Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: FBaEKr0ZSDqfDglUVkv2pLiZG4oLuU693DqN1naSmUo=
Subject key identifier: F7:05:D6:9F:20:93:57:00:92:6A:B5:D0:76:6E:FF:72:E0:E7:ED:EA
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019D281716A7A398E6DB8CEBFED3665F5125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 02F4
Signing time: Thu 26 Mar 2026 03:01:34 +0000
Manifest this update: Thu 26 Mar 2026 03:01:34 +0000
Manifest next update: Fri 27 Mar 2026 03:01:34 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: 88AQVWLSZhK7ymIgyjv02cUCWQ/ISBC4fqyKls9Mg5o=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:16:a7:a3:98:e6:db:8c:eb:fe:d3:66:5f:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Mar 26 03:01:34 2026 GMT
Not After : Mar 27 03:01:34 2026 GMT
Subject: CN=f705d69f20935700926ab5d0766eff72e0e7edea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:41:a0:b5:bd:4d:26:a6:fc:28:93:6c:84:
98:7c:35:fd:03:91:bd:af:26:ea:ac:96:fc:c0:66:
da:ca:88:90:a3:58:a0:10:a2:5b:11:64:c4:96:83:
80:96:6d:35:6c:4c:5d:29:21:cf:0a:44:16:8b:4b:
82:e3:c1:b3:70:d3:94:e8:42:a8:2f:8d:c3:33:a5:
0b:a0:78:ec:8a:a6:8f:27:ee:7e:30:fa:be:04:64:
31:9e:f6:03:87:29:2f:46:3b:76:34:c8:90:fa:db:
ac:61:e8:5d:e6:ff:23:f5:67:83:34:d6:ef:de:85:
ba:63:3a:03:2a:a1:ab:a6:2b:1e:7a:bb:20:09:c9:
ac:46:d1:a6:3c:c5:a8:a0:41:13:c1:45:41:88:22:
3c:77:d0:f5:1b:97:e3:4c:f1:cd:15:b0:02:27:81:
45:ab:fa:46:c9:8b:84:c8:17:f7:c9:e9:16:74:9e:
98:ad:c1:42:f0:bc:33:69:df:84:45:69:ab:76:f3:
f3:75:f9:97:c7:33:c7:5e:76:38:28:15:76:a1:ea:
21:0d:74:42:65:87:e1:bf:68:db:1e:da:a3:40:ce:
bb:4a:62:16:12:a8:ea:56:ba:fc:e4:24:e1:c2:13:
38:e6:1b:e5:6c:60:52:56:88:a0:eb:91:64:8b:eb:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:D6:9F:20:93:57:00:92:6A:B5:D0:76:6E:FF:72:E0:E7:ED:EA
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:fa:7a:0c:59:70:9a:c6:93:92:23:81:2c:52:1c:c6:5a:
98:5f:cd:73:d4:c4:77:92:07:86:e5:fc:26:1a:eb:34:2b:c8:
75:07:b6:fd:c7:07:74:81:65:e8:b9:76:2f:e6:1f:8e:5a:c4:
e3:0e:df:7d:ae:b6:9b:26:89:6f:a2:25:32:89:71:24:1b:ae:
d6:b1:3d:03:32:26:9b:5a:3f:01:ae:89:ed:16:7d:20:75:97:
cb:35:d2:00:8e:04:67:19:87:30:f7:a3:eb:91:de:f4:fc:91:
1d:82:e7:8e:a9:3d:aa:cd:51:f1:2f:fb:38:2c:6e:7e:43:ce:
00:b5:dc:8b:99:35:41:37:94:41:82:8f:13:3d:9e:37:92:04:
a5:6b:18:fb:91:b6:68:53:4b:5e:a4:ba:bc:12:3a:a3:a3:19:
43:45:28:1d:64:78:ce:47:9b:b3:da:f8:cc:f3:a5:fd:a8:c3:
2b:e9:d8:69:08:57:03:aa:87:a4:5e:2d:b0:2f:f7:8d:66:4f:
47:f1:dd:1c:13:95:ef:e0:3a:8d:69:38:59:6c:fc:05:ac:4e:
57:62:36:83:ed:f1:84:a5:23:44:c2:68:03:84:b1:e4:2f:b2:
13:6e:16:5e:2a:2d:8a:fe:3c:fd:fa:36:cd:5a:61:96:54:ee:
1a:24:66:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFxano5jm24zr/tNmX1ElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl
ZTc4MTgwHhcNMjYwMzI2MDMwMTM0WhcNMjYwMzI3MDMwMTM0WjAzMTEwLwYDVQQD
EyhmNzA1ZDY5ZjIwOTM1NzAwOTI2YWI1ZDA3NjZlZmY3MmUwZTdlZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGdBoLW9TSam/CiTbISYfDX9A5G9
rybqrJb8wGbayoiQo1igEKJbEWTEloOAlm01bExdKSHPCkQWi0uC48GzcNOU6EKo
L43DM6ULoHjsiqaPJ+5+MPq+BGQxnvYDhykvRjt2NMiQ+tusYehd5v8j9WeDNNbv
3oW6YzoDKqGrpiseersgCcmsRtGmPMWooEETwUVBiCI8d9D1G5fjTPHNFbACJ4FF
q/pGyYuEyBf3yekWdJ6YrcFC8Lwzad+ERWmrdvPzdfmXxzPHXnY4KBV2oeohDXRC
ZYfhv2jbHtqjQM67SmIWEqjqVrr85CThwhM45hvlbGBSVoig65Fki+vddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcF1p8gk1cAkmq10HZu/3Lg5+3qMB8GA1UdIwQY
MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct
NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl
LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaT6egxZ
cJrGk5IjgSxSHMZamF/Nc9TEd5IHhuX8JhrrNCvIdQe2/ccHdIFl6Ll2L+YfjlrE
4w7ffa62myaJb6IlMolxJBuu1rE9AzImm1o/Aa6J7RZ9IHWXyzXSAI4EZxmHMPej
65He9PyRHYLnjqk9qs1R8S/7OCxufkPOALXci5k1QTeUQYKPEz2eN5IEpWsY+5G2
aFNLXqS6vBI6o6MZQ0UoHWR4zkebs9r4zPOl/ajDK+nYaQhXA6qHpF4tsC/3jWZP
R/HdHBOV7+A6jWk4WWz8BaxOV2I2g+3xhKUjRMJoA4Sx5C+yE24WXiotiv48/fo2
zVphllTuGiRmAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:24 2026 by rpki-client