Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: 4ZTjwEHRQLhvjxcaXv0dVaGeIT+tv+9jx1I6DlGhbuU=
Subject key identifier: EA:1F:35:31:C9:69:8F:BD:E6:DF:AB:9F:C3:88:38:40:12:F9:04:8E
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019D2A72AF21365D6EC752F2B435DC7AA829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 17E2
Signing time: Thu 26 Mar 2026 14:00:52 +0000
Manifest this update: Thu 26 Mar 2026 14:00:52 +0000
Manifest next update: Fri 27 Mar 2026 14:00:52 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: GoE6XA1MOVOYNouDAo/3YtU0/6bvPTjfYcRRpqb8Rd4=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:af:21:36:5d:6e:c7:52:f2:b4:35:dc:7a:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Mar 26 14:00:52 2026 GMT
Not After : Mar 27 14:00:52 2026 GMT
Subject: CN=ea1f3531c9698fbde6dfab9fc388384012f9048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:92:da:bf:83:21:db:81:b8:84:fc:21:4c:
19:38:84:63:41:c1:de:a8:64:b1:7a:76:ba:0c:86:
49:6c:d9:7d:03:bf:40:df:12:a4:de:2c:18:3c:01:
41:a4:8b:c2:11:35:6a:3e:dc:73:37:a9:6e:20:b7:
6a:21:55:df:c9:c8:a0:1b:64:fb:fa:ca:98:5e:a0:
79:a0:0c:60:87:77:00:4b:c3:9c:d9:93:e2:6c:50:
de:58:f8:ef:80:05:ce:52:4c:83:bd:5b:0d:91:97:
7c:43:f5:02:c7:a7:b8:a7:72:ed:05:0b:7c:42:c2:
9f:7c:70:bb:25:7d:dd:08:86:8c:14:dd:55:36:85:
85:41:4c:4e:89:ad:53:02:b3:08:ad:59:fe:44:c1:
63:a5:94:c3:f3:47:10:38:3b:05:b6:dd:58:76:e3:
03:63:18:3e:f3:f9:bf:12:55:50:19:60:b7:64:b6:
8a:98:b6:cb:0a:e5:12:2c:ab:c7:b8:52:a2:56:29:
97:32:14:7f:62:d4:a4:b1:2a:89:a5:bf:d5:b4:e6:
56:1b:83:50:50:fe:e9:7e:39:d8:a4:1a:57:8a:f7:
45:5f:49:e2:68:ce:03:58:89:e1:f2:12:92:47:f8:
92:a6:20:70:78:db:11:4e:be:dd:a4:52:6b:4b:0f:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:35:31:C9:69:8F:BD:E6:DF:AB:9F:C3:88:38:40:12:F9:04:8E
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4b:79:08:bd:ad:11:57:a4:99:63:35:98:b6:59:6a:b4:40:
b4:40:f5:df:c2:a2:7e:67:ad:0c:2d:ac:84:78:04:4c:a7:ba:
63:76:95:36:04:93:61:d5:35:85:64:cb:8c:9b:e8:49:0b:8a:
24:4f:55:92:c7:66:fd:4b:1b:9e:ce:ee:2f:7a:d8:4c:07:5a:
80:e7:89:dd:f6:da:b0:d6:bc:19:c2:ab:4d:3e:0d:40:c6:cf:
e5:f3:cf:76:9b:a4:dc:33:10:25:71:05:d7:66:ea:01:e7:83:
58:47:99:21:35:c9:69:7f:2d:4e:58:1a:c7:03:69:0c:15:0a:
53:31:25:32:a9:a6:94:21:ac:06:16:6b:ad:34:b0:19:fe:53:
b5:36:36:8f:cd:92:3f:ce:cf:a0:45:f9:0b:05:b3:ac:60:67:
0d:43:df:76:17:42:c3:2e:a2:d4:09:de:7f:f1:4d:5b:8c:a0:
20:bd:9d:06:35:f9:86:45:4c:86:7c:24:83:1b:32:c6:4a:c0:
40:a1:f4:f6:6a:c2:e1:44:57:bc:ab:9e:6e:5b:05:16:f3:30:
b9:5f:90:be:18:37:cd:5f:61:dd:5b:4c:7e:eb:db:4b:66:1e:
46:56:96:33:58:7c:06:07:ed:de:db:98:06:4e:e7:41:f5:df:
85:0b:3e:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcq8hNl1ux1LytDXceqgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5
MzAyZmQwHhcNMjYwMzI2MTQwMDUyWhcNMjYwMzI3MTQwMDUyWjAzMTEwLwYDVQQD
EyhlYTFmMzUzMWM5Njk4ZmJkZTZkZmFiOWZjMzg4Mzg0MDEyZjkwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cOS2r+DIduBuIT8IUwZOIRjQcHe
qGSxena6DIZJbNl9A79A3xKk3iwYPAFBpIvCETVqPtxzN6luILdqIVXfycigG2T7
+sqYXqB5oAxgh3cAS8Oc2ZPibFDeWPjvgAXOUkyDvVsNkZd8Q/UCx6e4p3LtBQt8
QsKffHC7JX3dCIaMFN1VNoWFQUxOia1TArMIrVn+RMFjpZTD80cQODsFtt1YduMD
Yxg+8/m/ElVQGWC3ZLaKmLbLCuUSLKvHuFKiVimXMhR/YtSksSqJpb/VtOZWG4NQ
UP7pfjnYpBpXivdFX0niaM4DWInh8hKSR/iSpiBweNsRTr7dpFJrSw+bpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOofNTHJaY+95t+rn8OIOEAS+QSOMB8GA1UdIwQY
MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt
Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5
LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkt5CL2t
EVekmWM1mLZZarRAtED138KifmetDC2shHgETKe6Y3aVNgSTYdU1hWTLjJvoSQuK
JE9Vksdm/Usbns7uL3rYTAdagOeJ3fbasNa8GcKrTT4NQMbP5fPPdpuk3DMQJXEF
12bqAeeDWEeZITXJaX8tTlgaxwNpDBUKUzElMqmmlCGsBhZrrTSwGf5TtTY2j82S
P87PoEX5CwWzrGBnDUPfdhdCwy6i1Anef/FNW4ygIL2dBjX5hkVMhnwkgxsyxkrA
QKH09mrC4URXvKueblsFFvMwuV+Qvhg3zV9h3VtMfuvbS2YeRlaWM1h8Bgft3tuY
Bk7nQfXfhQs+Hw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:16 2026 by rpki-client