Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: kTskaY7Osj/UslEe3K8BfecyJCEddqN5T/q4jl75EYU=
Subject key identifier: 4C:87:4F:2F:3D:6F:83:01:9A:9A:96:7E:4A:FB:CD:9D:B3:1F:C0:6B
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019D2B84E54A560411126EC96E506B8AD235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 19:00:22 +0000
Manifest this update: Thu 26 Mar 2026 19:00:22 +0000
Manifest next update: Fri 27 Mar 2026 19:00:22 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: jmEyxF0hCC4rAoDSuNmLg5zSRpJv3GQjz8fVtnHvV5c=)
2: maZq56SMgB7nWqqF5eeF3G-X-7A.roa (hash: xVS8tTvs0Q9QEIgJ9B2IqY6QH4qt+wpz/OCltyOVeVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:e5:4a:56:04:11:12:6e:c9:6e:50:6b:8a:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Mar 26 19:00:22 2026 GMT
Not After : Mar 27 19:00:22 2026 GMT
Subject: CN=4c874f2f3d6f83019a9a967e4afbcd9db31fc06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:5e:cc:9b:b6:63:02:51:bc:67:f8:39:53:
99:66:0f:67:d4:6f:6c:08:55:7e:df:81:9c:01:17:
74:ec:de:71:62:e6:a0:85:37:45:23:27:7f:50:05:
0d:33:f3:76:d6:48:2b:19:94:c1:87:b6:53:2a:5b:
2a:77:88:77:cd:fb:3b:21:70:40:ce:28:a1:34:52:
9f:b7:53:ad:ae:75:6d:53:84:7a:24:ae:09:f3:e6:
16:b7:5b:0a:0c:ab:19:7b:2c:ac:31:1e:6e:c4:6b:
b0:b0:e1:aa:a1:f1:ad:c8:fc:e6:41:ff:a9:28:2b:
7f:2d:b8:8f:7c:87:b4:2c:94:6e:f6:00:d1:c7:b1:
58:b4:c5:ab:e4:5f:ff:e5:40:18:77:52:95:67:af:
2d:a4:08:1d:c1:38:89:46:04:4a:28:a0:67:73:57:
e2:20:14:33:ad:2b:d3:71:4b:54:2a:2a:69:79:1c:
a2:3d:07:ec:5f:1d:0d:35:18:30:01:ac:39:47:2b:
bb:2c:98:f4:fe:b6:a8:dd:9b:04:46:45:0e:9f:6a:
2a:05:13:42:07:8c:e1:16:4b:96:78:16:21:eb:1c:
a5:6d:1f:08:46:32:15:61:3a:bb:ee:53:54:0b:a4:
f1:48:53:79:d3:44:ca:df:fa:45:df:86:e4:7d:19:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:87:4F:2F:3D:6F:83:01:9A:9A:96:7E:4A:FB:CD:9D:B3:1F:C0:6B
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:96:e2:42:0c:a2:ae:57:b8:24:3a:0a:b0:67:31:c8:8a:
91:83:d3:11:bc:74:29:be:bf:1c:ea:b6:da:54:f2:a3:7d:93:
5c:a7:5b:a6:cb:93:80:13:41:98:84:ef:93:6d:1f:02:f1:74:
a7:3e:38:cc:01:15:9b:77:5b:b8:01:98:0e:56:05:6f:ca:80:
0f:4a:d9:33:20:ff:45:f0:d5:1d:19:c7:9a:90:19:41:21:3b:
ce:57:61:e7:4e:58:36:e8:bd:a4:97:6f:fb:cb:6c:0f:11:1d:
f7:f6:98:1c:f4:64:ba:77:b6:0d:40:26:9b:10:29:a1:ef:bd:
75:5b:13:0d:6b:ad:50:58:9e:ab:f5:a6:ec:59:9f:0c:5c:3a:
8b:de:37:33:21:09:01:73:ac:de:d5:b8:86:7e:e4:56:b9:41:
23:39:46:f5:df:28:8d:36:f4:3c:dd:95:e5:1d:d3:34:11:0d:
bb:15:8e:17:11:3f:6b:10:93:dd:13:e8:dd:a5:2e:18:27:71:
6a:42:b7:27:41:3e:c5:9a:ae:33:02:b0:bf:be:2c:60:ef:8a:
65:55:27:e6:c9:56:25:26:98:ab:14:4b:19:2b:2e:c4:26:63:
f3:47:d9:c2:7b:a1:e9:95:e4:fa:82:93:2b:22:11:af:22:8d:
04:b2:09:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhOVKVgQREm7JblBritI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw
MDc0MjYwHhcNMjYwMzI2MTkwMDIyWhcNMjYwMzI3MTkwMDIyWjAzMTEwLwYDVQQD
Eyg0Yzg3NGYyZjNkNmY4MzAxOWE5YTk2N2U0YWZiY2Q5ZGIzMWZjMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NJezJu2YwJRvGf4OVOZZg9n1G9s
CFV+34GcARd07N5xYuaghTdFIyd/UAUNM/N21kgrGZTBh7ZTKlsqd4h3zfs7IXBA
ziihNFKft1OtrnVtU4R6JK4J8+YWt1sKDKsZeyysMR5uxGuwsOGqofGtyPzmQf+p
KCt/LbiPfIe0LJRu9gDRx7FYtMWr5F//5UAYd1KVZ68tpAgdwTiJRgRKKKBnc1fi
IBQzrSvTcUtUKippeRyiPQfsXx0NNRgwAaw5Ryu7LJj0/rao3ZsERkUOn2oqBRNC
B4zhFkuWeBYh6xylbR8IRjIVYTq77lNUC6TxSFN500TK3/pF34bkfRm9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyHTy89b4MBmpqWfkr7zZ2zH8BrMB8GA1UdIwQY
MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt
YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1
LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCKW4kIM
oq5XuCQ6CrBnMciKkYPTEbx0Kb6/HOq22lTyo32TXKdbpsuTgBNBmITvk20fAvF0
pz44zAEVm3dbuAGYDlYFb8qAD0rZMyD/RfDVHRnHmpAZQSE7zldh505YNui9pJdv
+8tsDxEd9/aYHPRkune2DUAmmxApoe+9dVsTDWutUFieq/Wm7FmfDFw6i943MyEJ
AXOs3tW4hn7kVrlBIzlG9d8ojTb0PN2V5R3TNBENuxWOFxE/axCT3RPo3aUuGCdx
akK3J0E+xZquMwKwv74sYO+KZVUn5slWJSaYqxRLGSsuxCZj80fZwnuh6ZXk+oKT
KyIRryKNBLIJrA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:30:40 2026 by rpki-client