Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: tCj+4GlAd7rufSi1AlkbGbf9pQO6eAlokHe63WXpjWc=
Subject key identifier: 91:D4:37:EB:4B:92:C9:97:23:DC:B4:51:F1:1E:2F:7F:5A:E5:01:4A
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019D2816F882A85FC0630003B1AD97F1924B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 0302
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: Y9Fzx8RgBQ17ylAxF6OWJgrmCJKMbQKDkj1bY9RDZmE=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f8:82:a8:5f:c0:63:00:03:b1:ad:97:f1:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=91d437eb4b92c99723dcb451f11e2f7f5ae5014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:55:62:b9:7d:ca:2b:e2:74:77:2f:30:5d:
1e:25:34:04:05:fc:67:f2:43:b7:08:0b:56:2f:d9:
10:73:d0:46:c0:f6:5f:30:10:6e:f2:d6:19:0e:7b:
a7:a1:c6:79:5f:4e:7d:e7:2f:86:6b:63:70:1b:2d:
33:03:33:fa:ef:df:08:4c:4e:42:bb:24:01:c3:db:
21:a2:d3:03:70:37:a3:90:cb:52:91:55:78:31:dd:
8c:45:0d:e8:0c:95:78:fb:9f:90:c9:b9:0b:a5:c3:
46:8a:2b:7b:1f:b6:ad:8d:2e:2a:11:74:54:b4:5a:
7b:2b:70:09:b0:9d:38:dc:96:2f:bd:96:28:c0:83:
eb:a5:56:9e:52:cd:1d:be:be:31:3d:b1:f8:5c:cf:
63:d6:2b:79:f5:5c:f9:50:2b:00:3c:97:d8:e7:fa:
c5:e3:46:5f:51:ee:ab:db:37:1b:e9:58:ec:6b:37:
9d:48:c0:fc:d4:04:99:78:8c:f1:ff:03:ce:df:0c:
79:2d:fb:06:16:0b:09:6f:2a:71:19:c1:93:0b:4f:
36:ab:43:22:b4:8c:9e:b9:78:e6:ce:54:e3:13:80:
05:d4:fb:8c:84:34:8a:6a:76:fa:50:e6:b2:20:c1:
0c:69:93:74:e2:11:cc:7f:22:e1:09:4d:cc:10:a2:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:37:EB:4B:92:C9:97:23:DC:B4:51:F1:1E:2F:7F:5A:E5:01:4A
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:a2:79:f7:5f:6b:d0:27:5d:f8:7d:82:2b:ca:8c:7d:46:
80:85:ec:a8:28:cd:8d:d4:41:4a:b8:d7:4c:ae:56:66:f7:40:
14:93:16:49:5d:01:51:11:75:2c:fd:de:0e:de:e8:98:dc:40:
8e:77:94:09:75:3f:97:10:e2:55:01:6c:e8:27:76:c2:64:9a:
a8:c6:f2:89:96:23:02:e7:c9:30:60:b7:39:42:d6:c5:6d:65:
29:4a:1b:7e:c7:2c:43:0f:fc:d6:43:6b:49:78:1e:b2:dc:5f:
9b:72:07:01:15:8f:ec:d3:9e:de:0a:87:92:0f:1a:04:6d:ba:
d4:50:01:74:cb:ac:96:c6:66:47:b1:08:55:71:26:12:6e:8c:
34:29:80:b3:be:ce:3e:e2:47:8a:2e:7d:2c:3d:cd:cd:82:9b:
88:46:2f:88:0a:65:79:db:62:6d:8b:03:93:a7:96:b9:10:01:
1d:3a:27:10:b4:8b:df:43:85:72:7b:5a:18:2a:c3:61:67:8a:
7c:61:e9:71:37:85:26:29:8c:5f:42:02:a6:d4:40:fd:74:ee:
d4:d9:5c:d7:46:2a:0f:50:07:1e:2f:7e:38:fe:27:c0:28:4e:
9c:78:ca:60:07:07:ad:99:b6:c6:87:20:3a:b0:c2:cc:ba:61:
6a:54:6a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFviCqF/AYwADsa2X8ZJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl
M2E5MGUwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
Eyg5MWQ0MzdlYjRiOTJjOTk3MjNkY2I0NTFmMTFlMmY3ZjVhZTUwMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRhVYrl9yividHcvMF0eJTQEBfxn
8kO3CAtWL9kQc9BGwPZfMBBu8tYZDnunocZ5X0595y+Ga2NwGy0zAzP6798ITE5C
uyQBw9shotMDcDejkMtSkVV4Md2MRQ3oDJV4+5+QybkLpcNGiit7H7atjS4qEXRU
tFp7K3AJsJ043JYvvZYowIPrpVaeUs0dvr4xPbH4XM9j1it59Vz5UCsAPJfY5/rF
40ZfUe6r2zcb6VjsazedSMD81ASZeIzx/wPO3wx5LfsGFgsJbypxGcGTC082q0Mi
tIyeuXjmzlTjE4AF1PuMhDSKanb6UOayIMEMaZN04hHMfyLhCU3MEKLyKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHUN+tLksmXI9y0UfEeL39a5QFKMB8GA1UdIwQY
MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt
ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx
LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBeiefdf
a9AnXfh9givKjH1GgIXsqCjNjdRBSrjXTK5WZvdAFJMWSV0BURF1LP3eDt7omNxA
jneUCXU/lxDiVQFs6Cd2wmSaqMbyiZYjAufJMGC3OULWxW1lKUobfscsQw/81kNr
SXgestxfm3IHARWP7NOe3gqHkg8aBG261FABdMuslsZmR7EIVXEmEm6MNCmAs77O
PuJHii59LD3NzYKbiEYviApledtibYsDk6eWuRABHTonELSL30OFcntaGCrDYWeK
fGHpcTeFJimMX0ICptRA/XTu1Nlc10YqD1AHHi9+OP4nwChOnHjKYAcHrZm2xocg
OrDCzLphalRqnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:12 2026 by rpki-client