe4JZJxrpPrIND5kHcdnUm5urJrW2r4jK64Shgb0eUC0DM9
TXNSuBRh5JY9BT2D2y2/fdYqcpsdtBrKjs6LbKdey5XP7YettQOI3DyJRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7heKYppA0BqQoqFqdq6G+W2ZBHMB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjvlLDdk
JePjcnMy3SFIH9Qu25SFAXbHuPfjY6aa8780GEU8cJAgl0pK80CnKxa7Eo4VPfnd
TD4mDVNT+oyiQmdiA4qdd/TjYCv9wa5WGYS6xTVT+Os+Y2NWLLsOAcP+u+UYPNlZ
SRqnRpXc0lTz2Tew8KI5++cwIX8ZpPohO/kHJQE00l3LmOjzzGLfRlkXZu1J0O3I
BXrOYYy9nNm1B1tM+8U4SJ+rFF78ugFukb7QNnb79A+OexwUBhZld53xmpMuY96Q
YScmIpENOSNqlrN6F1+IfcNAORVUDlDch/7yuLwFSJujpk9C1o+FtzBZqyphZEPy
NbxW7BetNEKuiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:14 2026 by rpki-client