Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: pIV+NkvaVg0JLshRvLMDVggKiG0iBX8FQaFnUZ/h8P4=
Subject key identifier: F5:F3:FF:14:B4:30:84:6F:0D:07:6A:F6:D1:A4:5A:B2:0A:45:D9:AD
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019D25F18CDCB6E8CB0F40E44329FD05E0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: UW1Vm9QWeVR+Pl19jzTEpS4oP7OL0h0kyohFb/KqKoI=)
2: 7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa (hash: HPQdXwyp3J2HnbICqRn22xILcDG/y13SiXtWcNiXZ2k=)
3: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8c:dc:b6:e8:cb:0f:40:e4:43:29:fd:05:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=f5f3ff14b430846f0d076af6d1a45ab20a45d9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:3f:3c:ff:66:6c:64:e3:96:e3:05:47:00:
94:a1:e5:ad:cf:b8:e4:c0:b9:5a:f3:1b:10:48:7b:
12:75:04:40:53:44:8b:14:81:13:35:a2:d6:40:c9:
46:af:72:64:fd:8b:95:10:ed:c3:7b:eb:e5:a9:43:
57:1b:c1:54:24:b0:62:f1:de:8d:b1:01:34:06:d2:
e2:71:7f:2c:e3:3c:51:1e:9a:f8:00:a4:d4:a8:b0:
bd:4a:b1:96:aa:c5:f4:d7:9b:3a:77:10:dd:7f:01:
cc:c9:86:05:d7:ef:d8:56:87:b7:87:1a:4c:76:0a:
4c:fb:b6:1d:29:78:10:6c:58:f1:2d:a0:42:43:fa:
ab:d4:6b:10:ea:e1:02:00:7c:d1:e5:c2:83:61:5f:
e6:59:aa:ac:40:ac:13:5a:43:7e:55:db:4c:1f:12:
c0:ba:3f:e3:08:32:6d:53:4b:aa:f4:2c:9f:5b:29:
ff:36:5e:ea:12:df:bd:0c:25:a8:30:2b:aa:2e:1e:
cc:fb:dd:4c:72:e6:ea:75:b9:8a:d7:bf:f9:6f:77:
39:2a:b1:e0:08:de:e9:9c:5c:99:40:61:d3:73:75:
bf:de:ca:76:0f:c2:2f:18:ce:25:88:a0:f4:ee:5e:
0c:e3:f6:b6:92:9b:22:63:a3:16:17:67:03:90:95:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:FF:14:B4:30:84:6F:0D:07:6A:F6:D1:A4:5A:B2:0A:45:D9:AD
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8b:9d:c9:d9:6a:63:dd:94:d4:b5:c2:70:af:fa:59:9d:fa:
f1:a9:3f:12:f8:39:5d:a9:9c:8d:30:30:d0:9d:7e:ce:73:91:
c5:ac:0a:6d:b3:cf:19:96:ff:d1:c1:c5:66:6f:4d:47:e2:18:
12:4a:fb:5f:2f:b9:3e:b1:1d:b8:47:e5:2d:5f:8e:94:31:7b:
f6:ff:10:80:ca:6b:bd:0b:14:a0:14:03:fc:83:f4:4f:62:75:
3f:a5:56:af:6e:a6:a6:2b:62:f1:a8:fe:67:ae:9e:42:58:59:
03:96:df:50:4c:d8:83:01:ae:db:60:9b:6b:06:bc:4e:af:9b:
a1:2f:52:88:f4:f8:33:e0:a9:84:3f:83:26:56:1c:b0:40:2b:
cb:de:dc:c8:6a:fd:95:42:fc:76:76:15:08:19:0c:56:eb:17:
8a:cb:79:b9:30:fd:9a:c4:4f:9f:c6:8b:fc:49:75:47:2e:46:
dc:e0:14:2b:1e:cb:4f:ec:1e:be:48:14:ce:da:45:85:6f:1a:
c1:41:b5:fe:dc:61:02:91:33:da:67:52:0f:42:2b:84:95:2c:
9f:c1:af:48:94:33:b5:b9:ec:14:b2:b8:3c:fd:af:06:97:da:
8f:09:66:c8:c2:8c:d7:99:8b:8a:38:1b:ce:f8:3a:19:fb:f6:
9b:50:b8:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8YzctujLD0DkQyn9BeDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh
MGFmZjIwHhcNMjYwMzI1MTcwMTIwWhcNMjYwMzI2MTcwMTIwWjAzMTEwLwYDVQQD
EyhmNWYzZmYxNGI0MzA4NDZmMGQwNzZhZjZkMWE0NWFiMjBhNDVkOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL4/PP9mbGTjluMFRwCUoeWtz7jk
wLla8xsQSHsSdQRAU0SLFIETNaLWQMlGr3Jk/YuVEO3De+vlqUNXG8FUJLBi8d6N
sQE0BtLicX8s4zxRHpr4AKTUqLC9SrGWqsX015s6dxDdfwHMyYYF1+/YVoe3hxpM
dgpM+7YdKXgQbFjxLaBCQ/qr1GsQ6uECAHzR5cKDYV/mWaqsQKwTWkN+VdtMHxLA
uj/jCDJtU0uq9CyfWyn/Nl7qEt+9DCWoMCuqLh7M+91McubqdbmK17/5b3c5KrHg
CN7pnFyZQGHTc3W/3sp2D8IvGM4liKD07l4M4/a2kpsiY6MWF2cDkJV9JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXz/xS0MIRvDQdq9tGkWrIKRdmtMB8GA1UdIwQY
MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt
NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz
LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Iudydlq
Y92U1LXCcK/6WZ368ak/Evg5XamcjTAw0J1+znORxawKbbPPGZb/0cHFZm9NR+IY
Ekr7Xy+5PrEduEflLV+OlDF79v8QgMprvQsUoBQD/IP0T2J1P6VWr26mpiti8aj+
Z66eQlhZA5bfUEzYgwGu22Cbawa8Tq+boS9SiPT4M+CphD+DJlYcsEAry97cyGr9
lUL8dnYVCBkMVusXist5uTD9msRPn8aL/El1Ry5G3OAUKx7LT+wevkgUztpFhW8a
wUG1/txhApEz2mdSD0IrhJUsn8GvSJQztbnsFLK4PP2vBpfajwlmyMKM15mLijgb
zvg6Gfv2m1C4Mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:45 2026 by rpki-client