Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: gTZcIjdtvR5IUjeeLqX3ArXjYnuuMIFJjOERoOM4zuQ=
Subject key identifier: 9F:7D:B7:E0:0A:2A:ED:FB:9C:96:23:A5:71:AB:56:5F:42:3B:05:03
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019D2A3C62C74051CBE65C9D674D9A6879B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 15F3
Signing time: Thu 26 Mar 2026 13:01:33 +0000
Manifest this update: Thu 26 Mar 2026 13:01:33 +0000
Manifest next update: Fri 27 Mar 2026 13:01:33 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: cF+C3AJBfXqvs34DhkVySvgk3qqB4jxOAXyg7NM8ndQ=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:62:c7:40:51:cb:e6:5c:9d:67:4d:9a:68:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 26 13:01:33 2026 GMT
Not After : Mar 27 13:01:33 2026 GMT
Subject: CN=9f7db7e00a2aedfb9c9623a571ab565f423b0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:9a:71:4a:34:c9:5c:4b:d3:7c:dd:b8:6f:
b1:49:12:1d:83:8e:07:17:bf:37:f8:fe:91:36:1c:
a6:d5:c2:6c:82:70:33:8b:54:bf:1c:5d:2a:a0:ed:
f6:35:04:81:ac:f9:9f:47:32:2a:34:25:08:4d:94:
02:9d:e7:29:28:fc:a6:80:6b:94:69:ff:42:42:2b:
5a:8a:b7:1e:43:de:3c:d8:a8:6b:b6:e1:ed:f7:b0:
52:aa:44:c7:08:f7:26:7e:f0:d3:7b:f8:fe:2f:b2:
41:34:ef:c9:d9:8e:73:c3:19:c3:f5:55:f3:29:e1:
74:c8:7a:2a:23:05:85:0a:1b:01:0c:81:16:77:78:
d5:90:f5:a3:c8:26:7d:3a:1c:32:77:82:4e:60:c4:
26:6d:e6:5c:3a:17:7f:d2:e7:3c:5f:ed:dc:0a:e4:
da:ef:8e:88:aa:87:6c:51:68:85:9b:b7:50:9b:ac:
ec:6d:dd:d5:aa:1a:db:32:f3:84:b4:7f:c0:35:58:
1d:6c:9c:5f:7e:e4:af:40:1f:ac:7c:43:01:78:8c:
26:77:0f:d5:67:b3:ec:3c:4e:52:81:88:aa:63:5b:
9f:79:17:78:ae:a9:c1:09:db:2f:11:93:ad:5a:f8:
24:64:10:88:72:99:b9:c2:fd:8c:c8:7f:83:04:80:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:B7:E0:0A:2A:ED:FB:9C:96:23:A5:71:AB:56:5F:42:3B:05:03
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:e9:59:63:68:ab:57:88:ef:7e:33:0e:78:cf:2a:40:81:
ea:f8:9a:bb:8a:f1:93:8b:cf:57:8f:95:03:b9:ee:dc:59:77:
f7:48:ae:9c:a1:32:4d:27:3d:80:de:d2:c7:89:18:da:a8:08:
a4:5e:89:07:ba:72:55:19:3e:39:06:7c:f6:b4:2c:46:d2:a3:
de:d2:1d:fc:ca:7e:ad:06:22:5c:1d:7f:99:04:7c:f3:ba:6b:
00:e9:20:c9:61:4e:a5:1b:89:b7:4b:cc:e7:0e:89:39:da:7e:
01:46:91:b4:3d:4e:d9:d6:34:65:4c:49:01:2e:e7:f4:67:43:
fe:7e:4f:40:50:41:cf:a2:1e:79:28:6a:2d:0a:1a:31:01:f2:
bb:49:db:18:90:f6:ca:b9:22:e1:35:bc:9b:f6:57:0f:3f:5c:
3d:7c:a2:79:a3:70:55:4c:1d:8e:65:c7:53:4c:0a:a3:bd:bc:
b9:0b:17:c5:7f:37:a6:61:c2:61:a3:d3:dc:d1:1f:dd:54:ea:
8f:18:64:e5:ab:82:27:f6:36:e0:3b:7d:b6:2b:39:36:eb:99:
1e:0d:cf:af:2c:4d:df:ee:2d:bf:d6:f4:0d:30:e3:58:72:d5:
8d:4d:ef:82:29:09:9a:77:17:e1:e3:a1:89:30:c7:a9:99:4f:
c9:1c:26:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPGLHQFHL5lydZ02aaHmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjYwMzI2MTMwMTMzWhcNMjYwMzI3MTMwMTMzWjAzMTEwLwYDVQQD
Eyg5ZjdkYjdlMDBhMmFlZGZiOWM5NjIzYTU3MWFiNTY1ZjQyM2IwNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuGacUo0yVxL03zduG+xSRIdg44H
F783+P6RNhym1cJsgnAzi1S/HF0qoO32NQSBrPmfRzIqNCUITZQCnecpKPymgGuU
af9CQitairceQ9482KhrtuHt97BSqkTHCPcmfvDTe/j+L7JBNO/J2Y5zwxnD9VXz
KeF0yHoqIwWFChsBDIEWd3jVkPWjyCZ9Ohwyd4JOYMQmbeZcOhd/0uc8X+3cCuTa
746IqodsUWiFm7dQm6zsbd3VqhrbMvOEtH/ANVgdbJxffuSvQB+sfEMBeIwmdw/V
Z7PsPE5SgYiqY1ufeRd4rqnBCdsvEZOtWvgkZBCIcpm5wv2MyH+DBIC/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ99t+AKKu37nJYjpXGrVl9COwUDMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgTpWWNo
q1eI734zDnjPKkCB6viau4rxk4vPV4+VA7nu3Fl390iunKEyTSc9gN7Sx4kY2qgI
pF6JB7pyVRk+OQZ89rQsRtKj3tId/Mp+rQYiXB1/mQR887prAOkgyWFOpRuJt0vM
5w6JOdp+AUaRtD1O2dY0ZUxJAS7n9GdD/n5PQFBBz6IeeShqLQoaMQHyu0nbGJD2
yrki4TW8m/ZXDz9cPXyieaNwVUwdjmXHU0wKo728uQsXxX83pmHCYaPT3NEf3VTq
jxhk5auCJ/Y24Dt9tis5NuuZHg3PryxN3+4tv9b0DTDjWHLVjU3vgikJmncX4eOh
iTDHqZlPyRwm5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:28 2026 by rpki-client