Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: MJNpoZlWhnilOSZTIQnaaLmN7Jl1Imy0nyL1TIgYvUk=
Subject key identifier: 54:3B:D0:E7:D2:EF:08:AF:81:12:F2:4A:76:CD:32:C9:5A:C8:43:F3
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 019D284D61AA41F8A6C3D7162B5FBE9E9087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: mEL6RVPWqyZ8H2gDJ58IK3p325p0SDiCcblweqjCpDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:61:aa:41:f8:a6:c3:d7:16:2b:5f:be:9e:90:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=543bd0e7d2ef08af8112f24a76cd32c95ac843f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:e7:c2:0a:30:65:52:f4:01:0e:97:98:44:
d3:20:44:64:93:ff:ae:35:b9:90:e2:a1:30:fe:78:
cb:ca:04:68:aa:5c:2a:bb:cb:93:20:44:03:f6:26:
35:70:e5:49:95:85:6a:07:96:f7:21:5c:b4:6a:a2:
47:41:6c:e8:aa:d9:7d:5d:9c:ab:ca:cd:c8:dd:b7:
a6:8e:cd:db:87:d4:3a:2b:87:9d:1e:db:bf:aa:3e:
51:86:37:2e:1d:cd:c4:43:4b:91:03:9c:57:2f:41:
25:ff:7d:91:54:7e:40:7b:97:7a:30:f2:e6:51:eb:
3a:61:b3:36:24:c0:b1:85:66:11:b3:3a:c1:bd:d2:
3e:72:00:8c:e3:a0:fb:0a:75:8d:af:1f:7d:a6:9a:
e4:68:d8:92:42:2a:2f:6f:f7:45:d7:61:2b:4d:f7:
e4:dd:07:38:d3:30:04:c3:10:6d:80:65:3b:9b:aa:
45:5a:a3:79:43:42:1a:6e:59:41:b0:6f:05:68:5c:
53:71:19:94:17:12:aa:26:0a:77:a1:a4:a3:c0:84:
07:9d:7f:31:92:5b:6f:94:2c:2b:35:a1:b5:7d:dc:
cc:13:3a:38:e9:cb:b9:ce:05:84:79:12:32:af:16:
be:e6:d6:2d:15:34:48:7c:c1:79:00:ce:f7:af:5d:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:D0:E7:D2:EF:08:AF:81:12:F2:4A:76:CD:32:C9:5A:C8:43:F3
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:35:99:17:c1:29:19:58:47:fc:31:3b:11:24:6d:d4:1f:
9c:e0:55:f0:ac:27:71:36:ad:01:4b:1a:a9:84:c5:f7:34:95:
b9:c1:66:92:96:33:05:ae:19:bf:6d:92:e6:39:c1:51:3a:e8:
e8:52:6d:1f:a9:9f:9c:57:1d:87:4c:c4:12:ef:4f:02:bb:6e:
70:68:78:1a:42:93:37:29:c6:09:e4:95:b7:93:95:9e:0f:77:
ae:33:6c:93:3e:0b:9e:ad:12:37:6f:a1:2a:39:17:47:07:24:
55:1b:64:25:93:f7:3b:06:7e:27:6a:9e:2c:39:8e:a9:26:ec:
76:2f:c1:66:f7:5a:81:51:77:b8:1b:8a:20:9c:28:55:bc:55:
65:d8:f7:85:42:8d:f6:fe:87:67:15:6e:ab:1c:25:fd:c8:99:
de:64:31:61:c9:43:76:d9:cd:07:f7:c1:c6:2c:40:ec:56:3d:
76:48:c4:82:04:5c:0e:66:99:fa:8d:cd:54:04:c5:8f:e0:43:
f8:22:5c:dc:c3:25:4d:2d:b4:51:3a:c8:cc:7f:84:81:42:bd:
bc:de:b4:e5:db:ff:b1:89:7d:be:38:cb:b3:2c:ff:f3:ab:ee:
0a:c1:1c:07:4d:b4:9f:a1:7d:fa:6a:70:e7:52:c7:05:d3:bc:
98:9c:d9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWGqQfimw9cWK1++npCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Y2ZhMGU0NDhhYmUzMGQyNmIwNjY1YTljMjk0ZDI5Yzk3
YjdlYmYwHhcNMjYwMzI2MDQwMDUzWhcNMjYwMzI3MDQwMDUzWjAzMTEwLwYDVQQD
Eyg1NDNiZDBlN2QyZWYwOGFmODExMmYyNGE3NmNkMzJjOTVhYzg0M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2PnwgowZVL0AQ6XmETTIERkk/+u
NbmQ4qEw/njLygRoqlwqu8uTIEQD9iY1cOVJlYVqB5b3IVy0aqJHQWzoqtl9XZyr
ys3I3bemjs3bh9Q6K4edHtu/qj5RhjcuHc3EQ0uRA5xXL0El/32RVH5Ae5d6MPLm
Ues6YbM2JMCxhWYRszrBvdI+cgCM46D7CnWNrx99pprkaNiSQiovb/dF12ErTffk
3Qc40zAEwxBtgGU7m6pFWqN5Q0IabllBsG8FaFxTcRmUFxKqJgp3oaSjwIQHnX8x
kltvlCwrNaG1fdzMEzo46cu5zgWEeRIyrxa+5tYtFTRIfMF5AM73r10VRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ70OfS7wivgRLySnbNMslayEPzMB8GA1UdIwQY
MBaAFNnPoORIq+MNJrBmWpwpTSnJe36/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDIt
NWRmZGQyNTlkZDFiLzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDItNWRmZGQyNTlkZDFi
LzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4o1mRfB
KRlYR/wxOxEkbdQfnOBV8KwncTatAUsaqYTF9zSVucFmkpYzBa4Zv22S5jnBUTro
6FJtH6mfnFcdh0zEEu9PArtucGh4GkKTNynGCeSVt5OVng93rjNskz4Lnq0SN2+h
KjkXRwckVRtkJZP3OwZ+J2qeLDmOqSbsdi/BZvdagVF3uBuKIJwoVbxVZdj3hUKN
9v6HZxVuqxwl/ciZ3mQxYclDdtnNB/fBxixA7FY9dkjEggRcDmaZ+o3NVATFj+BD
+CJc3MMlTS20UTrIzH+EgUK9vN605dv/sYl9vjjLsyz/86vuCsEcB020n6F9+mpw
51LHBdO8mJzZUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:09 2026 by rpki-client