Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: m4+7h/MzyofvPra275wvSV+NPj+mUSaXVciP37xNuL8=
Subject key identifier: 96:02:72:A4:0D:FE:A4:48:86:94:26:10:F9:85:7F:F2:61:65:EC:94
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 019D27E0239C5FC70B9241A9FCE3246F57BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: zkzr88kk+04tINCKajm8/RXe9Sf64ye80RLMQsaStXk=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:23:9c:5f:c7:0b:92:41:a9:fc:e3:24:6f:57:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=960272a40dfea44886942610f9857ff26165ec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:0f:b1:70:b6:26:aa:39:e7:c6:63:47:4e:
43:44:84:d3:46:c2:c5:8a:95:e0:09:30:74:3b:e4:
15:b7:2a:1b:d5:7f:51:e5:e6:e6:6f:ca:4e:ed:a5:
55:15:4b:84:75:3e:41:9b:91:22:88:2f:24:60:d4:
6f:0f:f7:b2:1e:3d:48:85:6f:38:76:00:0c:ee:ac:
af:41:2b:81:87:01:2c:d2:53:23:61:c6:41:ba:aa:
9a:7c:9f:32:a9:80:38:fc:19:60:ac:21:ae:7c:80:
12:86:f9:9e:d6:9b:a9:58:ce:09:c6:72:65:cf:e5:
15:c1:9a:1a:da:59:70:15:1a:2d:7e:e4:4c:ee:98:
ed:c1:3c:94:0b:0e:c4:be:b3:ac:31:aa:9a:12:4d:
9e:a9:bf:28:9d:5b:a5:3f:f9:62:2a:0e:b2:78:18:
c4:b9:33:ff:06:f4:b1:47:29:11:22:9f:cd:bf:16:
93:b7:72:22:50:94:e6:6f:52:eb:da:8b:c0:76:22:
2b:c9:ff:9e:45:f0:c9:6e:09:f7:bc:77:4e:e1:f7:
8b:1f:74:3f:c8:19:ed:e1:cd:49:5e:0d:a1:42:82:
1a:a8:63:bc:82:71:38:02:e6:0c:f1:c8:2a:b7:17:
21:1d:8c:22:a8:c1:1e:c1:b3:96:5a:72:07:b2:1d:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:02:72:A4:0D:FE:A4:48:86:94:26:10:F9:85:7F:F2:61:65:EC:94
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e4:61:97:f3:ab:f1:8f:5c:b4:25:2a:6a:d6:6f:cf:f2:71:
43:c3:1d:65:8d:ac:b1:7e:d5:22:4b:18:9d:61:6c:b7:41:9a:
f8:b8:7c:50:29:28:66:5e:d2:e6:fb:4b:5c:52:14:a4:87:b6:
c5:e8:80:2d:8e:df:a9:8a:2b:6e:de:a6:6f:13:70:1f:5e:f3:
4b:46:66:e8:6c:ff:ac:95:ae:23:8b:56:ce:60:16:3c:2a:85:
4e:96:5f:f2:b0:6c:3a:91:1a:ac:bb:0c:36:d2:cd:aa:db:8b:
90:48:f1:5f:bc:43:64:39:65:a8:60:89:b3:07:d1:13:84:38:
51:9d:50:54:67:be:c4:0b:aa:4a:f7:be:96:49:76:40:64:66:
c6:39:ed:f5:6f:c7:37:8b:15:4f:98:1a:f7:ec:ff:7b:16:70:
91:5f:c1:fe:c0:46:39:05:ff:29:b1:f0:50:10:dd:7c:f2:f6:
49:09:9b:a8:84:62:99:89:7c:6e:fb:a3:c3:74:f4:05:90:1d:
88:9d:a2:84:d4:0a:8f:a7:21:09:4d:4c:f1:d6:ad:9f:34:65:
1d:28:7c:fe:80:5f:23:02:72:b8:6e:fc:3b:42:81:25:08:3c:
94:f9:1e:a8:ec:05:33:84:3f:87:00:b5:8d:29:25:cb:a0:1e:
55:fe:73:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4COcX8cLkkGp/OMkb1e9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjYwMzI2MDIwMTMzWhcNMjYwMzI3MDIwMTMzWjAzMTEwLwYDVQQD
Eyg5NjAyNzJhNDBkZmVhNDQ4ODY5NDI2MTBmOTg1N2ZmMjYxNjVlYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWMPsXC2Jqo558ZjR05DRITTRsLF
ipXgCTB0O+QVtyob1X9R5ebmb8pO7aVVFUuEdT5Bm5EiiC8kYNRvD/eyHj1IhW84
dgAM7qyvQSuBhwEs0lMjYcZBuqqafJ8yqYA4/BlgrCGufIAShvme1pupWM4JxnJl
z+UVwZoa2llwFRotfuRM7pjtwTyUCw7EvrOsMaqaEk2eqb8onVulP/liKg6yeBjE
uTP/BvSxRykRIp/NvxaTt3IiUJTmb1Lr2ovAdiIryf+eRfDJbgn3vHdO4feLH3Q/
yBnt4c1JXg2hQoIaqGO8gnE4AuYM8cgqtxchHYwiqMEewbOWWnIHsh1leQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYCcqQN/qRIhpQmEPmFf/JhZeyUMB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxuRhl/Or
8Y9ctCUqatZvz/JxQ8MdZY2ssX7VIksYnWFst0Ga+Lh8UCkoZl7S5vtLXFIUpIe2
xeiALY7fqYorbt6mbxNwH17zS0Zm6Gz/rJWuI4tWzmAWPCqFTpZf8rBsOpEarLsM
NtLNqtuLkEjxX7xDZDllqGCJswfRE4Q4UZ1QVGe+xAuqSve+lkl2QGRmxjnt9W/H
N4sVT5ga9+z/exZwkV/B/sBGOQX/KbHwUBDdfPL2SQmbqIRimYl8bvujw3T0BZAd
iJ2ihNQKj6chCU1M8datnzRlHSh8/oBfIwJyuG78O0KBJQg8lPkeqOwFM4Q/hwC1
jSkly6AeVf5zXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:40 2026 by rpki-client