Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: hgj/YkaI/syw8131/lBj9ZqdGFH8Uk6ZP/U5hGQGNS4=
Subject key identifier: 6E:24:79:92:C5:71:71:E5:BC:65:F6:C5:83:A0:54:97:64:C9:7F:49
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 019D25F1813E7B2727DC4B54D1CBAF3B9850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 08AD
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: titWEEkY0j+wxQxW9VJm3ih05fsdaKm+/qxXBqTEqQY=)
2: i9YgAIBuXXbxHaaTv_p0J9D3QoM.asa (hash: hxO3W8qfD9gxf5WrJwp9I6YibE84muBruTbYMSu561o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:81:3e:7b:27:27:dc:4b:54:d1:cb:af:3b:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=6e247992c57171e5bc65f6c583a0549764c97f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:42:d6:da:b0:18:21:20:af:21:a3:fe:d8:
46:93:c9:1b:f3:df:c2:31:d2:ee:4e:4b:41:df:9f:
6f:49:81:22:c9:9a:6a:62:f4:ad:b4:f2:e5:13:d2:
a1:42:ef:10:f4:70:d1:3e:1d:c4:07:f5:ec:12:d0:
36:27:c5:b2:3e:e8:98:95:23:bb:53:97:e2:83:34:
ad:0a:81:69:a4:c6:17:14:dc:b0:be:ac:99:07:79:
7a:7b:05:c6:3c:ef:f1:7a:a0:0c:7e:90:a3:4f:38:
47:85:8c:6c:95:bf:38:46:84:e1:50:5e:b2:13:6a:
67:4b:cb:17:b2:b5:81:9c:dc:53:67:7c:61:ed:25:
eb:b2:41:41:ea:1b:f1:9c:aa:1f:66:8c:53:b0:45:
14:66:13:b3:a2:47:c7:ab:83:d3:26:4e:57:1c:31:
d9:30:ea:c7:e9:f7:47:d4:3e:39:ce:e2:11:d7:80:
1c:49:8e:e8:21:ea:60:38:e5:7d:d7:b4:f7:42:7c:
83:44:fb:39:db:66:1b:38:40:10:48:ee:03:a4:16:
cc:6e:ff:37:2c:6f:ee:ce:43:61:46:e7:f9:67:b3:
d7:b4:a6:40:ea:97:8f:62:fd:0e:1a:6b:7d:d9:a4:
3f:a7:36:4a:17:02:42:37:3f:82:34:8d:d5:67:f0:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:79:92:C5:71:71:E5:BC:65:F6:C5:83:A0:54:97:64:C9:7F:49
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:a4:77:dc:24:68:dd:ec:e4:f5:19:fa:51:a6:91:e2:de:
90:37:b7:be:f9:f1:88:99:d2:27:d2:e9:df:9e:4a:d2:5a:26:
65:ac:96:8d:3c:0b:3f:9c:23:8a:36:7f:e1:0d:75:44:b0:29:
12:2c:67:d5:bf:58:4b:ef:8b:ed:8b:e3:13:1e:25:ea:a5:30:
97:c0:fa:bc:f9:38:fd:6b:9c:96:25:1d:ed:ec:46:c4:75:43:
8e:fe:bd:25:24:78:a6:ba:9e:e7:54:15:39:f8:63:60:9c:5d:
d7:00:11:99:42:35:ce:8d:97:61:07:dd:46:a6:58:8a:a4:c2:
bf:25:12:33:47:d9:6e:d0:97:a9:cf:5d:3d:b5:18:ea:b6:53:
2a:8a:44:75:51:76:a7:53:02:f9:b6:76:4d:fb:0d:e1:71:38:
6c:8b:dc:8b:52:4f:e4:32:b9:91:c5:d5:64:71:33:90:37:2d:
e7:8a:64:01:b9:21:80:f9:aa:37:b9:2d:d8:d3:6c:37:a1:ee:
eb:a4:e3:b4:ca:6a:48:3d:9c:05:d5:c0:4e:31:f9:77:21:d1:
60:18:92:a9:5c:15:73:a2:8a:2e:29:24:fb:c9:d0:29:17:53:
47:1e:c5:42:1f:10:6b:76:ba:90:d1:1e:33:bb:11:9e:66:ac:
85:63:73:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8YE+eycn3EtU0cuvO5hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjYwMzI1MTcwMTE3WhcNMjYwMzI2MTcwMTE3WjAzMTEwLwYDVQQD
Eyg2ZTI0Nzk5MmM1NzE3MWU1YmM2NWY2YzU4M2EwNTQ5NzY0Yzk3ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IdC1tqwGCEgryGj/thGk8kb89/C
MdLuTktB359vSYEiyZpqYvSttPLlE9KhQu8Q9HDRPh3EB/XsEtA2J8WyPuiYlSO7
U5figzStCoFppMYXFNywvqyZB3l6ewXGPO/xeqAMfpCjTzhHhYxslb84RoThUF6y
E2pnS8sXsrWBnNxTZ3xh7SXrskFB6hvxnKofZoxTsEUUZhOzokfHq4PTJk5XHDHZ
MOrH6fdH1D45zuIR14AcSY7oIepgOOV917T3QnyDRPs522YbOEAQSO4DpBbMbv83
LG/uzkNhRuf5Z7PXtKZA6pePYv0OGmt92aQ/pzZKFwJCNz+CNI3VZ/CJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4keZLFcXHlvGX2xYOgVJdkyX9JMB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUmkd9wk
aN3s5PUZ+lGmkeLekDe3vvnxiJnSJ9Lp355K0lomZayWjTwLP5wjijZ/4Q11RLAp
Eixn1b9YS++L7YvjEx4l6qUwl8D6vPk4/WucliUd7exGxHVDjv69JSR4prqe51QV
OfhjYJxd1wARmUI1zo2XYQfdRqZYiqTCvyUSM0fZbtCXqc9dPbUY6rZTKopEdVF2
p1MC+bZ2TfsN4XE4bIvci1JP5DK5kcXVZHEzkDct54pkAbkhgPmqN7kt2NNsN6Hu
66TjtMpqSD2cBdXATjH5dyHRYBiSqVwVc6KKLikk+8nQKRdTRx7FQh8Qa3a6kNEe
M7sRnmashWNzvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:16 2026 by rpki-client