Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: NaBb08P6U4ALjvDLb+ldjx3SwFfvytEtgdqNdLqAZEI=
Subject key identifier: 24:86:01:70:9D:EC:91:0F:B5:02:25:8B:83:BF:FE:F8:A1:4F:2F:81
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019E1EA3D032903E07F079C1E50C422065E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:52 +0000
Manifest this update: Wed 13 May 2026 00:01:52 +0000
Manifest next update: Thu 14 May 2026 00:01:52 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: LJrTAFB/wvFCbVaZQJodVe4LZREXxL2r5WszVIAXmEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d0:32:90:3e:07:f0:79:c1:e5:0c:42:20:65:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: May 13 00:01:52 2026 GMT
Not After : May 14 00:01:52 2026 GMT
Subject: CN=248601709dec910fb502258b83bffef8a14f2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:04:5f:8d:32:2d:25:fa:ac:3d:85:90:70:
45:a4:b6:97:72:91:64:9a:69:3a:3a:10:e1:06:ba:
1b:fe:98:b3:43:d8:de:b5:e0:2b:3b:79:01:32:e1:
e4:28:b0:2c:c1:f9:fa:ec:de:4b:7f:db:c0:c1:b8:
21:30:ef:8a:3f:03:5e:b3:63:aa:f3:27:30:f3:4a:
9d:17:4a:2f:1b:fe:14:aa:c9:b0:55:64:1e:01:34:
a8:15:9d:d2:cf:d8:f1:3c:dc:bb:ba:41:0f:c2:86:
bc:ef:09:89:01:f1:27:8d:da:28:2c:56:14:f0:5d:
50:5a:a6:fe:ca:83:e4:da:e8:35:e1:31:f0:39:03:
63:de:b5:e6:fc:48:b5:a5:79:72:f5:4a:cf:64:e4:
83:1a:26:d3:6f:73:81:06:44:48:eb:d9:b1:f7:69:
0a:1b:20:99:37:33:85:b2:87:63:44:2c:c4:e8:c3:
d9:7c:c3:93:69:c2:84:dd:48:90:90:18:0e:e5:86:
2f:a1:c7:24:ed:fd:8a:2d:d6:52:48:0a:1d:71:52:
0b:80:8b:c3:8e:7e:fd:a0:fa:70:d6:a2:b9:33:d7:
53:d7:28:4c:32:10:45:22:f6:51:38:f6:00:f3:ff:
12:2c:45:ca:47:e1:06:a5:b0:45:89:20:8c:91:08:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:01:70:9D:EC:91:0F:B5:02:25:8B:83:BF:FE:F8:A1:4F:2F:81
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:86:00:a1:59:97:41:e0:06:5b:1c:ad:59:76:da:c8:79:
3a:fc:21:e6:b9:ee:4e:38:39:e0:da:63:6c:10:6b:2a:ef:e5:
c3:00:38:25:f8:8c:83:8f:4e:b2:d1:c2:9c:12:b8:0a:d0:bc:
40:4a:36:8a:66:8b:40:8a:11:1e:c4:7e:ed:93:f5:0c:37:63:
92:d2:e9:9a:ca:16:9a:50:a7:36:9a:06:27:e0:92:d3:d4:07:
79:7c:41:6b:e8:68:87:ee:0f:e2:84:d6:b0:57:75:ad:e7:4e:
a4:9e:26:ee:9f:bf:a3:b2:7a:1a:5a:21:ea:75:14:6b:ca:86:
ff:88:dc:9a:67:1b:9c:52:ac:bc:35:c9:ea:40:78:4a:be:b3:
00:a5:98:96:92:46:ac:84:85:f7:f2:fe:05:c8:90:b9:ff:b4:
16:89:8d:8e:cb:36:1a:a2:dd:6a:63:78:f2:5c:94:83:a8:fb:
9d:ab:ae:57:72:23:14:12:46:b2:5a:b7:94:04:10:49:68:31:
c3:c3:01:8f:0b:79:04:90:20:13:91:3e:c0:c3:3d:8e:4d:57:
31:6d:8f:20:cd:cd:9b:7e:3e:e5:78:3c:b8:0b:95:3d:22:cb:
13:e1:c8:a4:5f:f3:57:60:de:17:c6:7c:a2:09:43:97:ad:54:
38:b4:c2:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo9AykD4H8HnB5QxCIGXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjYwNTEzMDAwMTUyWhcNMjYwNTE0MDAwMTUyWjAzMTEwLwYDVQQD
EygyNDg2MDE3MDlkZWM5MTBmYjUwMjI1OGI4M2JmZmVmOGExNGYyZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJUEX40yLSX6rD2FkHBFpLaXcpFk
mmk6OhDhBrob/pizQ9jeteArO3kBMuHkKLAswfn67N5Lf9vAwbghMO+KPwNes2Oq
8ycw80qdF0ovG/4UqsmwVWQeATSoFZ3Sz9jxPNy7ukEPwoa87wmJAfEnjdooLFYU
8F1QWqb+yoPk2ug14THwOQNj3rXm/Ei1pXly9UrPZOSDGibTb3OBBkRI69mx92kK
GyCZNzOFsodjRCzE6MPZfMOTacKE3UiQkBgO5YYvocck7f2KLdZSSAodcVILgIvD
jn79oPpw1qK5M9dT1yhMMhBFIvZROPYA8/8SLEXKR+EGpbBFiSCMkQh0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSGAXCd7JEPtQIli4O//vihTy+BMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSWGAKFZ
l0HgBlscrVl22sh5Ovwh5rnuTjg54NpjbBBrKu/lwwA4JfiMg49OstHCnBK4CtC8
QEo2imaLQIoRHsR+7ZP1DDdjktLpmsoWmlCnNpoGJ+CS09QHeXxBa+hoh+4P4oTW
sFd1redOpJ4m7p+/o7J6Gloh6nUUa8qG/4jcmmcbnFKsvDXJ6kB4Sr6zAKWYlpJG
rISF9/L+BciQuf+0FomNjss2GqLdamN48lyUg6j7nauuV3IjFBJGslq3lAQQSWgx
w8MBjwt5BJAgE5E+wMM9jk1XMW2PIM3Nm34+5Xg8uAuVPSLLE+HIpF/zV2DeF8Z8
oglDl61UOLTCFw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:46:30 2026 by rpki-client