Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: nefelATA6gm0fPBuV1sg4k2R1t9Oa+8EZ5vzOahqWSU=
Subject key identifier: 7F:B0:5C:46:2D:5B:F1:E3:9C:F3:31:B2:7F:2C:56:04:C5:82:1F:2C
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 019D273B0CD6906E6CCF8674A567A337DA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 0588
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: 3WqaSOGnMdP0+0Nt9rnP5Mw2lw9T7yPjbeHqP3MoLVM=)
2: QEDVpN2G6A8jozHnkTczP5khLY4.roa (hash: ZdNXvCdfzs3xB6Mj6+mdd2fmrySxnZPGoHLzOwpr9Qw=)
3: SLONluzu2xwR72NqplrGtpQrZpo.roa (hash: NPfEmtRHn9vSpI84XMYUKyQXNZvZB0z0PHOCtt/9Ui4=)
4: ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa (hash: AqWjrA8SVcF0FHIW5EIMMdA7ZJxrbLWslrcFVwHu7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0c:d6:90:6e:6c:cf:86:74:a5:67:a3:37:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=7fb05c462d5bf1e39cf331b27f2c5604c5821f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:15:9c:64:bc:77:cc:58:79:2e:9f:ec:93:
54:94:bb:b3:ad:7e:8c:5c:c0:46:b9:be:d2:ca:58:
35:2f:bb:3e:6e:35:e5:35:f6:75:4c:c9:d7:ff:a8:
ea:c6:0d:f2:1f:b7:87:4d:7e:aa:0a:80:b0:ae:c6:
ee:7b:57:9c:ed:69:5e:d5:b8:bc:de:2a:41:0b:f3:
d9:3c:9f:37:d4:80:11:18:45:a7:fc:a4:40:50:4d:
05:c5:21:27:6b:2b:b8:4c:21:b4:53:5d:67:fe:12:
3d:da:9c:72:4a:15:dd:08:cf:a1:f5:7c:15:33:0a:
2c:49:63:3d:d3:2d:ad:0b:ad:eb:d9:51:a2:fa:64:
a2:6d:dc:0d:4a:7b:5e:71:9d:ca:c3:37:6e:c2:d4:
21:59:37:fa:27:58:21:cb:2e:5a:8c:dc:01:29:9b:
8d:b4:95:a1:56:e8:e2:22:24:e3:7c:52:2a:a6:af:
bc:70:b7:df:9e:19:4b:21:61:2d:c0:bb:f2:00:d7:
50:5c:ee:ea:1c:14:20:3b:97:c4:31:f0:6b:2a:94:
70:a5:7c:8d:d6:b9:50:8e:74:15:4b:aa:3e:37:42:
4c:44:ec:a2:66:eb:70:16:35:d3:d0:75:8e:1d:8b:
96:25:36:3d:a3:65:db:cd:49:56:88:bf:33:80:0b:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:5C:46:2D:5B:F1:E3:9C:F3:31:B2:7F:2C:56:04:C5:82:1F:2C
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:da:fa:21:70:c1:ba:f6:8e:b8:2c:65:80:57:a4:17:82:
e0:72:94:3f:6e:67:4d:43:00:24:3a:ae:3e:4e:79:c7:57:f8:
b1:5c:bc:57:3e:88:cf:95:77:28:21:0d:8c:1a:3b:93:df:27:
a2:62:d2:11:c5:93:55:49:96:9f:f8:ff:e4:db:59:55:a1:2a:
2b:c6:e6:8b:e9:0b:f4:c2:fa:4c:8e:d9:bb:cb:b5:c4:ed:05:
9d:2e:00:ce:ba:36:4f:5d:b6:9e:a3:83:b3:d0:1e:14:77:df:
a6:75:4f:44:4a:85:3b:3c:bd:83:f6:c5:72:30:76:97:ca:bd:
9a:0a:f5:18:ce:ff:83:5b:60:53:bc:3a:37:a5:e0:56:a4:4c:
90:7c:19:c3:31:5a:47:3e:28:d0:5a:00:4d:15:00:4b:1f:96:
96:77:91:8d:9e:24:39:91:a9:1a:ce:12:48:3f:92:df:73:96:
a8:75:24:40:f8:d4:4b:62:9b:9a:1c:5b:cf:de:0a:5f:63:7a:
bd:b1:38:87:0e:d9:dd:5a:ba:3a:9f:e4:c4:2c:75:04:fe:4a:
a1:d0:f1:e8:39:c5:d3:de:10:bb:b9:c2:3f:11:af:17:91:a5:
fd:f2:c6:06:c9:7b:5f:38:a4:72:3b:40:43:73:1c:e7:b0:3c:
9a:f0:94:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOwzWkG5sz4Z0pWejN9poMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0
NTdiY2IwHhcNMjYwMzI1MjMwMTE0WhcNMjYwMzI2MjMwMTE0WjAzMTEwLwYDVQQD
Eyg3ZmIwNWM0NjJkNWJmMWUzOWNmMzMxYjI3ZjJjNTYwNGM1ODIxZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziYVnGS8d8xYeS6f7JNUlLuzrX6M
XMBGub7Sylg1L7s+bjXlNfZ1TMnX/6jqxg3yH7eHTX6qCoCwrsbue1ec7Wle1bi8
3ipBC/PZPJ831IARGEWn/KRAUE0FxSEnayu4TCG0U11n/hI92pxyShXdCM+h9XwV
MwosSWM90y2tC63r2VGi+mSibdwNSntecZ3KwzduwtQhWTf6J1ghyy5ajNwBKZuN
tJWhVujiIiTjfFIqpq+8cLffnhlLIWEtwLvyANdQXO7qHBQgO5fEMfBrKpRwpXyN
1rlQjnQVS6o+N0JMROyiZutwFjXT0HWOHYuWJTY9o2XbzUlWiL8zgAsgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+wXEYtW/HjnPMxsn8sVgTFgh8sMB8GA1UdIwQY
MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt
N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj
LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUt3a+iFw
wbr2jrgsZYBXpBeC4HKUP25nTUMAJDquPk55x1f4sVy8Vz6Iz5V3KCENjBo7k98n
omLSEcWTVUmWn/j/5NtZVaEqK8bmi+kL9ML6TI7Zu8u1xO0FnS4Azro2T122nqOD
s9AeFHffpnVPREqFOzy9g/bFcjB2l8q9mgr1GM7/g1tgU7w6N6XgVqRMkHwZwzFa
Rz4o0FoATRUASx+WlneRjZ4kOZGpGs4SSD+S33OWqHUkQPjUS2Kbmhxbz94KX2N6
vbE4hw7Z3Vq6Op/kxCx1BP5KodDx6DnF094Qu7nCPxGvF5Gl/fLGBsl7XzikcjtA
Q3Mc57A8mvCUMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:37 2026 by rpki-client