Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: 6T8I+xdcggRDbkZRMRW08fz37FRGXYUnqA/9k8EHAtA=
Subject key identifier: F9:52:E5:2B:D0:63:FE:F4:2D:A1:16:1C:14:10:44:30:7E:1D:85:28
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019D273B206C84697A32926A1ECCAB40B46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1159
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: 3deygganuZpNHbW1qOjw1XOJhvfOG+NweMK0+3YsZEc=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:20:6c:84:69:7a:32:92:6a:1e:cc:ab:40:b4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=f952e52bd063fef42da1161c141044307e1d8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:f0:52:67:ab:84:6c:9b:8f:5b:7c:0e:37:
25:5d:f7:cc:0b:5f:0e:55:5b:7f:fb:7f:4e:4d:7a:
86:53:7f:45:af:b6:d9:e5:d9:b1:71:23:17:6c:41:
a2:44:7c:05:84:b9:81:c8:18:30:0c:d4:3d:ef:e9:
1a:ad:10:00:8c:66:d0:2c:79:80:95:3d:b5:a3:71:
60:9f:c6:b0:7b:72:f0:3d:26:57:3e:f5:90:32:05:
2f:6b:5f:69:fb:79:43:1a:89:fa:c9:dc:f8:06:2b:
2e:70:1c:44:db:16:27:b3:68:93:a6:ec:82:dc:8c:
8e:3a:d3:83:b3:21:d8:12:e4:5e:2e:b6:52:31:7e:
13:ea:ae:c6:95:04:f4:14:0a:88:7a:ac:81:32:c0:
2f:df:16:f6:5a:44:24:6b:81:e9:8d:65:82:a7:f9:
e9:56:79:6d:2e:12:fe:d9:ca:1e:76:04:91:79:b2:
ec:70:43:22:72:bb:1a:a6:a8:35:ff:a4:b9:36:d5:
d6:ed:61:f3:47:e8:2d:94:ec:44:b7:16:05:27:5f:
87:46:c1:8c:c2:12:72:a2:01:06:f9:a0:0f:4f:b8:
04:bb:95:49:bb:60:ee:94:44:ac:3c:aa:c3:7f:e1:
da:51:e5:7e:49:1e:19:0e:17:35:05:c6:51:7b:15:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:E5:2B:D0:63:FE:F4:2D:A1:16:1C:14:10:44:30:7E:1D:85:28
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:65:4f:67:7c:ad:ee:05:7c:bf:e4:8c:88:e9:4a:07:a5:94:
29:58:3b:f4:04:81:69:02:40:63:0e:ea:45:7b:80:40:1e:2b:
aa:10:d0:36:73:84:8d:e7:ba:f2:42:17:73:7a:4f:c5:cb:4d:
62:3e:14:5a:a4:02:9c:67:c4:b8:d8:d0:8c:e6:2f:b1:2c:6f:
5a:97:1b:18:69:91:5b:c5:e4:9d:05:82:17:73:ac:43:31:00:
3b:81:79:3f:37:31:82:af:ce:0b:d4:22:8d:35:be:87:1a:d1:
b9:89:17:4f:a3:cc:9a:e6:01:1c:77:12:be:c3:01:31:ad:b8:
bd:5f:16:f4:6a:50:d6:73:70:1f:4e:c1:24:92:41:cf:29:fa:
01:58:f0:bb:e9:b6:bb:5f:b9:60:c3:01:13:4b:3c:a2:5e:00:
18:4a:84:5a:fe:ac:71:36:0d:b6:88:c6:f8:6c:f8:0f:ac:51:
73:96:c0:8f:aa:27:93:6d:79:79:63:8f:eb:05:a7:8e:73:b1:
7a:b8:13:38:7d:2d:44:c8:4a:c1:21:1c:98:85:46:1d:03:25:
53:a3:66:5a:31:88:5a:2f:1e:c2:9e:9a:6a:38:c1:31:9f:54:
a2:dd:bb:58:82:3f:f9:dd:af:3c:4d:5f:aa:a6:d7:b3:1c:8c:
ef:c6:a0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOyBshGl6MpJqHsyrQLRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4
NzA3NmUwHhcNMjYwMzI1MjMwMTE5WhcNMjYwMzI2MjMwMTE5WjAzMTEwLwYDVQQD
EyhmOTUyZTUyYmQwNjNmZWY0MmRhMTE2MWMxNDEwNDQzMDdlMWQ4NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+nwUmerhGybj1t8DjclXffMC18O
VVt/+39OTXqGU39Fr7bZ5dmxcSMXbEGiRHwFhLmByBgwDNQ97+karRAAjGbQLHmA
lT21o3Fgn8awe3LwPSZXPvWQMgUva19p+3lDGon6ydz4BisucBxE2xYns2iTpuyC
3IyOOtODsyHYEuReLrZSMX4T6q7GlQT0FAqIeqyBMsAv3xb2WkQka4HpjWWCp/np
VnltLhL+2coedgSRebLscEMicrsapqg1/6S5NtXW7WHzR+gtlOxEtxYFJ1+HRsGM
whJyogEG+aAPT7gEu5VJu2DulESsPKrDf+HaUeV+SR4ZDhc1BcZRexX/FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlS5SvQY/70LaEWHBQQRDB+HYUoMB8GA1UdIwQY
MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt
MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3
LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGVPZ3yt
7gV8v+SMiOlKB6WUKVg79ASBaQJAYw7qRXuAQB4rqhDQNnOEjee68kIXc3pPxctN
Yj4UWqQCnGfEuNjQjOYvsSxvWpcbGGmRW8XknQWCF3OsQzEAO4F5Pzcxgq/OC9Qi
jTW+hxrRuYkXT6PMmuYBHHcSvsMBMa24vV8W9GpQ1nNwH07BJJJBzyn6AVjwu+m2
u1+5YMMBE0s8ol4AGEqEWv6scTYNtojG+Gz4D6xRc5bAj6onk215eWOP6wWnjnOx
ergTOH0tRMhKwSEcmIVGHQMlU6NmWjGIWi8ewp6aajjBMZ9Uot27WII/+d2vPE1f
qqbXsxyM78agxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:08 2026 by rpki-client