Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: SVeekmt0hyewiM4hOUYC21Pb5/4R3ZPYnBY7vjMiQLs=
Subject key identifier: 89:B3:85:48:47:8E:0C:1F:76:26:BB:1E:A1:6F:DA:57:C5:2B:43:3B
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019D265FCEF69F3D99EC9C6528BFFCFFE6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0932
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: m95weER0WiaOFrCBGMhTDshuEGKe1nTrpNMW25kNg6I=)
2: f9tprzn73NPBvx0H90-TwMxhyIM.roa (hash: dYV4lQF2uey+ETFDptmt+QtnWsUqIvYU1FjU0+ewYLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ce:f6:9f:3d:99:ec:9c:65:28:bf:fc:ff:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=89b38548478e0c1f7626bb1ea16fda57c52b433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:f6:55:70:d0:c6:aa:d8:36:7c:2a:d5:7f:
b1:a7:60:7e:c3:c5:47:60:cf:7f:37:79:fe:13:b0:
ca:a0:aa:e7:dc:88:7c:7f:98:49:49:c6:77:fd:14:
89:a2:92:71:01:15:62:d6:78:29:9e:d5:32:23:3f:
77:4d:7b:ef:61:eb:e7:f8:7c:32:f3:e7:21:79:cc:
b3:f4:27:4c:77:dd:72:0e:ad:07:14:39:79:a4:3c:
3b:10:4e:40:86:7e:d3:00:d6:a4:05:38:cf:a5:29:
38:ea:24:e8:ae:44:21:fd:37:b0:e6:0f:4c:7b:d6:
8e:85:3c:14:e3:24:2b:fe:f3:71:a9:83:d0:03:45:
47:c4:f3:4e:bd:f2:1a:f8:34:d9:cd:20:1b:7d:e4:
a3:d8:15:f1:6c:26:d0:e3:a1:e5:d7:3b:ed:48:97:
e8:dd:25:dd:5d:37:8b:a3:a0:24:2f:70:52:55:f7:
20:40:31:b7:20:08:91:07:b8:65:06:6e:5b:3b:50:
c5:cc:1b:4f:da:bb:4f:9f:1b:25:be:d1:53:63:90:
3f:64:b9:60:89:6b:b1:85:02:f8:04:f9:eb:cb:7a:
0e:2a:f5:2b:31:f2:51:f5:79:51:2c:41:e4:92:40:
4b:fa:f6:07:9b:b2:3d:17:c0:4c:e2:8c:12:21:ce:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:85:48:47:8E:0C:1F:76:26:BB:1E:A1:6F:DA:57:C5:2B:43:3B
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:ac:0a:f7:bd:5e:88:c5:00:c8:90:cb:24:64:0c:1e:74:
e7:c5:1a:ef:d4:de:1d:75:68:26:56:cf:b5:e5:33:2b:5a:dd:
7d:54:6b:8b:7e:93:64:ff:f9:4e:be:a5:bf:97:0a:cd:36:5f:
e8:ec:11:35:af:18:c0:07:b9:d8:c8:3e:a8:33:c2:fd:ea:ae:
22:80:01:bf:85:ca:25:c2:e9:ee:e1:06:7c:5a:5f:65:53:1d:
38:9c:96:dd:16:f3:db:cc:7f:e7:aa:a8:dd:ec:ab:92:20:7f:
a2:a5:a3:58:ba:6b:99:3c:06:d1:b5:8e:6a:f7:f9:50:82:4e:
29:87:f6:ff:50:bd:10:28:39:89:79:35:e8:d2:a8:a2:27:69:
50:0e:6d:2e:28:ff:11:63:69:fa:af:19:ae:7b:a6:ae:7c:01:
e3:55:bc:24:77:e4:e8:33:a3:01:3a:47:7d:a1:4d:0b:58:51:
a0:d7:be:09:8e:87:9c:c7:6e:6e:1a:ac:19:ee:da:a6:f7:0c:
42:9f:05:e2:a4:23:7d:c0:70:45:89:ca:7b:e6:39:b3:9e:33:
fa:fa:09:65:41:59:f5:c1:99:92:87:b0:ae:4f:fb:89:f4:17:
61:bc:88:ef:f3:5d:96:19:89:c0:ff:7e:f8:66:d7:b6:15:ef:
eb:b3:3f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX872nz2Z7JxlKL/8/+a5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjYwMzI1MTkwMTQ2WhcNMjYwMzI2MTkwMTQ2WjAzMTEwLwYDVQQD
Eyg4OWIzODU0ODQ3OGUwYzFmNzYyNmJiMWVhMTZmZGE1N2M1MmI0MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i/2VXDQxqrYNnwq1X+xp2B+w8VH
YM9/N3n+E7DKoKrn3Ih8f5hJScZ3/RSJopJxARVi1ngpntUyIz93TXvvYevn+Hwy
8+checyz9CdMd91yDq0HFDl5pDw7EE5Ahn7TANakBTjPpSk46iTorkQh/Tew5g9M
e9aOhTwU4yQr/vNxqYPQA0VHxPNOvfIa+DTZzSAbfeSj2BXxbCbQ46Hl1zvtSJfo
3SXdXTeLo6AkL3BSVfcgQDG3IAiRB7hlBm5bO1DFzBtP2rtPnxslvtFTY5A/ZLlg
iWuxhQL4BPnry3oOKvUrMfJR9XlRLEHkkkBL+vYHm7I9F8BM4owSIc7XKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImzhUhHjgwfdia7HqFv2lfFK0M7MB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmysCve9
XojFAMiQyyRkDB5058Ua79TeHXVoJlbPteUzK1rdfVRri36TZP/5Tr6lv5cKzTZf
6OwRNa8YwAe52Mg+qDPC/equIoABv4XKJcLp7uEGfFpfZVMdOJyW3Rbz28x/56qo
3eyrkiB/oqWjWLprmTwG0bWOavf5UIJOKYf2/1C9ECg5iXk16NKooidpUA5tLij/
EWNp+q8ZrnumrnwB41W8JHfk6DOjATpHfaFNC1hRoNe+CY6HnMdubhqsGe7apvcM
Qp8F4qQjfcBwRYnKe+Y5s54z+voJZUFZ9cGZkoewrk/7ifQXYbyI7/NdlhmJwP9+
+GbXthXv67M/CQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:03 2026 by rpki-client