Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: kFwp3odrb3cfh/vBh1+e1Cp7fVaE2SE59Bmc03QgwWk=
Subject key identifier: F6:5C:C5:16:CB:A1:8F:48:F8:CB:0C:73:F9:6C:B2:D6:AC:B3:B0:CE
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 019D27A87880A9172370B288CFFA9B6D2630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 10F2
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: oqgsPnH6WHNnQ9VpxvOA3ohf9BXM5O3r2OJpbwuDoJk=)
2: g5H3jVqYNQpriA9TInAd41VghDM.roa (hash: 3r7gHJ0JlonEqSVqkHhQarvmMlG4HS20KpOoGGPQ51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:78:80:a9:17:23:70:b2:88:cf:fa:9b:6d:26:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=f65cc516cba18f48f8cb0c73f96cb2d6acb3b0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:7b:9f:fa:4c:3d:5b:bc:ae:23:31:c2:28:
f7:7d:98:37:f0:bc:a4:10:48:86:e4:2a:ee:53:b9:
d3:75:d8:1b:c0:34:8f:0b:27:c5:81:38:01:1e:5b:
b3:7a:dc:b5:ac:8b:75:5f:7b:fe:cb:05:f9:8a:0d:
56:f7:99:c7:82:38:70:3b:bf:ed:d3:c6:3f:25:9b:
9d:86:d6:1c:36:ed:19:04:f9:3a:d2:ae:6c:af:16:
a8:a7:96:e4:f0:ee:dd:8b:f9:bb:df:ee:2e:f0:36:
67:0a:4e:8c:b2:36:c2:90:42:76:81:9a:92:19:45:
50:fa:2c:f1:61:97:5c:46:79:b0:4a:0c:0d:a2:56:
7a:fb:a2:d0:fe:e8:34:8b:06:db:a5:c6:e0:83:55:
3b:fb:1f:09:9d:26:8e:90:f0:08:f3:da:a5:cd:d6:
0a:d3:0e:89:65:a4:5e:e2:a2:a8:36:99:06:50:68:
7e:20:bc:39:32:d5:31:fc:8d:7a:46:ff:df:01:75:
c2:ac:ad:4e:25:8b:ba:ec:38:16:a0:58:ee:67:e3:
a2:77:47:02:d1:e9:03:19:45:88:20:4a:86:79:f3:
64:e4:c7:57:8b:6c:e6:28:a6:24:40:0a:42:39:12:
9c:00:23:10:f1:ef:ad:81:f2:92:2e:9c:a6:70:ea:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:C5:16:CB:A1:8F:48:F8:CB:0C:73:F9:6C:B2:D6:AC:B3:B0:CE
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bd:ab:90:b1:84:53:d3:bb:21:75:fb:af:16:dc:24:71:3a:
29:c3:08:67:dd:bc:da:69:e3:8b:f6:e6:89:3f:80:88:64:23:
0d:8d:84:24:1e:83:db:48:ad:a9:d4:60:02:bc:cb:e7:e0:64:
18:fc:1b:37:5e:ef:0a:90:95:c1:84:9b:c6:20:e4:07:4e:3c:
87:6e:c9:4d:83:8e:98:0e:81:60:ac:0d:46:3f:73:1f:dc:e7:
68:09:f1:68:61:96:a6:82:6b:67:ee:e4:32:cd:aa:f4:f1:50:
9f:1e:7b:d2:7e:29:55:27:43:71:55:c7:7d:3b:a8:44:13:ce:
9d:63:4b:43:64:ed:e9:7b:ca:83:d4:62:9c:a4:5e:3f:e5:22:
92:8c:23:bc:71:14:a3:ad:11:d8:a8:bd:f1:cf:a7:88:91:2c:
ed:bf:c7:eb:e2:4e:ef:24:7f:20:15:e8:e6:6c:31:0d:b1:28:
2c:59:23:2d:79:a3:33:fd:b6:28:c2:cf:9e:39:b4:1e:8b:31:
ef:63:25:a3:2e:31:df:72:07:66:07:51:bd:00:45:89:7d:e7:
c4:a4:9f:d5:5a:81:eb:eb:5a:bb:e8:38:10:3d:13:7b:7a:49:
5e:db:48:6c:01:54:a3:e5:a4:5d:dd:90:b9:af:e9:ac:41:23:
cf:b1:b0:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqHiAqRcjcLKIz/qbbSYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYmIxZDAxNjAyZjE1MjExMTMyZWQ0ODE4NWE5OWIzNjIy
NTExN2YwHhcNMjYwMzI2MDEwMDQ1WhcNMjYwMzI3MDEwMDQ1WjAzMTEwLwYDVQQD
EyhmNjVjYzUxNmNiYTE4ZjQ4ZjhjYjBjNzNmOTZjYjJkNmFjYjNiMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59p7n/pMPVu8riMxwij3fZg38Lyk
EEiG5CruU7nTddgbwDSPCyfFgTgBHluzety1rIt1X3v+ywX5ig1W95nHgjhwO7/t
08Y/JZudhtYcNu0ZBPk60q5srxaop5bk8O7di/m73+4u8DZnCk6MsjbCkEJ2gZqS
GUVQ+izxYZdcRnmwSgwNolZ6+6LQ/ug0iwbbpcbgg1U7+x8JnSaOkPAI89qlzdYK
0w6JZaRe4qKoNpkGUGh+ILw5MtUx/I16Rv/fAXXCrK1OJYu67DgWoFjuZ+Oid0cC
0ekDGUWIIEqGefNk5MdXi2zmKKYkQApCORKcACMQ8e+tgfKSLpymcOqOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZcxRbLoY9I+MsMc/lsstass7DOMB8GA1UdIwQY
MBaAFNq7HQFgLxUhETLtSBhambNiJRF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MzMwYmYtYWI2Yy00NDJjLWIzYjUt
NmEzOWQwZWY3MmMwLzEvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85MzMwYmYtYWI2Yy00NDJjLWIzYjUtNmEzOWQwZWY3MmMw
LzEvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk72rkLGE
U9O7IXX7rxbcJHE6KcMIZ9282mnji/bmiT+AiGQjDY2EJB6D20itqdRgArzL5+Bk
GPwbN17vCpCVwYSbxiDkB048h27JTYOOmA6BYKwNRj9zH9znaAnxaGGWpoJrZ+7k
Ms2q9PFQnx570n4pVSdDcVXHfTuoRBPOnWNLQ2Tt6XvKg9RinKReP+UikowjvHEU
o60R2Ki98c+niJEs7b/H6+JO7yR/IBXo5mwxDbEoLFkjLXmjM/22KMLPnjm0Hosx
72Mloy4x33IHZgdRvQBFiX3nxKSf1VqB6+tau+g4ED0Te3pJXttIbAFUo+WkXd2Q
ua/prEEjz7GwSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:34:33 2026 by rpki-client