Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: XFwMOwUFSCmqMc371BO6BImwXOCJpmuRocvqxLgh4OY=
Subject key identifier: 92:98:AA:5F:12:0E:10:0B:45:E5:22:B0:4C:24:01:57:FC:0D:8D:05
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 019D2695BF512B4B2572A65831EDABD6C26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 18A2
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (hash: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU=)
2: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: 6s2Alw1VYbHxfP31EZZkExn5AAIiSgULPL8cZpoMm7E=)
3: 5n_LJIXVhPPzdEHOUXNI628ingY.roa (hash: NQCHGHitMzomWbvAOfmN/9PVUkWlzv9zSoGTskUkpNQ=)
4: uhVewxHevpMHT9Vwqhs2oxQFyCs.roa (hash: wVttK0CYjEZiRPDjwBZLejNRTkNAN3AqB1UHgInSwjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bf:51:2b:4b:25:72:a6:58:31:ed:ab:d6:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=9298aa5f120e100b45e522b04c240157fc0d8d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:63:1e:ef:45:46:f5:2f:18:44:69:11:c9:
59:22:2d:2a:31:74:ca:ec:85:5b:56:29:f7:97:16:
4c:d8:48:b6:59:3f:b2:c6:1e:bb:c2:a0:bf:0c:68:
87:84:f0:15:88:27:20:52:a1:29:9a:09:be:f5:61:
46:87:9e:5c:c3:f0:64:86:fb:68:a1:08:d0:8f:21:
6c:92:f0:b4:a2:ca:ac:6d:be:24:df:73:30:dd:c1:
a7:33:34:03:8b:b3:2d:b4:33:48:de:97:b6:45:4c:
93:94:a4:6e:58:20:8e:06:1d:8f:c4:ce:c4:83:4c:
b2:f4:b9:29:d9:a7:4d:d5:d9:42:cd:5f:c1:61:1b:
d7:e9:23:98:aa:99:22:a7:c9:d4:fd:5f:c0:29:d0:
e3:68:64:22:c3:3a:91:0d:c7:c9:d4:24:81:aa:c3:
de:95:56:cc:03:51:3c:29:26:c2:99:4f:cb:36:fb:
f6:9b:a6:41:8e:27:dd:13:b3:dc:9c:81:c7:2d:b2:
93:5d:e0:33:e1:ae:57:f9:64:54:01:a1:95:51:b0:
a2:8d:30:5a:04:f0:b7:5f:4e:ee:38:49:68:b2:e2:
ae:9e:14:ae:90:a6:c9:f5:27:34:a5:17:25:94:f9:
93:e4:2a:0d:a5:e3:1c:33:b7:35:70:77:74:19:4c:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:98:AA:5F:12:0E:10:0B:45:E5:22:B0:4C:24:01:57:FC:0D:8D:05
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:4f:5e:33:eb:29:23:b0:9c:7c:76:b1:ea:7e:5d:22:34:
29:11:83:9c:fa:ae:01:b9:88:6d:64:0f:d2:84:53:35:9f:35:
f0:7c:f1:21:ba:3b:2d:68:99:47:03:e5:24:1f:6e:c4:1e:1e:
eb:1d:4d:c8:f6:b4:61:43:9b:58:0f:d1:4b:83:84:8b:fe:1d:
d5:d8:15:42:43:6d:b4:d0:8b:64:f5:90:c1:09:2d:eb:5c:2b:
35:b4:64:5c:d7:53:b1:79:55:62:4f:22:3b:5e:9a:20:ef:15:
84:16:06:78:9d:42:bb:53:5e:b1:bb:c4:6b:87:99:4d:e3:73:
0c:48:03:5e:5e:1b:3c:97:12:b0:2f:b4:a8:69:17:a7:90:76:
9f:91:02:62:ae:a5:49:83:c2:59:5c:ad:6e:f3:a5:73:d3:a8:
9f:65:f2:5b:76:b1:15:a0:4a:15:66:89:34:00:19:5b:d0:ad:
81:42:6a:fd:3a:f5:ef:cc:13:bc:11:35:70:89:96:4b:52:01:
3d:8d:51:a6:c4:23:45:c4:5e:e4:21:3e:04:13:a7:3f:6f:20:
b6:fc:6f:81:ab:e4:45:4f:fe:32:c9:df:b7:40:e0:0a:25:e9:
d5:fa:b2:fa:0e:e2:a0:db:4e:dc:19:cc:fd:f9:9d:6d:9d:ef:
24:5a:6c:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlb9RK0slcqZYMe2r1sJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk
MzRlNTEwHhcNMjYwMzI1MjAwMDQxWhcNMjYwMzI2MjAwMDQxWjAzMTEwLwYDVQQD
Eyg5Mjk4YWE1ZjEyMGUxMDBiNDVlNTIyYjA0YzI0MDE1N2ZjMGQ4ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4djHu9FRvUvGERpEclZIi0qMXTK
7IVbVin3lxZM2Ei2WT+yxh67wqC/DGiHhPAViCcgUqEpmgm+9WFGh55cw/Bkhvto
oQjQjyFskvC0osqsbb4k33Mw3cGnMzQDi7MttDNI3pe2RUyTlKRuWCCOBh2PxM7E
g0yy9Lkp2adN1dlCzV/BYRvX6SOYqpkip8nU/V/AKdDjaGQiwzqRDcfJ1CSBqsPe
lVbMA1E8KSbCmU/LNvv2m6ZBjifdE7PcnIHHLbKTXeAz4a5X+WRUAaGVUbCijTBa
BPC3X07uOElosuKunhSukKbJ9Sc0pRcllPmT5CoNpeMcM7c1cHd0GUyMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKYql8SDhALReUisEwkAVf8DY0FMB8GA1UdIwQY
MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt
NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5
LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABhPXjPr
KSOwnHx2sep+XSI0KRGDnPquAbmIbWQP0oRTNZ818HzxIbo7LWiZRwPlJB9uxB4e
6x1NyPa0YUObWA/RS4OEi/4d1dgVQkNttNCLZPWQwQkt61wrNbRkXNdTsXlVYk8i
O16aIO8VhBYGeJ1Cu1NesbvEa4eZTeNzDEgDXl4bPJcSsC+0qGkXp5B2n5ECYq6l
SYPCWVytbvOlc9Oon2XyW3axFaBKFWaJNAAZW9CtgUJq/Tr178wTvBE1cImWS1IB
PY1RpsQjRcRe5CE+BBOnP28gtvxvgavkRU/+Msnft0DgCiXp1fqy+g7ioNtO3BnM
/fmdbZ3vJFps+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:33 2026 by rpki-client