Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier: pHJkNCbPdUPW2RFGHo94jvLDxk+dF5HL4eXDr3i+pjY=
Subject key identifier: 1C:A8:3F:D0:04:8F:81:C6:BC:20:DC:EE:91:9B:85:8A:AA:A6:1D:A2
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019D265FC3FEB594F54FF1AA2C61546ADE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number: 02AF
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa (hash: CfjF3SZAdjPqJOrdB0hBuqX8UJ9deq/HcLszHmoUDcg=)
2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: yCjLf1xSOl6DmtK/IsDCeIx2uH323SNWs6FuQKiVQPM=)
3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:fe:b5:94:f5:4f:f1:aa:2c:61:54:6a:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=1ca83fd0048f81c6bc20dcee919b858aaaa61da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:55:b9:36:37:85:3d:21:3e:1e:a1:4c:40:
b0:76:62:8f:9e:0a:52:2b:b5:0d:0e:c9:ce:23:3a:
0f:70:84:af:f2:19:53:3e:b5:07:a5:71:c5:2d:2e:
04:2c:22:4d:07:e7:75:76:ab:02:df:6e:fd:42:66:
2c:28:c1:77:31:bf:41:96:f8:0d:d4:3e:06:76:e1:
59:a2:bf:75:eb:9b:cf:85:bc:22:f5:ec:7a:5f:df:
62:16:36:a9:13:c8:26:56:bb:fe:20:9e:8d:13:c1:
71:96:c1:37:9f:ae:48:e3:42:18:7a:a3:85:59:d5:
7c:33:de:80:58:5d:2d:46:48:1b:1a:76:fc:d9:8f:
73:f7:6e:b9:de:bc:3a:4d:5e:6e:5b:45:9e:26:96:
5a:d0:6f:59:e4:e7:91:f9:d6:77:fd:56:0e:92:7a:
d0:48:f3:ce:61:97:6b:a9:94:76:ea:9f:81:8a:4d:
63:95:41:e9:02:17:ed:d0:15:99:07:a6:77:d5:e9:
79:1d:ee:fd:72:de:61:94:14:ce:4d:b9:86:38:73:
19:d2:f7:d5:41:75:f8:0c:20:0d:ca:f4:1a:29:7a:
f8:fd:65:6d:d5:e9:74:d4:9c:52:21:40:5f:c2:46:
ca:18:a1:30:66:c4:69:76:57:ca:6c:0e:0d:e2:01:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:3F:D0:04:8F:81:C6:BC:20:DC:EE:91:9B:85:8A:AA:A6:1D:A2
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7b:d3:30:d7:13:51:57:b6:63:32:d0:99:a3:27:55:45:17:
c7:f6:b9:b7:1f:31:03:e9:23:81:17:e6:73:8f:b2:51:7f:e3:
a1:d6:76:f2:91:b9:19:09:66:c3:7c:5a:d0:7b:55:28:1b:6c:
1e:51:c2:ba:a5:a8:c4:34:a0:27:16:8b:af:18:56:28:ee:bc:
da:99:f6:50:df:62:d9:22:06:08:e8:d7:4e:ea:78:a6:a3:c7:
cc:ea:6a:46:cf:cb:6d:7d:59:e1:df:f5:a7:30:fe:55:cc:b1:
a0:0d:28:f8:96:52:97:9b:bb:b2:da:df:88:26:52:cf:37:4d:
2d:07:ad:7c:f9:b3:3c:b6:49:cb:7c:de:62:52:db:1c:da:ec:
17:1d:31:70:53:84:ae:3c:21:4f:aa:96:88:ed:93:d6:48:9d:
1f:ac:74:6f:8d:8c:51:02:1d:d8:ff:9b:52:91:4a:95:14:95:
71:22:48:fe:a3:ae:4e:03:79:40:5a:34:d7:23:0a:ae:0c:56:
e6:78:57:34:aa:65:94:d3:7c:31:0c:a4:71:dc:25:56:d0:3e:
71:80:86:e6:d4:d8:a0:9c:d2:15:11:32:2f:e8:6f:f7:5d:4c:
35:8b:41:0a:ae:f1:88:cf:05:d9:c2:00:eb:19:52:3b:f9:83:
d8:8d:5b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8P+tZT1T/GqLGFUat5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy
MzZhMDYwHhcNMjYwMzI1MTkwMTQzWhcNMjYwMzI2MTkwMTQzWjAzMTEwLwYDVQQD
EygxY2E4M2ZkMDA0OGY4MWM2YmMyMGRjZWU5MTliODU4YWFhYTYxZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBVuTY3hT0hPh6hTECwdmKPngpS
K7UNDsnOIzoPcISv8hlTPrUHpXHFLS4ELCJNB+d1dqsC3279QmYsKMF3Mb9BlvgN
1D4GduFZor9165vPhbwi9ex6X99iFjapE8gmVrv+IJ6NE8FxlsE3n65I40IYeqOF
WdV8M96AWF0tRkgbGnb82Y9z92653rw6TV5uW0WeJpZa0G9Z5OeR+dZ3/VYOknrQ
SPPOYZdrqZR26p+Bik1jlUHpAhft0BWZB6Z31el5He79ct5hlBTOTbmGOHMZ0vfV
QXX4DCANyvQaKXr4/WVt1el01JxSIUBfwkbKGKEwZsRpdlfKbA4N4gGQ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByoP9AEj4HGvCDc7pGbhYqqph2iMB8GA1UdIwQY
MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt
NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl
LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3vTMNcT
UVe2YzLQmaMnVUUXx/a5tx8xA+kjgRfmc4+yUX/jodZ28pG5GQlmw3xa0HtVKBts
HlHCuqWoxDSgJxaLrxhWKO682pn2UN9i2SIGCOjXTup4pqPHzOpqRs/LbX1Z4d/1
pzD+VcyxoA0o+JZSl5u7strfiCZSzzdNLQetfPmzPLZJy3zeYlLbHNrsFx0xcFOE
rjwhT6qWiO2T1kidH6x0b42MUQId2P+bUpFKlRSVcSJI/qOuTgN5QFo01yMKrgxW
5nhXNKpllNN8MQykcdwlVtA+cYCG5tTYoJzSFREyL+hv911MNYtBCq7xiM8F2cIA
6xlSO/mD2I1bHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:47 2026 by rpki-client