Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: E3rHfsqIfPgfPY3O3v/v0ek/XkrhXqNhp7j/cvK/YCU=
Subject key identifier: 02:4E:9C:BE:64:61:E8:E3:96:6B:3E:0B:4D:96:D5:C6:69:C3:90:21
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 019D265FCEB204CA35819467261E6F972650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 0944
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 6WscQ8tiDx9m3v4sx_CKg9wEEnE.roa (hash: QpRl5gulsjXB/beShhOtBcm8ekjd5kSr4bAzu9gdErs=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: 1JZnb0gggpgmk1D8SXco3Cul0pPO4pR86ramQL5Y0/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ce:b2:04:ca:35:81:94:67:26:1e:6f:97:26:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=024e9cbe6461e8e3966b3e0b4d96d5c669c39021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:26:71:d6:48:6a:c6:b9:b1:5c:3e:fb:e2:
4a:73:19:b6:18:8a:09:a3:d7:ed:d7:66:0c:98:80:
df:a5:03:2b:76:d5:33:76:61:1f:62:ce:35:c7:a7:
8e:4e:75:bd:85:db:58:9e:43:32:f7:34:51:ae:f0:
63:74:2b:f5:50:f6:89:09:17:0a:e0:e0:25:04:85:
43:04:b3:d3:72:00:0d:2b:6a:2c:31:a2:f1:e1:53:
97:a4:b1:91:92:76:c4:a1:c8:af:69:71:ba:1e:4c:
5d:1c:64:09:25:8b:22:15:f6:6b:60:c7:11:91:84:
14:3f:87:2e:f8:39:d1:0a:55:ce:be:5a:7a:d5:3b:
90:b2:cc:96:96:8a:be:42:62:04:46:ef:10:f6:e6:
89:52:94:0b:22:8e:3a:e3:23:9c:c8:5f:44:96:43:
c5:68:9d:2e:9e:b6:93:1f:44:2a:98:b6:34:55:b3:
0b:4b:50:10:fd:bd:c8:dd:f4:ec:2f:5a:2e:63:8b:
38:d4:7c:55:6c:42:59:3c:7c:86:ff:f7:77:29:b7:
b6:ce:58:6e:cb:ed:0f:27:6e:62:7f:c9:3c:cd:ec:
3f:f3:20:13:ba:d4:ab:1b:c4:64:09:e1:42:a4:1a:
47:46:7e:0f:b4:ac:19:e3:21:79:9e:4c:c9:25:17:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:9C:BE:64:61:E8:E3:96:6B:3E:0B:4D:96:D5:C6:69:C3:90:21
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:69:4d:9e:9c:3c:7d:1f:2a:b0:88:7c:03:fc:44:3c:e4:
ec:7a:33:b5:37:03:4c:4a:93:d9:00:02:6b:3c:58:ee:85:a0:
96:58:21:37:52:90:3f:3a:c9:6e:ec:0a:92:83:c5:ab:32:5b:
05:0b:92:29:db:90:08:f5:37:2e:67:87:36:03:5e:dd:30:b9:
4e:29:e1:8f:83:94:50:6c:ef:83:a3:cc:fd:1e:49:33:7c:f1:
b5:f0:80:28:49:d8:2e:5d:7f:72:6d:7c:28:ba:19:e7:f9:94:
96:2d:b4:81:24:0e:97:e6:70:0c:5c:6d:89:f8:cb:05:0c:16:
bf:5e:22:d5:d2:49:a8:cb:76:b2:f0:b0:df:25:fe:36:47:60:
0f:cd:1f:0a:9c:c2:98:42:dc:78:60:b1:b7:c6:04:eb:94:9f:
83:e8:fb:f0:a0:c6:e0:7b:b6:ec:c0:19:fc:db:f1:1a:90:10:
2d:0f:a8:18:61:10:b0:fa:95:95:cb:7b:95:34:12:a2:de:94:
a0:d4:40:fb:a2:0d:6f:f0:64:98:6a:1a:43:1e:30:0b:21:c0:
7b:63:92:50:67:92:8e:75:7d:82:60:ff:77:0a:c3:07:fb:79:
01:ed:c6:d3:50:c0:97:3f:b8:38:32:9a:35:7d:4b:c4:17:04:
67:51:b3:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX86yBMo1gZRnJh5vlyZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk
MjlmMTYwHhcNMjYwMzI1MTkwMTQ2WhcNMjYwMzI2MTkwMTQ2WjAzMTEwLwYDVQQD
EygwMjRlOWNiZTY0NjFlOGUzOTY2YjNlMGI0ZDk2ZDVjNjY5YzM5MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXwmcdZIasa5sVw+++JKcxm2GIoJ
o9ft12YMmIDfpQMrdtUzdmEfYs41x6eOTnW9hdtYnkMy9zRRrvBjdCv1UPaJCRcK
4OAlBIVDBLPTcgANK2osMaLx4VOXpLGRknbEocivaXG6HkxdHGQJJYsiFfZrYMcR
kYQUP4cu+DnRClXOvlp61TuQssyWloq+QmIERu8Q9uaJUpQLIo464yOcyF9ElkPF
aJ0unraTH0QqmLY0VbMLS1AQ/b3I3fTsL1ouY4s41HxVbEJZPHyG//d3Kbe2zlhu
y+0PJ25if8k8zew/8yATutSrG8RkCeFCpBpHRn4PtKwZ4yF5nkzJJReYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJOnL5kYejjlms+C02W1cZpw5AhMB8GA1UdIwQY
MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt
ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy
LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITJpTZ6c
PH0fKrCIfAP8RDzk7HoztTcDTEqT2QACazxY7oWgllghN1KQPzrJbuwKkoPFqzJb
BQuSKduQCPU3LmeHNgNe3TC5Tinhj4OUUGzvg6PM/R5JM3zxtfCAKEnYLl1/cm18
KLoZ5/mUli20gSQOl+ZwDFxtifjLBQwWv14i1dJJqMt2svCw3yX+NkdgD80fCpzC
mELceGCxt8YE65Sfg+j78KDG4Hu27MAZ/NvxGpAQLQ+oGGEQsPqVlct7lTQSot6U
oNRA+6INb/BkmGoaQx4wCyHAe2OSUGeSjnV9gmD/dwrDB/t5Ae3G01DAlz+4ODKa
NX1LxBcEZ1Gzwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:59 2026 by rpki-client