Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json)
Hash identifier: Tlxo8EL1ExnKAuH+40zEdS5UjI95Vn4gD8GpGzMtETQ=
Subject key identifier: A2:F3:41:88:4C:40:F7:3A:89:D0:EB:11:22:5E:BD:78:CA:AE:24:00
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial: 019D2B856959439AB03EF25ABB5BCB3FA51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
Manifest number: 0180
Signing time: Thu 26 Mar 2026 19:00:56 +0000
Manifest this update: Thu 26 Mar 2026 19:00:56 +0000
Manifest next update: Fri 27 Mar 2026 19:00:56 +0000
Files and hashes: 1: DUhtAD3_xxy9gOvcTDplBUTPnms.roa (hash: v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=)
2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: e3wLb5N1ej4uSpxiddPdc4mMbwB2Xo1Ul7MrIkbC920=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:69:59:43:9a:b0:3e:f2:5a:bb:5b:cb:3f:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
Validity
Not Before: Mar 26 19:00:56 2026 GMT
Not After : Mar 27 19:00:56 2026 GMT
Subject: CN=a2f341884c40f73a89d0eb11225ebd78caae2400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:ec:77:20:4e:64:62:aa:da:d1:ca:01:0b:
da:6a:2c:93:87:ad:fc:b4:e9:44:68:c5:12:0e:9d:
35:ff:22:b2:05:42:c6:4a:f7:48:69:5b:e8:0d:5d:
64:61:c4:94:f0:2a:35:51:e7:04:e5:a1:f1:dc:b4:
63:ad:db:a3:de:6a:ba:69:11:a7:35:5b:bb:6a:fd:
55:33:fa:7d:fd:61:84:d7:16:99:c7:45:93:e0:f4:
58:57:9a:07:81:c8:b1:d6:92:a4:5d:6b:b8:d3:d1:
47:2b:a2:58:f2:71:b1:58:ce:f6:ca:1a:1e:4c:81:
87:84:97:7e:2a:37:92:c8:4a:94:a8:24:44:62:be:
56:1a:58:17:a5:0c:8f:87:33:b3:3d:57:db:c5:77:
7f:ae:b2:76:65:01:1a:ce:56:b6:20:1e:b4:e9:9f:
eb:d5:16:52:5d:99:83:67:06:f6:0d:f1:47:4a:22:
c5:36:65:12:20:af:4e:9b:1f:0c:21:a8:2f:53:1b:
2d:63:f4:95:65:f6:19:da:58:f7:3c:e8:3b:11:51:
5d:b0:ac:df:f5:9f:63:82:f9:01:f4:e2:3d:86:2d:
1c:d2:73:20:ac:8a:52:ea:b9:e0:05:fa:af:32:fb:
90:30:f1:e1:a3:7d:e6:ca:48:08:6f:7d:f7:79:e2:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:41:88:4C:40:F7:3A:89:D0:EB:11:22:5E:BD:78:CA:AE:24:00
X509v3 Authority Key Identifier:
keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:94:fe:b3:fa:12:71:80:37:24:3f:f2:a7:78:b5:b9:51:
db:b5:71:e9:c2:13:74:ae:bc:9a:19:3a:93:4f:0a:29:19:39:
27:ab:9a:ce:06:c5:31:97:82:15:05:b9:62:25:8e:91:15:61:
cd:1c:dd:f9:fe:68:0e:85:a5:70:e0:8d:68:6c:bb:62:b1:5e:
33:f9:2f:ff:45:cc:2b:ad:66:6f:60:75:e6:31:77:08:46:ae:
87:8e:5f:e8:5a:ea:49:3f:10:e8:9d:25:42:d8:18:74:cf:6d:
cd:e5:bf:97:6e:9d:2d:99:42:2d:c2:32:89:65:00:cc:97:e0:
cb:37:9c:29:6f:7c:fb:5d:40:81:1c:6f:ee:ff:87:89:90:46:
0f:f7:c6:99:ca:2a:df:53:59:d7:2a:a3:de:15:5b:a5:06:6f:
c9:44:3e:8a:e7:79:a0:89:f7:cd:39:96:5f:6a:ea:6a:b9:45:
2b:3b:38:ff:af:29:27:73:ad:22:01:b0:fc:fb:3b:98:a1:28:
0e:e4:23:08:9c:0f:21:54:f0:4e:97:4f:2b:64:cb:36:af:ec:
a6:08:ed:0f:b7:e1:d9:b3:7b:8c:89:66:4f:4e:1e:6a:82:09:
63:e0:06:3f:87:5f:86:70:a6:a4:89:08:17:28:87:7e:ae:f2:
eb:b1:0d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhWlZQ5qwPvJau1vLP6UfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4
MTQ5OTAwHhcNMjYwMzI2MTkwMDU2WhcNMjYwMzI3MTkwMDU2WjAzMTEwLwYDVQQD
EyhhMmYzNDE4ODRjNDBmNzNhODlkMGViMTEyMjVlYmQ3OGNhYWUyNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHLsdyBOZGKq2tHKAQvaaiyTh638
tOlEaMUSDp01/yKyBULGSvdIaVvoDV1kYcSU8Co1UecE5aHx3LRjrduj3mq6aRGn
NVu7av1VM/p9/WGE1xaZx0WT4PRYV5oHgcix1pKkXWu409FHK6JY8nGxWM72yhoe
TIGHhJd+KjeSyEqUqCREYr5WGlgXpQyPhzOzPVfbxXd/rrJ2ZQEazla2IB606Z/r
1RZSXZmDZwb2DfFHSiLFNmUSIK9Omx8MIagvUxstY/SVZfYZ2lj3POg7EVFdsKzf
9Z9jgvkB9OI9hi0c0nMgrIpS6rngBfqvMvuQMPHho33mykgIb333eeL2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLzQYhMQPc6idDrESJevXjKriQAMB8GA1UdIwQY
MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt
MjM2Nzg5NTg3OTk3LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3
LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvuU/rP6
EnGANyQ/8qd4tblR27Vx6cITdK68mhk6k08KKRk5J6uazgbFMZeCFQW5YiWOkRVh
zRzd+f5oDoWlcOCNaGy7YrFeM/kv/0XMK61mb2B15jF3CEauh45f6FrqST8Q6J0l
QtgYdM9tzeW/l26dLZlCLcIyiWUAzJfgyzecKW98+11AgRxv7v+HiZBGD/fGmcoq
31NZ1yqj3hVbpQZvyUQ+iud5oIn3zTmWX2rqarlFKzs4/68pJ3OtIgGw/Ps7mKEo
DuQjCJwPIVTwTpdPK2TLNq/spgjtD7fh2bN7jIlmT04eaoIJY+AGP4dfhnCmpIkI
FyiHfq7y67ENzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:30 2026 by rpki-client