Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: w9GMjJ6QdJnlK8eE+k5aDNM1P50WOp9nU2nWQtWLnso=
Subject key identifier: F0:E6:69:F7:F3:FA:7C:5C:A5:76:E7:25:51:D8:EF:B3:DC:E2:C4:D7
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 019D2816DDF84B79832A081A88FAA0505947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 1026
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: 0hpewv+dLlxiDVbGwMHEQA3DcwZxEE1xhe42iDOqv6w=)
2: 73KjaABUIPMMJFXxvW8vZjtsKWs.roa (hash: gAkg8MW5s4Wu4Exe0BB68OpW+467tevdwwSm3IV/F4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:f8:4b:79:83:2a:08:1a:88:fa:a0:50:59:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=f0e669f7f3fa7c5ca576e72551d8efb3dce2c4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:c5:28:99:92:6b:e1:be:8a:80:2c:a5:ba:
72:a3:8a:a6:7d:77:ae:7a:ee:94:5f:22:57:3d:51:
c5:f4:97:ea:ff:9a:0e:9d:7a:64:17:bb:b4:e6:66:
76:25:46:48:b7:61:39:84:66:07:66:72:b7:d4:a1:
6c:bf:58:ed:93:76:86:fb:f7:fe:b9:61:2f:26:03:
ba:b7:83:17:9f:9b:d8:b3:08:c9:61:d8:3d:15:2c:
0d:31:44:9f:66:df:f0:09:20:30:9b:fd:78:86:f1:
b6:2f:24:5b:e1:49:ee:ec:2c:70:c8:cd:c6:90:fb:
7b:33:fd:29:c9:22:bb:97:9d:96:b6:72:f5:b6:68:
c3:8e:d3:a8:da:68:c7:b0:c7:63:43:a5:02:8c:6f:
ea:24:42:ba:42:58:bd:ad:70:1c:b7:3d:1e:f2:b0:
36:3b:5e:a8:0c:de:61:f7:64:f5:8a:0e:f2:c4:50:
31:19:52:a5:42:3b:24:40:b2:5c:97:c7:cb:9b:32:
31:65:32:09:39:47:f1:06:44:cf:9d:ef:1d:88:74:
f7:f0:ba:44:35:cb:94:47:95:73:13:96:98:eb:82:
0b:46:0b:c5:db:ae:24:1e:cf:cd:8f:ff:98:5d:bb:
81:8c:71:c1:bc:36:c0:b9:e5:3c:3d:2d:9b:89:60:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:69:F7:F3:FA:7C:5C:A5:76:E7:25:51:D8:EF:B3:DC:E2:C4:D7
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0c:93:41:48:00:e1:8d:95:f5:ba:45:c5:d5:49:46:79:7a:
c1:c4:e0:a7:ab:52:55:f7:f4:6e:80:63:f2:9d:33:8c:b2:49:
ef:d0:cf:55:ab:87:b2:87:a1:06:49:1f:43:cc:02:10:af:28:
2a:d3:f4:66:a4:15:85:19:76:3e:d6:d3:d0:cb:b7:dd:d3:69:
c1:d3:74:12:3e:3a:e4:6a:7b:13:ab:d9:56:a6:c0:c5:de:31:
b0:56:19:e9:65:01:d2:d2:18:87:74:3b:20:cc:50:d9:db:60:
27:61:ff:e5:a0:3a:00:82:d1:93:62:bd:81:9e:a6:fe:e7:0f:
68:f9:65:65:9b:24:44:8f:e3:66:03:a9:c9:05:3b:b0:4a:28:
59:52:e2:ae:e4:68:69:3d:f2:9f:18:29:ad:c0:9c:1c:c4:41:
8d:e2:3e:b2:03:59:0b:5c:ef:ff:ea:1d:68:dc:11:fc:01:83:
18:ce:bd:30:21:1c:33:ba:a4:78:b2:cd:4d:08:b4:dc:13:79:
95:a9:19:89:7a:7d:05:25:a2:e6:94:67:c2:92:4c:34:4a:35:
ff:30:2b:74:08:0d:f3:73:e8:f2:20:9e:6a:93:6f:f4:04:13:
c7:6f:58:82:71:03:27:e0:d4:ee:77:ed:4e:37:ac:89:80:29:
71:cc:5e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFt34S3mDKggaiPqgUFlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYwZmYzNjVkNGJkOTA4ZGU5MDJlZWRhMDNiMjc5YzJm
ODA5ZDMwHhcNMjYwMzI2MDMwMTIwWhcNMjYwMzI3MDMwMTIwWjAzMTEwLwYDVQQD
EyhmMGU2NjlmN2YzZmE3YzVjYTU3NmU3MjU1MWQ4ZWZiM2RjZTJjNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZXFKJmSa+G+ioAspbpyo4qmfXeu
eu6UXyJXPVHF9Jfq/5oOnXpkF7u05mZ2JUZIt2E5hGYHZnK31KFsv1jtk3aG+/f+
uWEvJgO6t4MXn5vYswjJYdg9FSwNMUSfZt/wCSAwm/14hvG2LyRb4Unu7CxwyM3G
kPt7M/0pySK7l52WtnL1tmjDjtOo2mjHsMdjQ6UCjG/qJEK6Qli9rXActz0e8rA2
O16oDN5h92T1ig7yxFAxGVKlQjskQLJcl8fLmzIxZTIJOUfxBkTPne8diHT38LpE
NcuUR5VzE5aY64ILRgvF264kHs/Nj/+YXbuBjHHBvDbAueU8PS2biWBwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDmaffz+nxcpXbnJVHY77Pc4sTXMB8GA1UdIwQY
MBaAFNqvD/Nl1L2QjekC7toDsnnC+AnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAt
NDA5MTc2Zjg0NmQzLzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAtNDA5MTc2Zjg0NmQz
LzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwyTQUgA
4Y2V9bpFxdVJRnl6wcTgp6tSVff0boBj8p0zjLJJ79DPVauHsoehBkkfQ8wCEK8o
KtP0ZqQVhRl2PtbT0Mu33dNpwdN0Ej465Gp7E6vZVqbAxd4xsFYZ6WUB0tIYh3Q7
IMxQ2dtgJ2H/5aA6AILRk2K9gZ6m/ucPaPllZZskRI/jZgOpyQU7sEooWVLiruRo
aT3ynxgprcCcHMRBjeI+sgNZC1zv/+odaNwR/AGDGM69MCEcM7qkeLLNTQi03BN5
lakZiXp9BSWi5pRnwpJMNEo1/zArdAgN83Po8iCeapNv9AQTx29YgnEDJ+DU7nft
TjesiYApccxepw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:40 2026 by rpki-client