Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: fnpUwQEHWC1sCgHRxLWcEGgCGQlIHQ2O77wrFH1ws8k=
Subject key identifier: DA:ED:D1:C5:F5:7C:56:0C:D4:7D:E3:A3:9A:B5:4F:E1:D2:69:25:56
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019D29613281F06DCBB3F48944CD3243A8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0AD6
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: NPFs6QK2NXaz68iPfFW3q8GiJ/6DdKq2AdOacyK8GEU=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:32:81:f0:6d:cb:b3:f4:89:44:cd:32:43:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=daedd1c5f57c560cd47de3a39ab54fe1d2692556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:7e:07:88:cd:c3:ce:68:7a:58:d3:4b:54:
9f:1e:5e:f6:57:ea:f4:f4:cc:05:94:80:4f:1d:b7:
f6:0c:19:ab:f6:9e:79:df:e1:25:7a:4b:e6:05:45:
f4:fe:52:bf:63:86:84:b8:1a:49:b8:34:96:94:64:
c8:d0:c4:01:0b:95:d9:7b:24:78:03:90:03:74:4f:
17:1f:3a:d5:07:a3:f4:4f:73:97:79:90:e8:45:30:
c4:11:0a:a8:b9:20:2f:ec:18:c8:e8:05:36:27:2b:
92:40:a2:c4:0c:e5:9f:94:3c:39:8d:2d:34:42:b5:
38:00:b3:b4:f3:73:30:7c:45:ae:6f:b2:36:48:c2:
15:6e:7b:a4:e6:0f:9b:bb:c6:78:6d:9f:40:b5:a8:
5b:c4:cd:52:29:27:96:e5:5c:d9:8c:a8:91:86:c3:
28:7d:a4:f4:24:8c:c5:44:62:94:8f:b5:ab:7e:c7:
7a:66:b8:e3:06:58:f0:0e:28:2c:4f:c8:bd:0c:ec:
b3:a1:27:3c:22:59:9f:74:bd:ca:29:b7:45:e8:8d:
18:f2:81:cb:ba:93:c8:da:6e:b9:95:49:e7:91:89:
85:b6:d4:69:0a:56:51:f9:79:42:cb:e2:4b:8a:66:
72:b5:04:bb:57:2e:e0:b1:d4:db:c8:06:2a:9b:d8:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:D1:C5:F5:7C:56:0C:D4:7D:E3:A3:9A:B5:4F:E1:D2:69:25:56
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:49:a2:12:88:be:7a:dc:73:ec:75:7c:1b:6a:2d:6e:6e:d2:
64:ca:58:2e:88:70:e0:1a:ed:b9:52:9e:70:19:29:5d:e4:1b:
1c:30:ac:c7:90:ad:38:b5:ac:85:80:fd:3d:02:11:08:a0:31:
7e:9d:1d:00:76:0f:2d:1c:bd:6b:ee:96:72:7d:18:54:24:8c:
13:9f:9a:e5:8f:54:33:0f:d8:74:36:c9:a2:5d:12:e6:57:76:
c8:8a:b2:a8:23:71:8b:5e:50:82:a1:94:8c:1a:2f:ae:de:11:
51:3a:ae:b9:84:61:0e:00:9f:96:74:f6:65:f4:48:a8:68:9f:
8c:cc:3a:e2:d2:25:bf:a2:1f:c1:56:7c:06:10:be:b8:1b:bf:
ce:eb:02:59:a1:20:57:4a:50:0f:bb:c9:a6:62:f4:12:a1:7d:
e0:08:82:74:78:1d:ac:e0:fd:56:c8:28:77:2f:48:59:52:e3:
53:05:4c:c4:9c:ca:22:f5:72:bf:d0:b0:66:bf:00:c2:3a:b7:
ee:c1:95:0e:a0:e7:2e:7e:ba:5a:d1:11:ae:e1:7c:a4:e1:f2:
38:7d:06:76:2c:bd:94:20:ba:25:03:e9:81:17:4d:44:6b:56:
8d:48:fb:4b:31:f6:be:c9:12:d4:ea:69:98:ce:89:de:c0:34:
e9:15:06:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYTKB8G3Ls/SJRM0yQ6jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4
MzRhMGIwHhcNMjYwMzI2MDkwMjA4WhcNMjYwMzI3MDkwMjA4WjAzMTEwLwYDVQQD
EyhkYWVkZDFjNWY1N2M1NjBjZDQ3ZGUzYTM5YWI1NGZlMWQyNjkyNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1+B4jNw85oeljTS1SfHl72V+r0
9MwFlIBPHbf2DBmr9p553+ElekvmBUX0/lK/Y4aEuBpJuDSWlGTI0MQBC5XZeyR4
A5ADdE8XHzrVB6P0T3OXeZDoRTDEEQqouSAv7BjI6AU2JyuSQKLEDOWflDw5jS00
QrU4ALO083MwfEWub7I2SMIVbnuk5g+bu8Z4bZ9AtahbxM1SKSeW5VzZjKiRhsMo
faT0JIzFRGKUj7Wrfsd6ZrjjBljwDigsT8i9DOyzoSc8IlmfdL3KKbdF6I0Y8oHL
upPI2m65lUnnkYmFttRpClZR+XlCy+JLimZytQS7Vy7gsdTbyAYqm9i31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrt0cX1fFYM1H3jo5q1T+HSaSVWMB8GA1UdIwQY
MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt
MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3
LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUmiEoi+
etxz7HV8G2otbm7SZMpYLohw4BrtuVKecBkpXeQbHDCsx5CtOLWshYD9PQIRCKAx
fp0dAHYPLRy9a+6Wcn0YVCSME5+a5Y9UMw/YdDbJol0S5ld2yIqyqCNxi15QgqGU
jBovrt4RUTquuYRhDgCflnT2ZfRIqGifjMw64tIlv6IfwVZ8BhC+uBu/zusCWaEg
V0pQD7vJpmL0EqF94AiCdHgdrOD9Vsgody9IWVLjUwVMxJzKIvVyv9CwZr8Awjq3
7sGVDqDnLn66WtERruF8pOHyOH0Gdiy9lCC6JQPpgRdNRGtWjUj7SzH2vskS1Opp
mM6J3sA06RUG9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:33 2026 by rpki-client