Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier: L5S9n6J75pU/wK+VTUcKjSkHJ9OnzmI9hhttA04jJPw=
Subject key identifier: 0A:1D:40:E8:67:B4:24:DA:CE:DB:F0:89:43:5B:C2:69:04:57:D4:EB
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 019D2C60EB96D6BE283B7F7A08982F7BACF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number: 1588
Signing time: Thu 26 Mar 2026 23:00:42 +0000
Manifest this update: Thu 26 Mar 2026 23:00:42 +0000
Manifest next update: Fri 27 Mar 2026 23:00:42 +0000
Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: cCw5vaMyL1TS5Wn3R3LO8g1ttiSK1cQtANOxrwxk04g=)
2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:eb:96:d6:be:28:3b:7f:7a:08:98:2f:7b:ac:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Mar 26 23:00:42 2026 GMT
Not After : Mar 27 23:00:42 2026 GMT
Subject: CN=0a1d40e867b424dacedbf089435bc2690457d4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:fb:14:78:82:8c:a0:40:ec:e0:4b:dd:0e:
d2:f5:95:0c:46:2c:f0:c7:3a:c2:54:2b:76:50:cc:
4b:7a:17:60:b9:19:6c:23:fb:d3:63:8d:6c:ed:d5:
1c:42:f9:a0:1f:54:98:42:bd:b4:fc:17:fb:b7:10:
df:57:29:11:8c:ed:f9:df:53:49:48:f8:9e:77:2b:
83:77:4a:49:f7:d0:46:47:49:15:dd:2a:5f:49:ad:
db:ef:b3:28:76:4c:6f:2f:2e:e4:ce:93:b5:89:33:
9d:a5:c1:a1:16:41:70:1c:fa:c7:51:19:51:1f:aa:
c8:d7:70:ea:ee:15:ea:8b:37:db:f6:b2:91:f8:65:
f1:9d:a8:76:24:d3:69:8e:c4:6e:08:76:07:6c:d5:
2f:5d:86:cc:94:75:b6:41:ba:eb:90:d5:99:ad:6c:
c1:6c:d3:69:45:f5:6c:4f:99:a4:5c:d7:63:20:06:
c8:60:9a:d5:87:4f:57:09:d0:25:d4:ce:be:26:19:
67:29:3d:9c:bd:25:e6:8b:a3:98:31:e2:18:6d:96:
50:9d:81:94:cb:ef:6b:4f:26:c1:8a:ba:6e:3f:99:
0c:5a:41:33:75:cd:98:ec:60:a4:07:d7:f0:85:99:
8f:aa:99:13:65:f6:ac:e4:9b:0d:9c:1d:78:b7:d0:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:40:E8:67:B4:24:DA:CE:DB:F0:89:43:5B:C2:69:04:57:D4:EB
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:f0:27:79:0e:88:74:7a:79:a2:9f:44:96:0e:94:8b:ab:
15:da:e0:c5:76:a2:30:de:e2:ef:75:39:28:fc:e2:7b:1d:39:
16:8d:ac:8b:b4:8e:c8:e4:d1:4a:83:ea:35:1d:72:42:70:88:
ff:e3:c3:49:9f:62:95:cd:a2:c5:bd:12:9a:17:73:95:73:4d:
9e:a8:40:05:43:f4:c1:41:3f:cd:5a:86:60:f7:37:9d:2f:17:
c5:38:f6:e6:8e:78:6e:09:db:88:c6:59:cb:97:29:7f:ad:3e:
96:9f:13:6c:83:cc:b4:89:c1:5e:53:ba:4b:e1:1f:3a:39:6d:
78:e7:0c:bd:bf:d3:a8:17:f1:5c:f0:c0:2e:53:9a:53:54:0e:
59:b2:9b:dd:ad:08:e9:3c:98:53:84:a1:1d:0d:a1:2b:3c:69:
8b:d1:c7:0a:51:87:79:44:4f:9c:a3:3c:72:6a:fc:23:54:cb:
27:40:e7:72:61:d1:8c:7c:59:17:1c:ea:85:80:0e:5a:47:88:
5d:78:4e:b0:c7:2b:01:4d:7f:70:16:26:53:09:0b:86:6c:57:
52:32:20:73:f4:39:82:5d:76:84:ea:88:56:85:07:0f:81:c3:
f2:8d:9d:ef:48:a9:b4:33:10:27:08:bb:07:26:fc:0e:42:f4:
5f:88:1a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYOuW1r4oO396CJgve6z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwMzI2MjMwMDQyWhcNMjYwMzI3MjMwMDQyWjAzMTEwLwYDVQQD
EygwYTFkNDBlODY3YjQyNGRhY2VkYmYwODk0MzViYzI2OTA0NTdkNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yP7FHiCjKBA7OBL3Q7S9ZUMRizw
xzrCVCt2UMxLehdguRlsI/vTY41s7dUcQvmgH1SYQr20/Bf7txDfVykRjO3531NJ
SPiedyuDd0pJ99BGR0kV3SpfSa3b77ModkxvLy7kzpO1iTOdpcGhFkFwHPrHURlR
H6rI13Dq7hXqizfb9rKR+GXxnah2JNNpjsRuCHYHbNUvXYbMlHW2QbrrkNWZrWzB
bNNpRfVsT5mkXNdjIAbIYJrVh09XCdAl1M6+JhlnKT2cvSXmi6OYMeIYbZZQnYGU
y+9rTybBirpuP5kMWkEzdc2Y7GCkB9fwhZmPqpkTZfas5JsNnB14t9APkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAodQOhntCTaztvwiUNbwmkEV9TrMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe23wJ3kO
iHR6eaKfRJYOlIurFdrgxXaiMN7i73U5KPziex05Fo2si7SOyOTRSoPqNR1yQnCI
/+PDSZ9ilc2ixb0SmhdzlXNNnqhABUP0wUE/zVqGYPc3nS8XxTj25o54bgnbiMZZ
y5cpf60+lp8TbIPMtInBXlO6S+EfOjlteOcMvb/TqBfxXPDALlOaU1QOWbKb3a0I
6TyYU4ShHQ2hKzxpi9HHClGHeURPnKM8cmr8I1TLJ0DncmHRjHxZFxzqhYAOWkeI
XXhOsMcrAU1/cBYmUwkLhmxXUjIgc/Q5gl12hOqIVoUHD4HD8o2d70iptDMQJwi7
Byb8DkL0X4gaFQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:14 2026 by rpki-client