Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: K3ZUgWdMptTYl2qsToXHQLUzQXgNpcAjlB9TJ7tpw5I=
Subject key identifier: 2F:92:AA:6C:53:F8:19:E0:CC:60:4D:83:6B:47:CD:7C:24:E6:2A:A9
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019D28168AE220595D46A7E68C5C1400A90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 013C
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: RspgjucXGSiVFhdBG4xG2Tc30oXldlowl73INo2k/IY=)
2: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8a:e2:20:59:5d:46:a7:e6:8c:5c:14:00:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=2f92aa6c53f819e0cc604d836b47cd7c24e62aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:7a:b6:0e:4d:f1:b8:e2:c5:84:f1:94:69:
73:73:12:af:a2:6b:58:85:96:f7:e0:04:ac:3f:6f:
9b:b8:19:13:ec:31:3f:cc:2f:2c:96:0d:6a:5d:95:
41:ff:4b:7c:8f:75:2a:8c:56:2e:1b:7e:6f:28:68:
3e:62:b8:4f:1b:54:27:9a:ab:54:76:03:a6:15:84:
6a:cf:69:81:65:ff:f1:3d:2c:c1:56:4b:97:45:df:
06:45:9d:03:02:ee:d6:9a:2d:5a:85:ed:cf:2f:19:
e4:2c:ae:36:c0:0c:9c:29:84:65:9a:2d:7e:eb:3d:
ec:62:60:ca:5f:6a:36:a2:82:6a:89:0a:f8:86:c7:
ff:58:4c:e9:8a:0b:c0:a5:30:d8:27:16:13:7e:0f:
81:35:57:c0:2e:fe:f0:08:2c:82:a2:5f:82:98:7b:
f8:d5:1a:d0:06:40:20:e9:5b:a1:34:d5:b5:2b:0e:
87:6a:f7:0d:8d:10:cd:2e:6c:65:dc:d5:df:53:1c:
8f:81:d8:87:01:f7:6f:01:0f:2e:7e:23:96:0e:d8:
b6:5d:b3:3c:18:a3:96:6b:e6:01:04:cd:34:fa:bf:
38:39:33:92:06:49:d1:fc:8b:24:de:fe:39:b5:ca:
9c:84:1b:95:e3:e8:3e:8e:2b:28:73:48:b4:8d:ab:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:AA:6C:53:F8:19:E0:CC:60:4D:83:6B:47:CD:7C:24:E6:2A:A9
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:1c:5e:00:3d:16:c5:5c:44:0b:bc:29:c3:da:25:a0:1d:
c5:12:71:cd:29:62:be:c5:88:b0:4d:87:20:a4:e1:75:ca:5c:
57:3f:c1:3c:76:fd:48:70:ac:26:4d:e3:78:df:00:dd:34:8e:
3a:93:ae:43:21:3e:dc:8b:2b:fa:cf:a3:6f:17:fc:71:90:e9:
f4:7c:ea:a4:62:ef:d8:88:bc:fc:8b:ae:36:7f:e9:bb:46:bd:
46:aa:86:64:9b:d1:ec:5e:9a:00:44:27:81:90:51:e9:52:fd:
b9:c3:8d:82:9b:40:f5:ff:5a:50:98:91:0c:41:78:53:33:de:
b9:5d:54:df:4f:04:2e:a0:10:3f:42:c9:5b:d9:50:87:9d:42:
ac:1b:60:3c:cd:54:b6:ce:61:6a:17:3a:28:b4:30:03:89:c3:
4c:93:10:f7:72:0d:b4:60:00:3e:67:62:6f:20:f6:96:73:a2:
a9:1f:8e:c4:72:70:1b:0e:f4:cd:56:0b:2d:87:cb:a8:ec:8c:
68:a9:b3:2a:fe:4d:31:cf:20:5d:8d:02:c7:a8:eb:fb:d5:3b:
5d:59:11:f0:ca:b6:21:50:9b:6a:3a:f1:70:b5:d9:5b:4a:43:
83:72:f9:ef:e6:33:bf:8b:cc:eb:31:02:d3:8b:c8:e5:86:b1:
af:67:8d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oForiIFldRqfmjFwUAKkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4
ZTNhMWMwHhcNMjYwMzI2MDMwMDU5WhcNMjYwMzI3MDMwMDU5WjAzMTEwLwYDVQQD
EygyZjkyYWE2YzUzZjgxOWUwY2M2MDRkODM2YjQ3Y2Q3YzI0ZTYyYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr16tg5N8bjixYTxlGlzcxKvomtY
hZb34ASsP2+buBkT7DE/zC8slg1qXZVB/0t8j3UqjFYuG35vKGg+YrhPG1QnmqtU
dgOmFYRqz2mBZf/xPSzBVkuXRd8GRZ0DAu7Wmi1ahe3PLxnkLK42wAycKYRlmi1+
6z3sYmDKX2o2ooJqiQr4hsf/WEzpigvApTDYJxYTfg+BNVfALv7wCCyCol+CmHv4
1RrQBkAg6VuhNNW1Kw6HavcNjRDNLmxl3NXfUxyPgdiHAfdvAQ8ufiOWDti2XbM8
GKOWa+YBBM00+r84OTOSBknR/Isk3v45tcqchBuV4+g+jisoc0i0jatsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+SqmxT+BngzGBNg2tHzXwk5iqpMB8GA1UdIwQY
MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt
M2ZmYTM5YjRkYzBiLzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi
LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZQcXgA9
FsVcRAu8KcPaJaAdxRJxzSlivsWIsE2HIKThdcpcVz/BPHb9SHCsJk3jeN8A3TSO
OpOuQyE+3Isr+s+jbxf8cZDp9HzqpGLv2Ii8/IuuNn/pu0a9RqqGZJvR7F6aAEQn
gZBR6VL9ucONgptA9f9aUJiRDEF4UzPeuV1U308ELqAQP0LJW9lQh51CrBtgPM1U
ts5hahc6KLQwA4nDTJMQ93INtGAAPmdibyD2lnOiqR+OxHJwGw70zVYLLYfLqOyM
aKmzKv5NMc8gXY0Cx6jr+9U7XVkR8Mq2IVCbajrxcLXZW0pDg3L57+Yzv4vM6zEC
04vI5Yaxr2eN8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:00 2026 by rpki-client