Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: UqfhmIfnjyzzK8RF7Okmen4Pp7wi0ltB7DSJr1JC8AY=
Subject key identifier: 13:A3:AB:A9:25:16:2E:A7:C8:6B:19:9E:48:7C:B3:0D:5C:40:04:B6
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 019D28167908CC4D6463D46A07AA1D07D35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: 0420
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa (hash: wQE4gq6WepgedvHZAUnDuDNwD8qtyedRwrEsafYQxBY=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: xALAhN23tA76fuCFpq7l49PBazv6q8vMvxpr6u4IVck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:79:08:cc:4d:64:63:d4:6a:07:aa:1d:07:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=13a3aba925162ea7c86b199e487cb30d5c4004b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:22:27:d3:55:ca:ea:99:49:9d:64:67:40:
ec:96:4b:0b:92:09:31:ef:26:b1:42:3a:77:48:4e:
73:56:91:46:2a:c1:ce:58:64:f6:56:7f:ad:16:74:
59:cf:c5:a5:16:20:01:74:89:3f:d1:7a:11:d8:a3:
67:65:9e:ba:91:51:28:d7:c6:48:ae:65:ae:c8:a3:
f9:d1:9e:b2:a8:79:e6:4e:43:e3:f7:a7:23:2d:55:
27:b2:28:0b:fe:76:fe:95:f3:98:da:67:04:7d:7c:
05:a8:cd:1b:e4:e7:d1:3b:65:98:d1:d1:96:96:bd:
05:01:df:37:dc:0d:47:96:b5:fc:43:0f:f3:30:f2:
bf:f1:5f:8e:e9:82:e3:17:c5:6e:d2:e1:7c:23:36:
45:96:2a:1b:99:bf:aa:70:a1:fb:1c:40:e9:de:b4:
8d:d9:84:69:8c:fc:9f:e6:fe:20:56:33:88:5a:c4:
e2:6a:26:dc:a5:9b:c9:b3:e0:35:ce:4b:ac:94:9b:
58:e4:45:78:89:e6:3a:90:83:78:25:8a:14:a4:e8:
91:3e:a1:26:a2:ca:a7:6b:31:36:29:84:e5:41:13:
71:0a:52:10:5b:18:50:67:6c:6b:b3:6d:56:32:24:
18:ad:65:eb:ba:a7:26:17:06:42:30:0b:9d:62:e8:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:AB:A9:25:16:2E:A7:C8:6B:19:9E:48:7C:B3:0D:5C:40:04:B6
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d6:80:61:a5:e1:8c:1f:cf:c6:61:de:d3:d7:dc:21:ca:7d:
53:9f:9e:d0:0f:57:bb:be:22:bf:b5:84:6c:b1:6a:a8:41:ea:
40:f7:87:a9:52:46:38:a2:c9:cf:84:c3:91:5b:74:82:5e:0d:
52:5e:9c:81:2a:9f:33:ec:79:00:67:49:6e:af:d1:4f:92:a6:
56:be:34:62:a3:83:7e:47:26:9b:ad:65:d9:aa:f6:c2:36:ba:
1d:4d:c5:6c:d4:f8:ad:98:71:3b:6a:67:39:4a:3f:27:02:73:
3e:d5:2d:a2:a6:99:1b:3e:52:15:aa:b7:6f:25:40:cc:b7:73:
4a:78:6b:94:57:93:9b:f4:32:c1:a5:fb:ba:b2:16:50:4c:02:
4e:38:4f:f6:8b:a3:84:b5:a1:29:fe:f9:07:bd:13:6d:35:8b:
2c:fd:95:4b:24:d3:5e:70:6d:b8:9a:3d:da:d8:9a:aa:db:12:
2d:e1:2c:0b:94:7c:3e:89:03:1f:3e:e3:ed:67:8b:3c:52:1c:
4d:1a:da:d5:ac:dd:3d:46:c7:01:26:8d:a8:2b:d6:74:42:35:
1e:02:aa:74:ed:0c:d9:1f:81:9b:a1:22:04:df:4a:66:ed:c4:
e1:9c:15:e9:32:e7:0a:cf:e4:c7:9f:df:74:0e:eb:63:87:e7:
fc:51:f9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnkIzE1kY9RqB6odB9NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjI2NDhlOTEzYTM2NDBmMDMxYjYzYTZiZDkyYjBlMjhl
MTM5ZmIwHhcNMjYwMzI2MDMwMDU0WhcNMjYwMzI3MDMwMDU0WjAzMTEwLwYDVQQD
EygxM2EzYWJhOTI1MTYyZWE3Yzg2YjE5OWU0ODdjYjMwZDVjNDAwNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhywiJ9NVyuqZSZ1kZ0DslksLkgkx
7yaxQjp3SE5zVpFGKsHOWGT2Vn+tFnRZz8WlFiABdIk/0XoR2KNnZZ66kVEo18ZI
rmWuyKP50Z6yqHnmTkPj96cjLVUnsigL/nb+lfOY2mcEfXwFqM0b5OfRO2WY0dGW
lr0FAd833A1HlrX8Qw/zMPK/8V+O6YLjF8Vu0uF8IzZFliobmb+qcKH7HEDp3rSN
2YRpjPyf5v4gVjOIWsTiaibcpZvJs+A1zkuslJtY5EV4ieY6kIN4JYoUpOiRPqEm
osqnazE2KYTlQRNxClIQWxhQZ2xrs21WMiQYrWXruqcmFwZCMAudYuifnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOjq6klFi6nyGsZnkh8sw1cQAS2MB8GA1UdIwQY
MBaAFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMt
OThiZDE1NjAyOWMwLzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMtOThiZDE1NjAyOWMw
LzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtaAYaXh
jB/PxmHe09fcIcp9U5+e0A9Xu74iv7WEbLFqqEHqQPeHqVJGOKLJz4TDkVt0gl4N
Ul6cgSqfM+x5AGdJbq/RT5KmVr40YqODfkcmm61l2ar2wja6HU3FbNT4rZhxO2pn
OUo/JwJzPtUtoqaZGz5SFaq3byVAzLdzSnhrlFeTm/QywaX7urIWUEwCTjhP9ouj
hLWhKf75B70TbTWLLP2VSyTTXnBtuJo92tiaqtsSLeEsC5R8PokDHz7j7WeLPFIc
TRra1azdPUbHASaNqCvWdEI1HgKqdO0M2R+Bm6EiBN9KZu3E4ZwV6TLnCs/kx5/f
dA7rY4fn/FH5zg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:23 2026 by rpki-client