Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: hhoEHM+As0Eg3UmLN2DejEWhODmc8oWteQnIlwBZb84=
Subject key identifier: AD:8E:4B:8E:75:E4:2E:8A:62:35:A7:01:2F:40:4E:C1:6A:73:2F:20
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019D2816786107309FE533867115D586EED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: O5tj32MFyY31g0i86NXAekqv505ZzjcR10gTCnutAhA=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:78:61:07:30:9f:e5:33:86:71:15:d5:86:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=ad8e4b8e75e42e8a6235a7012f404ec16a732f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:6c:61:9a:2c:e7:39:54:79:3e:6d:f2:f5:
d2:b1:2c:7c:96:b4:01:b3:c3:00:f8:0b:55:8f:32:
23:3e:fa:86:6f:cf:0a:80:5d:20:4b:07:77:e9:32:
fc:cf:61:52:22:fa:fb:d4:00:e8:79:1e:96:02:7c:
df:61:fa:a5:aa:42:1f:e8:7e:c4:78:e2:ce:f7:20:
ab:06:50:46:f4:df:c1:e6:a2:76:bc:1a:ad:c3:a5:
12:87:7b:4e:ab:a5:c7:79:20:f9:0c:0a:a1:2f:e3:
39:d7:5f:bd:05:b0:e0:88:ee:36:63:40:f3:ae:54:
8a:22:16:bb:96:f1:ca:dd:03:43:84:00:0b:58:69:
73:98:75:ae:7f:89:7f:a9:0d:93:f6:84:c1:4e:6f:
aa:3f:4f:60:56:3b:6a:20:f9:6f:48:2f:36:77:ff:
ba:83:52:4a:6f:41:fd:b1:c6:4d:37:ef:8c:96:11:
af:c1:0e:67:25:f4:93:cb:87:9c:d5:07:5c:b8:93:
1e:2a:64:65:96:42:48:63:83:ac:cf:6a:d0:69:fd:
86:90:ef:9b:cb:09:fc:53:d2:b0:a6:6e:e9:6d:43:
7b:39:0c:15:0a:2f:29:67:70:a2:ec:84:ab:4f:92:
5d:b7:63:ac:3f:e5:16:84:bb:3c:d2:7b:c4:37:ed:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:4B:8E:75:E4:2E:8A:62:35:A7:01:2F:40:4E:C1:6A:73:2F:20
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:46:7c:bf:46:19:06:cd:9f:e8:a3:ac:71:29:31:e7:d2:62:
aa:89:b0:71:4a:7e:fe:14:3c:51:bd:7e:b2:f0:6c:8b:29:d1:
53:95:45:1f:00:1f:15:a7:35:0f:e6:94:ab:5c:ce:bb:e0:6e:
6d:a1:00:95:f3:62:7a:c3:1f:37:7b:1c:83:48:f5:b1:27:ff:
c8:42:67:d1:0e:b1:af:d2:cd:fa:7f:58:a6:9b:48:02:65:67:
4a:7f:c7:db:38:b8:59:d9:21:5a:ed:4a:8b:b3:b0:b7:07:4c:
0a:67:f0:df:77:29:a9:b1:5f:7c:db:c4:d8:9b:6a:c9:28:c1:
05:61:5b:6b:42:92:39:31:99:11:0a:3b:92:65:50:27:3f:54:
8f:fc:f0:16:ae:7a:7a:9b:95:fe:ec:9e:56:9a:d2:07:62:c9:
db:0e:c4:6a:c9:ba:a4:51:04:7e:a4:70:9f:dd:d2:b9:90:1f:
d5:8a:75:1f:7f:8e:c1:fb:9e:ff:46:e8:3e:32:21:47:b1:bc:
f0:f7:b3:92:3f:d0:0d:bd:f1:10:b7:24:38:95:b0:8f:18:a1:
6f:cf:dc:57:bc:d1:1a:a1:00:fc:61:e9:61:35:b9:4e:3a:58:
d4:9a:09:65:96:fb:e6:80:b0:33:fd:ee:7f:a7:39:03:23:52:
b5:36:95:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnhhBzCf5TOGcRXVhu7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1
YjVkN2IwHhcNMjYwMzI2MDMwMDU0WhcNMjYwMzI3MDMwMDU0WjAzMTEwLwYDVQQD
EyhhZDhlNGI4ZTc1ZTQyZThhNjIzNWE3MDEyZjQwNGVjMTZhNzMyZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveZsYZos5zlUeT5t8vXSsSx8lrQB
s8MA+AtVjzIjPvqGb88KgF0gSwd36TL8z2FSIvr71ADoeR6WAnzfYfqlqkIf6H7E
eOLO9yCrBlBG9N/B5qJ2vBqtw6USh3tOq6XHeSD5DAqhL+M511+9BbDgiO42Y0Dz
rlSKIha7lvHK3QNDhAALWGlzmHWuf4l/qQ2T9oTBTm+qP09gVjtqIPlvSC82d/+6
g1JKb0H9scZNN++MlhGvwQ5nJfSTy4ec1QdcuJMeKmRllkJIY4Osz2rQaf2GkO+b
ywn8U9Kwpm7pbUN7OQwVCi8pZ3Ci7ISrT5Jdt2OsP+UWhLs80nvEN+3q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2OS4515C6KYjWnAS9ATsFqcy8gMB8GA1UdIwQY
MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct
NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy
LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEZ8v0YZ
Bs2f6KOscSkx59JiqomwcUp+/hQ8Ub1+svBsiynRU5VFHwAfFac1D+aUq1zOu+Bu
baEAlfNiesMfN3scg0j1sSf/yEJn0Q6xr9LN+n9YpptIAmVnSn/H2zi4WdkhWu1K
i7OwtwdMCmfw33cpqbFffNvE2JtqySjBBWFba0KSOTGZEQo7kmVQJz9Uj/zwFq56
epuV/uyeVprSB2LJ2w7Easm6pFEEfqRwn93SuZAf1Yp1H3+Owfue/0boPjIhR7G8
8Pezkj/QDb3xELckOJWwjxihb8/cV7zRGqEA/GHpYTW5TjpY1JoJZZb75oCwM/3u
f6c5AyNStTaVww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:33 2026 by rpki-client