Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: ODvJD9PIiIATqsKUrHKRjPKeiSb3moJKbFtsfbSGEiw=
Subject key identifier: 5D:EF:4A:A5:E6:C1:4F:24:16:1C:6F:64:EB:4B:BB:D0:25:41:63:67
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019D284D87699CFD34428FF7C38E627392C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0286
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: gdKZQFVntO6dlib9uUAPEwTMVpAzzmJjFjOj/XT6Epw=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:87:69:9c:fd:34:42:8f:f7:c3:8e:62:73:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=5def4aa5e6c14f24161c6f64eb4bbbd025416367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:4b:39:87:46:21:aa:6b:c0:14:46:54:f9:
4e:cc:d8:ea:8b:6d:38:44:4c:e3:99:60:f8:e9:25:
1c:e8:10:ad:e3:fb:ba:5d:da:ca:6b:1f:78:ed:41:
09:69:13:0c:4c:e8:76:ce:2c:81:ec:0d:11:2d:93:
f6:4e:41:84:d1:b6:2a:f9:de:24:09:60:e9:3e:aa:
6d:ef:1a:97:4f:f9:c6:ce:f8:97:7b:e8:4c:f0:ae:
13:73:7e:e1:e1:41:c2:2d:0f:a5:ef:bd:34:2c:d0:
ca:68:ff:59:c9:92:c1:15:bf:51:23:6f:91:a9:9a:
73:74:97:a2:24:e9:f3:eb:51:b9:61:49:20:61:d5:
fd:54:24:c0:e0:4a:0d:96:a3:40:8a:32:d0:38:94:
30:81:97:ea:79:da:e7:1a:58:c0:d8:e1:76:31:96:
8b:77:90:f0:ed:57:7b:8b:47:72:5b:7a:2c:2a:78:
80:83:c0:04:bc:6f:99:25:06:20:ac:5f:46:c1:4f:
f6:8f:44:d6:0e:80:d0:2b:b8:7e:c2:1e:33:64:4f:
62:20:ef:75:d1:f8:96:89:bd:f6:96:d4:83:20:d4:
c6:7f:87:f8:7e:59:2b:35:98:34:c7:13:f3:df:26:
84:09:eb:c4:28:4a:ce:53:7e:cd:77:7c:76:81:76:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:4A:A5:E6:C1:4F:24:16:1C:6F:64:EB:4B:BB:D0:25:41:63:67
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:df:22:b6:e0:06:bc:2a:b3:18:b4:98:d2:e3:c8:a6:d4:
11:96:29:3e:18:7a:b0:2d:07:bb:98:9a:da:20:8d:29:9f:74:
a7:ea:c9:77:c3:69:6c:92:fc:87:60:cb:c1:65:48:13:40:7c:
6e:ba:39:e8:0c:4d:a3:12:4b:15:ca:fc:e1:2e:d4:88:2e:e5:
98:4e:bc:4d:28:50:17:de:b8:30:06:01:b0:2a:38:03:d0:d9:
81:a3:a1:5e:c9:b4:08:97:3b:84:ba:97:d7:74:c2:76:b4:02:
8a:53:1e:57:76:44:8b:79:30:3d:55:dd:b8:c2:95:d7:ff:91:
8d:78:86:21:ff:44:15:f4:d7:a0:2c:ec:d1:27:79:be:a6:f4:
19:72:41:9a:03:1c:51:31:af:4e:a0:a4:bb:58:21:93:5e:f4:
2f:a7:ea:16:30:be:ca:13:e0:09:9d:b3:66:54:51:43:74:c2:
79:3a:9a:31:10:79:26:b1:cd:83:c6:c4:61:9f:b4:81:83:9c:
9e:20:b2:ad:5f:ba:f7:d7:39:ea:57:a6:b7:f9:12:49:56:d4:
e3:55:89:90:a3:50:e0:90:68:7e:18:d6:88:4c:e0:57:99:7e:
0e:16:1c:90:27:92:f3:c4:c0:4d:94:01:9f:1c:2c:88:7c:23:
e9:96:06:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYdpnP00Qo/3w45ic5LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy
NGVmNjUwHhcNMjYwMzI2MDQwMTAyWhcNMjYwMzI3MDQwMTAyWjAzMTEwLwYDVQQD
Eyg1ZGVmNGFhNWU2YzE0ZjI0MTYxYzZmNjRlYjRiYmJkMDI1NDE2MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDVLOYdGIaprwBRGVPlOzNjqi204
REzjmWD46SUc6BCt4/u6XdrKax947UEJaRMMTOh2ziyB7A0RLZP2TkGE0bYq+d4k
CWDpPqpt7xqXT/nGzviXe+hM8K4Tc37h4UHCLQ+l7700LNDKaP9ZyZLBFb9RI2+R
qZpzdJeiJOnz61G5YUkgYdX9VCTA4EoNlqNAijLQOJQwgZfqedrnGljA2OF2MZaL
d5Dw7Vd7i0dyW3osKniAg8AEvG+ZJQYgrF9GwU/2j0TWDoDQK7h+wh4zZE9iIO91
0fiWib32ltSDINTGf4f4flkrNZg0xxPz3yaECevEKErOU37Nd3x2gXY2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3vSqXmwU8kFhxvZOtLu9AlQWNnMB8GA1UdIwQY
MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt
NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll
LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0vfIrbg
Brwqsxi0mNLjyKbUEZYpPhh6sC0Hu5ia2iCNKZ90p+rJd8NpbJL8h2DLwWVIE0B8
bro56AxNoxJLFcr84S7UiC7lmE68TShQF964MAYBsCo4A9DZgaOhXsm0CJc7hLqX
13TCdrQCilMeV3ZEi3kwPVXduMKV1/+RjXiGIf9EFfTXoCzs0Sd5vqb0GXJBmgMc
UTGvTqCku1ghk170L6fqFjC+yhPgCZ2zZlRRQ3TCeTqaMRB5JrHNg8bEYZ+0gYOc
niCyrV+699c56lemt/kSSVbU41WJkKNQ4JBofhjWiEzgV5l+DhYckCeS88TATZQB
nxwsiHwj6ZYG2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:44:26 2026 by rpki-client